From 3f662fb247e396a78dae43b17f50b42fd85c67d8 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 07:29:36 +0700
Subject: [PATCH 001/148] Add deterministic viewport-aware phasor label layout

---
 .../Presentation/PhasorLabelLayout.cs         | 69 +++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs

diff --git a/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
new file mode 100644
index 00000000..ed11de1f
--- /dev/null
+++ b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
@@ -0,0 +1,69 @@
+namespace ProcessBus.Core.Presentation;
+
+/// <summary>
+/// A six-vector plot has little room for text. Keep label placement deterministic,
+/// inside the viewport, and independent of WPF so the engineering readout can be tested.
+/// This is presentation geometry only: it never changes measured phasor angles.
+/// </summary>
+public readonly record struct PhasorLabelAnchor(
+    double TipX, double TipY, double Width, double Height, bool Right);
+
+public readonly record struct PhasorLabelPosition(double X, double Y);
+
+public static class PhasorLabelLayout
+{
+    public static PhasorLabelPosition[] Arrange(
+        IReadOnlyList<PhasorLabelAnchor> anchors,
+        double width,
+        double height,
+        double topPadding = 20,
+        double bottomPadding = 22,
+        double gap = 2)
+    {
+        var positions = new PhasorLabelPosition[anchors.Count];
+        for (var side = 0; side < 2; side++)
+        {
+            var right = side == 1;
+            var indices = new List<int>(anchors.Count);
+            for (var i = 0; i < anchors.Count; i++)
+                if (anchors[i].Right == right)
+                    indices.Add(i);
+
+            // Stable tie-breaker prevents jitter when two vectors share an angle.
+            indices.Sort((a, b) =>
+            {
+                var order = anchors[a].TipY.CompareTo(anchors[b].TipY);
+                return order != 0 ? order : a.CompareTo(b);
+            });
+
+            var top = Math.Max(0, topPadding);
+            var bottom = Math.Max(top, height - Math.Max(0, bottomPadding));
+            var cursor = top;
+            foreach (var index in indices)
+            {
+                var label = anchors[index];
+                var desiredY = label.TipY - label.Height / 2;
+                var y = Math.Max(cursor, Math.Max(top, desiredY));
+                positions[index] = new PhasorLabelPosition(
+                    Math.Clamp(right ? width - label.Width - 4 : 4, 0, Math.Max(0, width - label.Width)),
+                    y);
+                cursor = y + label.Height + gap;
+            }
+
+            // Resolve bottom overflow backwards while preserving sorted order.
+            // The six phasor labels comfortably fit in the normal 210px WPF panel.
+            var ceiling = bottom;
+            for (var i = indices.Count - 1; i >= 0; i--)
+            {
+                var index = indices[i];
+                var label = anchors[index];
+                var position = positions[index];
+                var y = Math.Max(top, Math.Min(position.Y, ceiling - label.Height));
+                positions[index] = position with { Y = y };
+                ceiling = y - gap;
+            }
+        }
+
+        return positions;
+    }
+}

From d2e11cc31d08709935380b6aedaeaa934c20c165 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 07:31:36 +0700
Subject: [PATCH 002/148] Redraw phasors from SSOT with collision-safe labels
 and low-allocation rendering

---
 .../Controls/PhasorDiagramControl.cs          | 459 ++++++++----------
 1 file changed, 215 insertions(+), 244 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
index 453c68d0..bc38a935 100644
--- a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
+++ b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
@@ -2,15 +2,22 @@
 using System.Windows;
 using System.Windows.Media;
 using ProcessBus.Core.Models;
+using ProcessBus.Core.Presentation;
 
 namespace ProcessBus.App.Wpf.Controls;
 
+/// <summary>
+/// A strictly presentational six-vector plot. Angles and magnitudes come ONLY from
+/// the selected stream's engineering snapshot; no nominal templates, tweening,
+/// phase correction, or packet-rate redraws are performed by this control.
+/// </summary>
 public sealed class PhasorDiagramControl : FrameworkElement
 {
     private const double VoltageRadiusFactor = 0.96;
-    private const double CurrentRadiusFactor = 0.78;
-    private const double VoltageLineThickness = 3.2;
-    private const double CurrentLineThickness = 2.8;
+    private const double CurrentRadiusFactor = 0.73;
+    private const double VoltageLineThickness = 2.7;
+    private const double CurrentLineThickness = 2.4;
+
     private IReadOnlyList<PhasorDisplayItem> _visualItems = Array.Empty<PhasorDisplayItem>();
 
     public static readonly DependencyProperty ItemsSourceProperty =
@@ -23,26 +30,54 @@ public sealed class PhasorDiagramControl : FrameworkElement
                 FrameworkPropertyMetadataOptions.AffectsRender,
                 OnItemsSourceChanged));
 
-    private static readonly double[] RingFractions = [0.25, 0.5, 0.75, 1.0];
+    public static readonly DependencyProperty IsStreamLiveProperty =
+        DependencyProperty.Register(
+            nameof(IsStreamLive),
+            typeof(bool),
+            typeof(PhasorDiagramControl),
+            new FrameworkPropertyMetadata(false, FrameworkPropertyMetadataOptions.AffectsRender));
 
     private static readonly Brush PanelBrush = CreateBrush("#0C1B2B");
-    private static readonly Brush TextPrimaryBrush = CreateBrush("#EAF3FF");
     private static readonly Brush TextSecondaryBrush = CreateBrush("#A7B8CB");
     private static readonly Brush TextMutedBrush = CreateBrush("#7E93AA");
+    private static readonly Brush StaleBrush = CreateBrush("#F0B533");
     private static readonly Brush OriginBrush = CreateBrush("#EAF3FF");
+    private static readonly Brush OriginInnerBrush = CreateBrush("#1D8FFF");
 
-    private static readonly Brush PhaseRBrush = CreateBrush("#E3263A");
+    private static readonly Brush PhaseRBrush = CreateBrush("#F02D4A");
     private static readonly Brush PhaseSBrush = CreateBrush("#F5B400");
-    private static readonly Brush PhaseTBrush = CreateBrush("#1E7BD6");
-
-    private static readonly Pen OuterBorderPen = CreatePen("#1D8FFF", 1.55);
-    private static readonly Pen RingPen = CreatePen("#28445E", 1.0, [4.0, 6.0]);
-    private static readonly Pen AxisPen = CreatePen("#45627E", 1.35);
-    private static readonly Pen DiagonalPen = CreatePen("#1D344E", 0.9, [3.0, 5.0]);
-
-    private static readonly Typeface TitleTypeface = new(new FontFamily("Segoe UI"), FontStyles.Normal, FontWeights.Bold, FontStretches.Normal);
-    private static readonly Typeface LabelTypeface = new(new FontFamily("Segoe UI"), FontStyles.Normal, FontWeights.SemiBold, FontStretches.Normal);
-    private static readonly Typeface BodyTypeface = new(new FontFamily("Segoe UI"), FontStyles.Normal, FontWeights.Normal, FontStretches.Normal);
+    private static readonly Brush PhaseTBrush = CreateBrush("#258DF4");
+
+    private static readonly Pen OuterBorderPen = CreatePen(CreateBrush("#1D8FFF"), 1.4);
+    private static readonly Pen RingPen = CreatePen(CreateBrush("#28445E"), 1.0, [3.0, 5.0]);
+    private static readonly Pen AxisPen = CreatePen(CreateBrush("#45627E"), 1.2);
+    private static readonly Pen DiagonalPen = CreatePen(CreateBrush("#1D344E"), 0.85, [2.5, 5.0]);
+    private static readonly Pen LeaderPen = CreatePen(CreateBrush("#58748E"), 0.75);
+    private static readonly Pen[] VoltagePens =
+    [
+        CreatePen(PhaseRBrush, VoltageLineThickness),
+        CreatePen(PhaseSBrush, VoltageLineThickness),
+        CreatePen(PhaseTBrush, VoltageLineThickness)
+    ];
+    private static readonly Pen[] CurrentPens =
+    [
+        CreatePen(PhaseRBrush, CurrentLineThickness, [3.0, 1.8]),
+        CreatePen(PhaseSBrush, CurrentLineThickness, [3.0, 1.8]),
+        CreatePen(PhaseTBrush, CurrentLineThickness, [3.0, 1.8])
+    ];
+    private static readonly Pen[] CurrentArrowPens =
+    [
+        CreatePen(PhaseRBrush, CurrentLineThickness),
+        CreatePen(PhaseSBrush, CurrentLineThickness),
+        CreatePen(PhaseTBrush, CurrentLineThickness)
+    ];
+
+    private static readonly Typeface LabelTypeface =
+        new(new FontFamily("Segoe UI"), FontStyles.Normal, FontWeights.SemiBold, FontStretches.Normal);
+    private static readonly Typeface BodyTypeface =
+        new(new FontFamily("Segoe UI"), FontStyles.Normal, FontWeights.Normal, FontStretches.Normal);
+
+    private readonly record struct RenderedVector(PhasorDisplayItem Item, Point Tip, Brush Brush, FormattedText Label);
 
     public IEnumerable<PhasorDisplayItem>? ItemsSource
     {
@@ -50,271 +85,218 @@ public IEnumerable<PhasorDisplayItem>? ItemsSource
         set => SetValue(ItemsSourceProperty, value);
     }
 
-    public PhasorDiagramControl()
+    /// <summary>
+    /// False means the arrows are a historical HOLD, not evidence of live traffic.
+    /// This flag is bound to the selected SV stream's existing IsActive state.
+    /// </summary>
+    public bool IsStreamLive
     {
-        // Deliberately no vector tweening here. Protection/substation phasors must show
-        // the latest computed state immediately; animation hides real state changes.
+        get => (bool)GetValue(IsStreamLiveProperty);
+        set => SetValue(IsStreamLiveProperty, value);
     }
 
-    private static void OnItemsSourceChanged(DependencyObject dependencyObject, DependencyPropertyChangedEventArgs args)
+    private static void OnItemsSourceChanged(DependencyObject obj, DependencyPropertyChangedEventArgs args)
     {
-        if (dependencyObject is not PhasorDiagramControl control)
+        if (obj is not PhasorDiagramControl control)
             return;
 
-        var next = ((IEnumerable<PhasorDisplayItem>?)args.NewValue)?.ToArray() ?? [];
-        // ARSVIN-style receiver behavior: phasor vectors are not animated/tweened.
-        // The view renders the latest computed RMS/angle snapshot directly, so a publisher
-        // phase/state change is visible on the next UI tick instead of taking seconds to settle.
-        control._visualItems = next;
-        control.InvalidateVisual();
+        // Copy just the small selected-stream presentation list when it changes.
+        // Do not re-enumerate, allocate brushes/pens, or transform packets on repaint.
+        control._visualItems = ((IEnumerable<PhasorDisplayItem>?)args.NewValue)?.ToArray() ?? [];
     }
 
     protected override Size MeasureOverride(Size availableSize)
     {
-        var width = double.IsInfinity(availableSize.Width) ? 360 : availableSize.Width;
-        var height = double.IsInfinity(availableSize.Height) ? 360 : availableSize.Height;
-        // Do not impose 280px into a 210px high WPF row: the previous desired
-        // size overflowed its clip and cut off vectors / phase labels.
-        return new Size(Math.Max(120, width), Math.Max(140, height));
+        // Respect constrained WPF rows; requesting a larger plot causes label clipping.
+        var width = double.IsInfinity(availableSize.Width) ? 290 : Math.Max(0, availableSize.Width);
+        var height = double.IsInfinity(availableSize.Height) ? 245 : Math.Max(0, availableSize.Height);
+        return new Size(width, height);
     }
 
     protected override void OnRender(DrawingContext dc)
     {
         base.OnRender(dc);
 
-        var bounds = new Rect(new Point(0, 0), RenderSize);
-        dc.DrawRectangle(PanelBrush, null, bounds);
-
-        var items = _visualItems.Count > 0
-            ? _visualItems.ToArray()
-            : ItemsSource?.ToArray() ?? [];
-        var validItems = items.Where(static item => item.HasValue).ToArray();
-
-        var voltageMax = validItems.Where(static item => item.Family == PhasorFamily.Voltage)
-            .Select(static item => item.Magnitude!.Value)
-            .DefaultIfEmpty()
-            .Max();
-
-        var currentMax = validItems.Where(static item => item.Family == PhasorFamily.Current)
-            .Select(static item => item.Magnitude!.Value)
-            .DefaultIfEmpty()
-            .Max();
-
-        var plotRect = new Rect(
-            bounds.Left + 10,
-            bounds.Top + 10,
-            Math.Max(120, bounds.Width - 20),
-            Math.Max(150, bounds.Height - 20));
-
-        var center = new Point(
-            plotRect.Left + plotRect.Width / 2.0,
-            plotRect.Top + plotRect.Height / 2.0);
+        var width = RenderSize.Width;
+        var height = RenderSize.Height;
+        dc.DrawRectangle(PanelBrush, null, new Rect(0, 0, width, height));
+        if (width < 130 || height < 130)
+            return;
 
-        var radius = Math.Max(0, Math.Min(plotRect.Width, plotRect.Height) / 2.0 - 24.0);
+        // Reserve side rails for collision-free labels, rather than letting text
+        // overlap the arrows or escape beyond the narrow analyzer workspace.
+        var center = new Point(width / 2.0, height / 2.0 - 2);
+        var radius = Math.Max(0, Math.Min(width / 2.0 - 69, height / 2.0 - 35));
+        if (radius < 12)
+            return;
 
         DrawGrid(dc, center, radius);
 
-        if (validItems.Length == 0)
+        var voltageMax = 0.0;
+        var currentMax = 0.0;
+        foreach (var item in _visualItems)
+        {
+            if (!IsRenderable(item))
+                continue;
+            if (item.Family == PhasorFamily.Voltage)
+                voltageMax = Math.Max(voltageMax, item.Magnitude!.Value);
+            else
+                currentMax = Math.Max(currentMax, item.Magnitude!.Value);
+        }
+
+        if (voltageMax <= 0 && currentMax <= 0)
         {
             DrawCenteredMessage(dc, center, "Phasor data pending");
             return;
         }
 
-        DrawSoftOriginGlow(dc, center);
-
-        foreach (var item in validItems)
-            DrawPhasor(dc, bounds, center, radius, item, voltageMax, currentMax);
-
-    }
-
-    private static void DrawGrid(DrawingContext dc, Point center, double radius)
-    {
-        if (radius <= 10)
-            return;
+        var vectors = new List<RenderedVector>(6);
+        dc.PushOpacity(IsStreamLive ? 1.0 : 0.42);
+        foreach (var item in _visualItems)
+        {
+            if (!IsRenderable(item))
+                continue;
+
+            var maximum = item.Family == PhasorFamily.Voltage ? voltageMax : currentMax;
+            if (maximum <= 0)
+                continue;
+
+            // U and I use independent normalized radii. Never compare V with A
+            // numerically or infer absolute magnitudes from the same circle.
+            var fraction = Math.Clamp(item.Magnitude!.Value / maximum, 0.0, 1.0);
+            var range = item.Family == PhasorFamily.Voltage
+                ? VoltageRadiusFactor : CurrentRadiusFactor;
+            var radians = item.AngleDegrees!.Value * Math.PI / 180.0;
+            var length = radius * range * fraction;
+            var tip = new Point(
+                center.X + length * Math.Cos(radians),
+                center.Y - length * Math.Sin(radians));
+            var phase = PhaseIndex(item.Name);
+            var brush = PhaseBrush(phase);
+            var pen = item.Family == PhasorFamily.Voltage ? VoltagePens[phase] : CurrentPens[phase];
+            var arrowPen = item.Family == PhasorFamily.Voltage ? pen : CurrentArrowPens[phase];
+
+            dc.DrawLine(pen, center, tip);
+            DrawArrow(dc, center, tip, arrowPen, item.Family == PhasorFamily.Voltage ? 9.5 : 8.0);
+            vectors.Add(new RenderedVector(item, tip, brush,
+                CreateText(ToPhaseLabel(item.Name), 11.0, brush, LabelTypeface)));
+        }
 
-        // soft outer glow
-        dc.DrawEllipse(null, CreatePen("#0D3357", 5.0), center, radius + 1.0, radius + 1.0);
+        dc.DrawEllipse(OriginInnerBrush, null, center, 4.2, 4.2);
+        dc.DrawEllipse(OriginBrush, null, center, 2.25, 2.25);
 
-        foreach (var fraction in RingFractions)
+        var anchors = new PhasorLabelAnchor[vectors.Count];
+        for (var i = 0; i < vectors.Count; i++)
         {
-            var pen = Math.Abs(fraction - 1.0) < 0.001 ? OuterBorderPen : RingPen;
-            dc.DrawEllipse(null, pen, center, radius * fraction, radius * fraction);
+            var vector = vectors[i];
+            anchors[i] = new PhasorLabelAnchor(
+                vector.Tip.X, vector.Tip.Y,
+                vector.Label.Width, vector.Label.Height,
+                vector.Tip.X >= center.X);
         }
 
-        dc.DrawLine(AxisPen, new Point(center.X - radius, center.Y), new Point(center.X + radius, center.Y));
-        dc.DrawLine(AxisPen, new Point(center.X, center.Y - radius), new Point(center.X, center.Y + radius));
+        var positions = PhasorLabelLayout.Arrange(anchors, width, height,
+            topPadding: IsStreamLive ? 18 : 30,
+            bottomPadding: 25);
 
-        var diagonalOffset = radius / Math.Sqrt(2.0);
-        dc.DrawLine(DiagonalPen, new Point(center.X - diagonalOffset, center.Y - diagonalOffset), new Point(center.X + diagonalOffset, center.Y + diagonalOffset));
-        dc.DrawLine(DiagonalPen, new Point(center.X + diagonalOffset, center.Y - diagonalOffset), new Point(center.X - diagonalOffset, center.Y + diagonalOffset));
+        for (var i = 0; i < vectors.Count; i++)
+        {
+            var vector = vectors[i];
+            var position = positions[i];
+            var onRight = anchors[i].Right;
+            var endpoint = new Point(
+                onRight ? position.X - 3 : position.X + vector.Label.Width + 3,
+                position.Y + vector.Label.Height / 2.0);
+            dc.DrawLine(LeaderPen, vector.Tip, endpoint);
+            dc.DrawText(vector.Label, new Point(position.X, position.Y));
+        }
+        dc.Pop();
 
-        DrawSmallText(dc, "0°", new Point(center.X + radius + 6, center.Y - 10), TextMutedBrush);
-        DrawSmallText(dc, "+90°", new Point(center.X - 16, center.Y - radius - 20), TextMutedBrush);
-        DrawSmallText(dc, "180°", new Point(center.X - radius - 38, center.Y - 10), TextMutedBrush);
-        DrawSmallText(dc, "-90°", new Point(center.X - 16, center.Y + radius + 4), TextMutedBrush);
+        DrawText(dc, "U solid  ·  I dashed  ·  separate scales",
+            9.0, new Point(6, height - 16), TextMutedBrush, BodyTypeface);
+        if (!IsStreamLive)
+            DrawText(dc, "STALE · last valid samples", 11, new Point(7, 5), StaleBrush, LabelTypeface);
     }
 
-    private static void DrawSoftOriginGlow(DrawingContext dc, Point center)
-    {
-        dc.DrawEllipse(CreateBrush("#123F68"), null, center, 10.0, 10.0);
-        dc.DrawEllipse(CreateBrush("#1D8FFF"), null, center, 6.2, 6.2);
-        dc.DrawEllipse(OriginBrush, null, center, 4.0, 4.0);
-    }
+    private static bool IsRenderable(PhasorDisplayItem item) =>
+        item.HasValue &&
+        double.IsFinite(item.Magnitude!.Value) &&
+        double.IsFinite(item.AngleDegrees!.Value) &&
+        item.Magnitude.Value > 0;
 
-    private static void DrawPhasor(DrawingContext dc, Rect bounds, Point center, double radius, PhasorDisplayItem item, double voltageMax, double currentMax)
+    private static int PhaseIndex(string name) => name switch
     {
-        var maxMagnitude = item.Family == PhasorFamily.Voltage ? voltageMax : currentMax;
-        if (maxMagnitude <= 0)
-            return;
-
-        var normalized = Math.Clamp(item.Magnitude!.Value / maxMagnitude, 0.0, 1.0);
-
-        var familyRadius = item.Family == PhasorFamily.Voltage
-            ? radius * VoltageRadiusFactor
-            : radius * CurrentRadiusFactor;
-
-        var visualLength = familyRadius * normalized;
-        var radians = item.AngleDegrees!.Value * Math.PI / 180.0;
-
-        var end = new Point(
-            center.X + visualLength * Math.Cos(radians),
-            center.Y - visualLength * Math.Sin(radians));
-
-        var brush = GetBrush(item);
-        var glowPen = new Pen(CloneWithOpacity(brush, 0.20), item.Family == PhasorFamily.Voltage ? 8.0 : 6.5)
-        {
-            StartLineCap = PenLineCap.Round,
-            EndLineCap = PenLineCap.Round
-        };
-        glowPen.Freeze();
-
-        var pen = CreateVectorPen(item, brush);
+        "Ub" or "Ib" => 1,
+        "Uc" or "Ic" => 2,
+        _ => 0
+    };
 
-        dc.DrawLine(glowPen, center, end);
-        dc.DrawLine(pen, center, end);
-
-        DrawArrowHead(dc, center, end, brush, item.Family == PhasorFamily.Voltage ? 17.0 : 15.0);
-        DrawVectorLabel(dc, bounds, item, center, end, brush);
-    }
+    private static Brush PhaseBrush(int index) => index switch
+    {
+        1 => PhaseSBrush,
+        2 => PhaseTBrush,
+        _ => PhaseRBrush
+    };
 
-    private static void DrawArrowHead(DrawingContext dc, Point start, Point end, Brush brush, double arrowLength)
+    private static string ToPhaseLabel(string name) => name switch
     {
-        var direction = end - start;
-        if (direction.Length <= 0.001)
+        "Ua" => "Ua (R)",
+        "Ub" => "Ub (S)",
+        "Uc" => "Uc (T)",
+        "Ia" => "Ia (R)",
+        "Ib" => "Ib (S)",
+        "Ic" => "Ic (T)",
+        _ => name
+    };
+
+    private static void DrawArrow(DrawingContext dc, Point origin, Point tip, Pen pen, double size)
+    {
+        var direction = tip - origin;
+        if (direction.LengthSquared < 1)
             return;
 
         direction.Normalize();
         var normal = new Vector(-direction.Y, direction.X);
-        var arrowWidth = arrowLength * 0.46;
-
-        var p1 = end;
-        var p2 = end - direction * arrowLength + normal * arrowWidth;
-        var p3 = end - direction * arrowLength - normal * arrowWidth;
-
-        var geometry = new StreamGeometry();
-        using var ctx = geometry.Open();
-        ctx.BeginFigure(p1, true, true);
-        ctx.LineTo(p2, true, false);
-        ctx.LineTo(p3, true, false);
-        geometry.Freeze();
-
-        dc.DrawGeometry(brush, null, geometry);
-    }
-
-    private static void DrawVectorLabel(DrawingContext dc, Rect bounds, PhasorDisplayItem item, Point center, Point end, Brush brush)
-    {
-        var direction = end - center;
-        if (direction.Length <= 0.001)
-            direction = new Vector(1, 0);
-        else
-            direction.Normalize();
-
-        var label = ToPhaseLabel(item.Name);
-        var labelPoint = end + direction * 11.0;
-
-        if (direction.X >= 0)
-            labelPoint.X += 5;
-        else
-            labelPoint.X -= 48;
-
-        if (direction.Y >= 0)
-            labelPoint.Y += 2;
-        else
-            labelPoint.Y -= 17;
-
-        var text = CreateText(label, 11.5, brush, LabelTypeface);
-        labelPoint.X = Math.Clamp(labelPoint.X, bounds.Left + 4, Math.Max(bounds.Left + 4, bounds.Right - text.Width - 4));
-        labelPoint.Y = Math.Clamp(labelPoint.Y, bounds.Top + 4, Math.Max(bounds.Top + 4, bounds.Bottom - text.Height - 4));
-        dc.DrawText(text, labelPoint);
+        dc.DrawLine(pen, tip, tip - direction * size + normal * (size * 0.42));
+        dc.DrawLine(pen, tip, tip - direction * size - normal * (size * 0.42));
     }
 
-    private static void DrawCenteredMessage(DrawingContext dc, Point center, string text)
+    private void DrawGrid(DrawingContext dc, Point center, double radius)
     {
-        var formatted = CreateText(text, 17, TextSecondaryBrush, LabelTypeface);
-        dc.DrawText(formatted, new Point(center.X - formatted.Width / 2.0, center.Y - formatted.Height / 2.0));
+        foreach (var fraction in new[] { 0.25, 0.5, 0.75, 1.0 })
+            dc.DrawEllipse(null, fraction == 1.0 ? OuterBorderPen : RingPen,
+                center, radius * fraction, radius * fraction);
+
+        dc.DrawLine(AxisPen, new Point(center.X - radius, center.Y),
+            new Point(center.X + radius, center.Y));
+        dc.DrawLine(AxisPen, new Point(center.X, center.Y - radius),
+            new Point(center.X, center.Y + radius));
+
+        var offset = radius / Math.Sqrt(2);
+        dc.DrawLine(DiagonalPen, new Point(center.X - offset, center.Y - offset),
+            new Point(center.X + offset, center.Y + offset));
+        dc.DrawLine(DiagonalPen, new Point(center.X + offset, center.Y - offset),
+            new Point(center.X - offset, center.Y + offset));
+
+        // Tick labels stay inside the ring so they cannot collide with side labels.
+        DrawText(dc, "0°", 9, new Point(center.X + radius - 19, center.Y + 4), TextMutedBrush, BodyTypeface);
+        DrawText(dc, "180°", 9, new Point(center.X - radius + 4, center.Y + 4), TextMutedBrush, BodyTypeface);
+        DrawText(dc, "+90°", 9, new Point(center.X + 5, center.Y - radius + 3), TextMutedBrush, BodyTypeface);
+        DrawText(dc, "-90°", 9, new Point(center.X + 5, center.Y + radius - 14), TextMutedBrush, BodyTypeface);
     }
 
-    private static Brush GetBrush(PhasorDisplayItem item)
+    private void DrawCenteredMessage(DrawingContext dc, Point center, string message)
     {
-        return item.Name switch
-        {
-            "Ua" => PhaseRBrush,
-            "Ub" => PhaseSBrush,
-            "Uc" => PhaseTBrush,
-            "Ia" => PhaseRBrush,
-            "Ib" => PhaseSBrush,
-            "Ic" => PhaseTBrush,
-            _ => item.Family == PhasorFamily.Voltage ? PhaseRBrush : PhaseRBrush
-        };
+        var text = CreateText(message, 12, TextSecondaryBrush, BodyTypeface);
+        dc.DrawText(text, new Point(center.X - text.Width / 2, center.Y - text.Height / 2));
     }
 
-    private static string ToPhaseLabel(string name)
-    {
-        return name switch
-        {
-            "Ua" => "Ua (R)",
-            "Ub" => "Ub (S)",
-            "Uc" => "Uc (T)",
-            "Ia" => "Ia (R)",
-            "Ib" => "Ib (S)",
-            "Ic" => "Ic (T)",
-            _ => name
-        };
-    }
+    private void DrawText(DrawingContext dc, string value, double size, Point point, Brush brush, Typeface typeface) =>
+        dc.DrawText(CreateText(value, size, brush, typeface), point);
 
-    private static Pen CreateVectorPen(PhasorDisplayItem item, Brush brush)
-    {
-        var pen = new Pen(brush, item.Family == PhasorFamily.Voltage ? VoltageLineThickness : CurrentLineThickness)
-        {
-            StartLineCap = PenLineCap.Round,
-            EndLineCap = PenLineCap.Round
-        };
-
-        pen.Freeze();
-        return pen;
-    }
-
-    private static void DrawSmallText(DrawingContext dc, string text, Point point, Brush brush)
-    {
-        DrawText(dc, text, 11, point, brush, BodyTypeface);
-    }
-
-    private static void DrawText(DrawingContext dc, string text, double size, Point point, Brush brush, Typeface typeface)
-    {
-        dc.DrawText(CreateText(text, size, brush, typeface), point);
-    }
-
-    private static FormattedText CreateText(string text, double size, Brush brush, Typeface typeface)
-    {
-        return new FormattedText(
-            text,
-            CultureInfo.InvariantCulture,
-            FlowDirection.LeftToRight,
-            typeface,
-            size,
-            brush,
-            VisualTreeHelper.GetDpi(Application.Current.MainWindow).PixelsPerDip);
-    }
+    private FormattedText CreateText(string value, double size, Brush brush, Typeface typeface) =>
+        new(value, CultureInfo.InvariantCulture, FlowDirection.LeftToRight,
+            typeface, size, brush, VisualTreeHelper.GetDpi(this).PixelsPerDip);
 
     private static Brush CreateBrush(string hex)
     {
@@ -323,23 +305,12 @@ private static Brush CreateBrush(string hex)
         return brush;
     }
 
-    private static SolidColorBrush CloneWithOpacity(Brush brush, double opacity)
-    {
-        var color = brush is SolidColorBrush solid ? solid.Color : Colors.Black;
-        var clone = new SolidColorBrush(color) { Opacity = opacity };
-        clone.Freeze();
-        return clone;
-    }
-
-    private static Pen CreatePen(string hex, double thickness, double[]? dashArray = null)
+    private static Pen CreatePen(Brush brush, double thickness, double[]? dash = null)
     {
-        var pen = new Pen(CreateBrush(hex), thickness);
-        if (dashArray is not null)
-            pen.DashStyle = new DashStyle(dashArray, 0);
-
+        var pen = new Pen(brush, thickness);
+        if (dash is not null)
+            pen.DashStyle = new DashStyle(dash, 0);
         pen.Freeze();
         return pen;
     }
-
 }
-

From c0319014b627664f18394998c446c43889bc0db2 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 07:32:32 +0700
Subject: [PATCH 003/148] Coalesce phasor redraws by RMS and angle, not
 instantaneous sample

---
 .../Presentation/LiveRenderCoalescer.cs       | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs b/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs
index c255e86d..48e9310c 100644
--- a/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs
+++ b/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs
@@ -51,6 +51,25 @@ public static bool SameAnalog(AnalogValuesSnapshot left, AnalogValuesSnapshot ri
         SameChannel(left.Ua, right.Ua) && SameChannel(left.Ub, right.Ub) &&
         SameChannel(left.Uc, right.Uc) && SameChannel(left.Un, right.Un);
 
+    /// <summary>
+    /// Only RMS magnitude, electrical angle and engineering unit define a displayed
+    /// phasor. A new instantaneous SV sample must update the digital readout without
+    /// forcing six arrow/label recalculations when the phasors themselves are unchanged.
+    /// No quantization: genuine small angle or magnitude changes still redraw.
+    /// </summary>
+    public static bool SamePhasors(AnalogValuesSnapshot left, AnalogValuesSnapshot right) =>
+        SamePhasorChannel(left.Ua, right.Ua) &&
+        SamePhasorChannel(left.Ub, right.Ub) &&
+        SamePhasorChannel(left.Uc, right.Uc) &&
+        SamePhasorChannel(left.Ia, right.Ia) &&
+        SamePhasorChannel(left.Ib, right.Ib) &&
+        SamePhasorChannel(left.Ic, right.Ic);
+
+    private static bool SamePhasorChannel(ChannelValueModel a, ChannelValueModel b) =>
+        a.RmsValue == b.RmsValue &&
+        a.AngleDegrees == b.AngleDegrees &&
+        string.Equals(a.Unit, b.Unit, StringComparison.Ordinal);
+
     private static bool SameChannel(ChannelValueModel a, ChannelValueModel b) =>
         a.InstantValue == b.InstantValue && a.RmsValue == b.RmsValue &&
         a.AngleDegrees == b.AngleDegrees &&

From 8e90603a16658070e6b4255680192e5d29b53c06 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 07:33:06 +0700
Subject: [PATCH 004/148] Remove UI phase-reference overrides and avoid
 redundant phasor repaints

---
 .../ViewModels/MainWindowViewModel.cs         | 61 +++++++------------
 1 file changed, 22 insertions(+), 39 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index 2b3841bb..79187082 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -48,6 +48,7 @@ public sealed class MainWindowViewModel : INotifyPropertyChanged, IDisposable
     private IReadOnlyList<GooseMessageItem> _gooseMessages = Array.Empty<GooseMessageItem>();
     private GooseMonitorSnapshot _gooseSnapshot = new();
     private IReadOnlyList<PhasorDisplayItem> _phasors = Array.Empty<PhasorDisplayItem>();
+    private IReadOnlyList<PhasorDisplayItem>? _lastRaisedPhasors;
     private AnalogValuesSnapshot? _lastPhasorSourceSnapshot;
     private StreamDetailsModel? _displayedSelectedStreamDetails;
     private AnalogValuesSnapshot _displayedAnalogValues = new();
@@ -2289,16 +2290,12 @@ private void UpdateSelectedStreamWorkspaceFromSnapshot(string? selectedStreamId,
         OnPropertyChanged(nameof(SelectedEngineeringScale));
         OnPropertyChanged(nameof(EngineeringScaleExplanation));
 
-        // ARSVIN-style display contract: phasor vectors are derived from the latest
-        // engineering snapshot on every UI refresh. Do not use object-reference caching
-        // here. The raw analyzer may legitimately hold/reuse an AnalogValuesSnapshot while
-        // the SV window is settling, and previous reference caching made the phasor panel
-        // appear frozen until a user click rebuilt the SV workspace. Six vectors are cheap;
-        // correctness and responsiveness are more important than suppressing this tiny
-        // allocation.
+        // One SSOT: derive vectors from the selected stream's engineering snapshot.
+        // Do not recalculate arrows when only the instantaneous sample has changed.
+        // Exact RMS/angle comparisons retain immediate response to genuine transients.
         _displayedAnalogValues = analogValues;
         if (_lastPhasorSourceSnapshot is null ||
-            !LiveRenderCoalescer.SameAnalog(_lastPhasorSourceSnapshot, _displayedAnalogValues) ||
+            !LiveRenderCoalescer.SamePhasors(_lastPhasorSourceSnapshot, _displayedAnalogValues) ||
             !string.Equals(_lastPhasorSourceStreamId, selectedStreamId, StringComparison.Ordinal))
         {
             _phasors = BuildPhasorItems(_displayedAnalogValues);
@@ -2666,8 +2663,11 @@ private void RaiseAnalyzerRenderProperties(bool force = false)
         OnPropertyChanged(nameof(WaveformHeaderWindowText));
         OnPropertyChanged(nameof(WaveformHeaderStatusText));
         OnPropertyChanged(nameof(WaveformShapeStatusText));
-        if (force || analogChanged)
+        if (force || !ReferenceEquals(_lastRaisedPhasors, _phasors))
+        {
+            _lastRaisedPhasors = _phasors;
             OnPropertyChanged(nameof(Phasors));
+        }
         OnPropertyChanged(nameof(WaveformVoltageScale));
         OnPropertyChanged(nameof(WaveformCurrentScale));
     }
@@ -4296,20 +4296,15 @@ private void UpdateRefreshCadence()
         };
     }
 
-    private static IReadOnlyList<PhasorDisplayItem> BuildPhasorItems(AnalogValuesSnapshot analogValues)
-    {
-        var referenceName = ResolvePhasorReferenceName(analogValues);
-
-        return
-        [
-            CreatePhasor("Ua", PhasorFamily.Voltage, analogValues.Ua, forceAngleZero: string.Equals(referenceName, "Ua", StringComparison.OrdinalIgnoreCase)),
-            CreatePhasor("Ub", PhasorFamily.Voltage, analogValues.Ub),
-            CreatePhasor("Uc", PhasorFamily.Voltage, analogValues.Uc),
-            CreatePhasor("Ia", PhasorFamily.Current, analogValues.Ia, forceAngleZero: string.Equals(referenceName, "Ia", StringComparison.OrdinalIgnoreCase)),
-            CreatePhasor("Ib", PhasorFamily.Current, analogValues.Ib),
-            CreatePhasor("Ic", PhasorFamily.Current, analogValues.Ic)
-        ];
-    }
+    private static IReadOnlyList<PhasorDisplayItem> BuildPhasorItems(AnalogValuesSnapshot analogValues) =>
+    [
+        CreatePhasor("Ua", PhasorFamily.Voltage, analogValues.Ua),
+        CreatePhasor("Ub", PhasorFamily.Voltage, analogValues.Ub),
+        CreatePhasor("Uc", PhasorFamily.Voltage, analogValues.Uc),
+        CreatePhasor("Ia", PhasorFamily.Current, analogValues.Ia),
+        CreatePhasor("Ib", PhasorFamily.Current, analogValues.Ib),
+        CreatePhasor("Ic", PhasorFamily.Current, analogValues.Ic)
+    ];
 
     private (double P, double Q, double S) ComputeThreePhasePower()
     {
@@ -4329,28 +4324,16 @@ private static string FormatPower(double value, string unit)
         return $"{value:0.00} {unit}";
     }
 
-    private static string? ResolvePhasorReferenceName(AnalogValuesSnapshot analogValues)
-    {
-        if (analogValues.Ua.RmsValue.HasValue)
-            return "Ua";
-
-        if (analogValues.Ia.RmsValue.HasValue)
-            return "Ia";
-
-        return null;
-    }
-
-    private static PhasorDisplayItem CreatePhasor(string name, PhasorFamily family, ChannelValueModel channel, bool forceAngleZero = false)
-    {
-        return new PhasorDisplayItem
+    private static PhasorDisplayItem CreatePhasor(string name, PhasorFamily family, ChannelValueModel channel) =>
+        new()
         {
             Name = name,
             Family = family,
             Magnitude = channel.RmsValue,
-            AngleDegrees = forceAngleZero && channel.AngleDegrees.HasValue ? 0.0 : channel.AngleDegrees,
+            // The engine alone owns relative-angle/reference interpretation.
+            AngleDegrees = channel.AngleDegrees,
             Unit = channel.Unit
         };
-    }
 
     private bool FilterGooseHistory(object item)
     {

From 86db9a64b37809648cbede82e244db81699be2f0 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 07:33:21 +0700
Subject: [PATCH 005/148] Bind phasor freshness directly to selected stream
 live state

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index 5097587f..b179340b 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -2144,6 +2144,7 @@
                                             <!-- RUNTIME CONTROL (DIMATIKAN DI DESIGNER) -->
                                             <controls:PhasorDiagramControl Grid.Row="1"
                                        ItemsSource="{Binding Phasors}"
+                                       IsStreamLive="{Binding SelectedStream.IsActive}"
                                        MinHeight="210"
                                        SnapsToDevicePixels="True"
                                        d:Visibility="Collapsed"/>

From 8b36a0d378b6310dfb8822267d51775b1c856fb4 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 07:34:29 +0700
Subject: [PATCH 006/148] Regression-test fast phasor updates and
 collision-free compact label placement

---
 .../PhasorPresentationContractTests.cs        | 108 ++++++++++++++++++
 1 file changed, 108 insertions(+)
 create mode 100644 tests/ProcessBus.Tests/PhasorPresentationContractTests.cs

diff --git a/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
new file mode 100644
index 00000000..0fe6e5e5
--- /dev/null
+++ b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
@@ -0,0 +1,108 @@
+using ProcessBus.Core.Models;
+using ProcessBus.Core.Presentation;
+using Xunit;
+
+namespace ProcessBus.Tests;
+
+/// <summary>
+/// Deterministic layout / live-render contracts: no UI-side electrical assumptions
+/// and no dependence on Windows/Npcap to verify the narrow phasor panel.
+/// </summary>
+public sealed class PhasorPresentationContractTests
+{
+    private static ChannelValueModel Channel(string name, double rms, double angle, double instant = 0) =>
+        new(name) { Unit = name.StartsWith("U") ? "V" : "A", RmsValue = rms,
+            AngleDegrees = angle, InstantValue = instant };
+
+    private static AnalogValuesSnapshot Values(
+        double iaAngle = -30, double iaRms = 0.5, double iaInstant = 0) =>
+        new()
+        {
+            Ua = Channel("Ua", 57.73, 0),
+            Ub = Channel("Ub", 57.73, -120),
+            Uc = Channel("Uc", 57.73, 120),
+            Ia = Channel("Ia", iaRms, iaAngle, iaInstant),
+            Ib = Channel("Ib", 1, -150),
+            Ic = Channel("Ic", 1, 90)
+        };
+
+    [Fact]
+    public void InstantaneousSampleChangesDoNotForceFullPhasorRepaint()
+    {
+        var first = Values(iaInstant: 0.1);
+        var next = Values(iaInstant: 0.2);
+        Assert.False(LiveRenderCoalescer.SameAnalog(first, next));
+        Assert.True(LiveRenderCoalescer.SamePhasors(first, next));
+    }
+
+    [Fact]
+    public void AnyMeasuredPhaseOrRmsChangeInvalidatesPhasorImmediately()
+    {
+        var original = Values();
+        Assert.False(LiveRenderCoalescer.SamePhasors(original, Values(iaAngle: -29.999)));
+        Assert.False(LiveRenderCoalescer.SamePhasors(original, Values(iaRms: 0.500001)));
+        // Current C is independently measured; it must never borrow voltage C.
+        Assert.NotEqual(original.Ic.AngleDegrees, original.Uc.AngleDegrees);
+    }
+
+    [Fact]
+    public void MissingPhasorNeverBecomesAnInventedNominalAngle()
+    {
+        var original = Values();
+        var missing = new AnalogValuesSnapshot
+        {
+            Ua = original.Ua, Ub = original.Ub, Uc = original.Uc,
+            Ia = original.Ia, Ib = original.Ib,
+            Ic = new ChannelValueModel("Ic") { RmsValue = 0, Unit = "A" }
+        };
+        Assert.False(LiveRenderCoalescer.SamePhasors(original, missing));
+        Assert.Null(missing.Ic.AngleDegrees);
+    }
+
+    [Theory]
+    [InlineData(298, 220)]
+    [InlineData(320, 280)]
+    [InlineData(215, 210)]
+    public void SixCrowdedLabelsStayInsideNarrowViewportAndNeverOverlap(double width, double height)
+    {
+        // Two co-linear Ua/Ia vectors and clustered Uc/Ic and Ub/Ib labels.
+        var anchors = new[]
+        {
+            new PhasorLabelAnchor(210, 112, 47, 14, true),
+            new PhasorLabelAnchor(85, 166, 47, 14, false),
+            new PhasorLabelAnchor(85, 65, 47, 14, false),
+            new PhasorLabelAnchor(190, 112, 47, 14, true),
+            new PhasorLabelAnchor(95, 162, 47, 14, false),
+            new PhasorLabelAnchor(95, 69, 47, 14, false)
+        };
+        var labels = PhasorLabelLayout.Arrange(anchors, width, height);
+        Assert.Equal(anchors.Length, labels.Length);
+
+        for (var i = 0; i < labels.Length; i++)
+        {
+            Assert.InRange(labels[i].X, 0, width - anchors[i].Width);
+            Assert.InRange(labels[i].Y, 18, height - anchors[i].Height);
+            for (var j = i + 1; j < labels.Length; j++)
+            {
+                if (anchors[i].Right != anchors[j].Right)
+                    continue;
+                var firstBottom = labels[i].Y + anchors[i].Height;
+                var secondBottom = labels[j].Y + anchors[j].Height;
+                Assert.True(firstBottom <= labels[j].Y || secondBottom <= labels[i].Y,
+                    $"Overlapping labels {i}/{j} at height {height}.");
+            }
+        }
+    }
+
+    [Fact]
+    public void SixVectorsSharingOneAngleStillReceiveDistinctStableLabelSlots()
+    {
+        var anchors = Enumerable.Range(0, 6)
+            .Select(_ => new PhasorLabelAnchor(210, 110, 45, 15, true))
+            .ToArray();
+        var labels = PhasorLabelLayout.Arrange(anchors, 290, 210);
+        Assert.Equal(6, labels.Select(x => x.Y).Distinct().Count());
+        Assert.Equal(labels.OrderBy(x => x.Y).ToArray(), labels);
+        Assert.True(labels[^1].Y + 15 <= 188);
+    }
+}

From 35447c6a6734ce4fb5cc071e1c589198359e1bd5 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 07:36:35 +0700
Subject: [PATCH 007/148] Document phasor SSOT invariants and required
 physical-bench validation

---
 docs/PHASOR_SSOT_ACCEPTANCE_2026-10-19.md | 34 +++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 docs/PHASOR_SSOT_ACCEPTANCE_2026-10-19.md

diff --git a/docs/PHASOR_SSOT_ACCEPTANCE_2026-10-19.md b/docs/PHASOR_SSOT_ACCEPTANCE_2026-10-19.md
new file mode 100644
index 00000000..26f8bcd7
--- /dev/null
+++ b/docs/PHASOR_SSOT_ACCEPTANCE_2026-10-19.md
@@ -0,0 +1,34 @@
+# Phasor SSOT and rendering acceptance — 2026-10-19
+
+## Problem and evidence boundary
+
+The analyzer previously corrected a phase-reference angle a second time in its WPF ViewModel, although the selected-stream raw engine had already resolved relative electrical angles. The plot also placed six text labels independently, so coincident or clustered voltage/current angles collided in a narrow layout. Instantaneous-value changes could cause needless phasor item rebuilds, and a stale publisher could leave its last valid arrows looking live.
+
+This change **does not claim that an injector and receiver have been proven equivalent on the wire**. That requires a synchronized captured packet / injector settings comparison for the same svID, APPID, MAC, mapping, quality, smpCnt, RMS scale, and timestamp.
+
+## New invariants
+
+1. **Single authority**: the raw selected-stream snapshot is the only source of RMS magnitude and relative angle. The ViewModel and WPF control do not synthesize, quantize, hold, or rotate electrical angles.
+2. **One selected stream**: measurement, waveform and vectors come from the existing locked selected-stream analyzer snapshot. No new packet decoder, stream cache, worker or UI stream owner is introduced.
+3. **Independent channel truth**: current and voltage phases cannot borrow an angle merely because their R/S/T suffix matches. A missing or zero fundamental has no drawable vector.
+4. **Responsive without churn**: an RMS or angle change (even a tiny one) invalidates the phasor list. An instantaneous sample changing while RMS/angles remain identical does not create a new six-vector plot list. All pens and grid brushes are frozen and reused, no animation or packet-rate WPF callback is added.
+5. **Readable small panels**: voltage vectors use solid strokes, currents use dashed strokes and a separate normalized radius. Labels are packed per side with deterministic ordering and stay in the viewport at supported panel sizes. Voltage and current radii are not directly comparable physical scales.
+6. **Freshness visible**: a non-live selected stream is rendered as a dimmed **STALE · last valid samples** hold; it is not a current live phasor estimate.
+
+## Deterministic regression tests
+
+- Existing `LiveCurrentPhasorRegressionTests` checks individually driven Ia/Ib/Ic versus Ua/Ub/Uc, live phase changes and zero-magnitude suppression.
+- `PhasorPresentationContractTests` checks exact phasor change detection (no angular rounding), no repaints for instantaneous-only changes, independent Ic/Uc, missing-angle behavior and collision avoidance at multiple narrow panel sizes.
+
+## Physical-bench acceptance (required before claiming injector equivalence)
+
+1. Configure a known synthetic 4I+4V stream on the injector and record the source configuration in the test report.
+2. Capture an authorized SV PCAP and note its independent smpCnt/APPID/svID/quality/DataSet mapping; verify the analyzer selected that exact publisher.
+3. Compare each of six decoded channel RMS and relative angle values with injector setpoints, allowing only justified rounding and injection/capture uncertainties. Do not infer channel correctness from waveform color or nominal three-phase templates.
+4. Change **one** current angle, for example Ic +90° to +45°, without changing Uc +120°. Confirm the analyzer's table and arrows follow the changed stream without an explorer click or an intermediate fabricated phase.
+5. Change a voltage magnitude and a current magnitude independently, then stop publishing for more than two seconds. Verify stale status and last-valid-hold labeling.
+6. Run a 15-minute live stream on the target Windows machine; record capture packets/s, UI update latency, CPU utilization and heap growth. This change's lightness is architectural; sustained performance remains **unmeasured** until bench results are attached.
+
+## Build gates
+
+On a Windows .NET 8 runner: `scripts/repository-health.ps1`, solution restore/build and all tests. This feature must not be described as wire-validated or performance-certified solely because unit tests pass.

From 31fee580ed886637c5c73f0f3cb179998bef8463 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:29:04 +0700
Subject: [PATCH 008/148] Add stable Inno Setup 6 Windows installer with
 offline manuals and upgrade identity

---
 installer/ProcessBusInsight.iss | 99 +++++++++++++++++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 installer/ProcessBusInsight.iss

diff --git a/installer/ProcessBusInsight.iss b/installer/ProcessBusInsight.iss
new file mode 100644
index 00000000..2c5abec5
--- /dev/null
+++ b/installer/ProcessBusInsight.iss
@@ -0,0 +1,99 @@
+; Process Bus Insight – stable, offline, per-machine Inno Setup 6 installer.
+; Build by scripts/publish-windows-installer.ps1 after staging a verified portable package.
+; This script does NOT redistribute or attempt to install Npcap.
+
+#ifndef AppVersion
+  #error AppVersion is required (/DAppVersion=...)
+#endif
+#ifndef StageDir
+  #error StageDir is required (/DStageDir=...)
+#endif
+#ifndef OutputDir
+  #error OutputDir is required (/DOutputDir=...)
+#endif
+
+#define AppName "Process Bus Insight"
+#define AppExe "ProcessBusInsight.exe"
+#define RepoUrl "https://github.com/masarray/DigSubAnalyzer"
+
+[Setup]
+; Stable AppId: never change between releases or upgrades will create duplicates.
+AppId={{EAF21D82-164A-4EEA-9DAE-D4358769D10A}
+AppName={#AppName}
+AppVersion={#AppVersion}
+AppVerName={#AppName} {#AppVersion}
+AppPublisher=Process Bus Insight Contributors
+AppPublisherURL={#RepoUrl}
+AppSupportURL={#RepoUrl}/issues
+AppUpdatesURL={#RepoUrl}/releases/latest
+DefaultDirName={autopf}\Process Bus Insight
+DefaultGroupName=Process Bus Insight
+DisableProgramGroupPage=yes
+UsePreviousAppDir=yes
+UsePreviousGroup=yes
+UsePreviousTasks=yes
+PrivilegesRequired=admin
+ArchitecturesAllowed=x64compatible
+ArchitecturesInstallIn64BitMode=x64compatible
+OutputDir={#OutputDir}
+OutputBaseFilename=ProcessBusInsight-v{#AppVersion}-win-x64-setup
+SetupIconFile={#SourcePath}\..\src\ProcessBus.App.Wpf\IEC61850.ico
+UninstallDisplayIcon={app}\{#AppExe}
+Compression=lzma2/ultra64
+SolidCompression=yes
+WizardStyle=modern
+WizardSizePercent=100
+ShowLanguageDialog=no
+CloseApplications=yes
+RestartApplications=no
+SetupLogging=yes
+ChangesAssociations=no
+DisableWelcomePage=no
+MinVersion=10.0
+LicenseFile={#StageDir}\LICENSE.txt
+InfoAfterFile={#StageDir}\README.txt
+VersionInfoDescription=Process Bus Insight Setup
+VersionInfoProductName=Process Bus Insight
+VersionInfoCompany=Process Bus Insight Contributors
+VersionInfoVersion={#AppVersion}
+; Installer remains unsigned until a legitimate code-signing certificate is configured.
+; Never imply that an unsigned build bypasses Windows SmartScreen.
+
+[Languages]
+Name: "english"; MessagesFile: "compiler:Default.isl"
+
+[Tasks]
+Name: "desktopicon"; Description: "Create a desktop shortcut"; GroupDescription: "Additional shortcuts:"; Flags: unchecked
+
+[Files]
+; Exact files verified by the release-packaging gate. No customer configuration or
+; capture data is copied into Program Files by this installer.
+Source: "{#StageDir}\*"; DestDir: "{app}"; Flags: ignoreversion recursesubdirs createallsubdirs
+
+[Icons]
+Name: "{autoprograms}\Process Bus Insight"; Filename: "{app}\{#AppExe}"; WorkingDir: "{app}"
+Name: "{autoprograms}\User Manual (PDF)"; Filename: "{app}\User Manual.pdf"
+Name: "{autoprograms}\Quick Start (PDF)"; Filename: "{app}\Quick Start.pdf"
+Name: "{autoprograms}\Uninstall Process Bus Insight"; Filename: "{uninstallexe}"
+Name: "{autodesktop}\Process Bus Insight"; Filename: "{app}\{#AppExe}"; Tasks: desktopicon
+
+[Run]
+Filename: "{app}\{#AppExe}"; Description: "Launch Process Bus Insight"; Flags: nowait postinstall skipifsilent
+
+[Code]
+function IsNpcapPresent(): Boolean;
+begin
+  // Npcap has both native 64-bit and compatibility DLL deployments. Only give
+  // guidance, since offline PCAP replay works without a live capture driver.
+  Result :=
+    FileExists(ExpandConstant('{sys}\Npcap\wpcap.dll')) or
+    FileExists(ExpandConstant('{sys}\wpcap.dll'));
+end;
+
+procedure CurPageChanged(CurPageID: Integer);
+begin
+  if (CurPageID = wpReady) and (not IsNpcapPresent()) then
+    WizardForm.ReadyMemo.Lines.Add(
+      'Note: Npcap was not detected. Live Ethernet capture requires Npcap, ' +
+      'installed separately. Offline analysis can still be used.');
+end;

From 22a5cb1d14f8e6f6376e0b2e1d99dd0b034b1873 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:29:58 +0700
Subject: [PATCH 009/148] Compile verified portable stage into reproducible
 Inno installer artifact

---
 scripts/publish-windows-installer.ps1 | 95 +++++++++++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 scripts/publish-windows-installer.ps1

diff --git a/scripts/publish-windows-installer.ps1 b/scripts/publish-windows-installer.ps1
new file mode 100644
index 00000000..3eedc640
--- /dev/null
+++ b/scripts/publish-windows-installer.ps1
@@ -0,0 +1,95 @@
+param(
+    [Parameter(Mandatory = $true)]
+    [ValidatePattern('^\d+\.\d+\.\d+(?:\.\d+)?(?:-[A-Za-z0-9.-]+)?$')]
+    [string]$Version,
+    [string]$Runtime = 'win-x64',
+    [string]$AppName = 'ProcessBusInsight',
+    [string]$OutputRoot = 'artifacts',
+    [string]$IsccPath = ''
+)
+
+$ErrorActionPreference = 'Stop'
+$repoRoot = (Resolve-Path (Join-Path $PSScriptRoot '..')).Path
+if ($Runtime -ne 'win-x64') { throw 'Inno installer currently supports win-x64 only.' }
+
+$stageDir = Join-Path $repoRoot "$OutputRoot/package/$AppName-v$Version-$Runtime-portable"
+$releaseDir = Join-Path $repoRoot "$OutputRoot/release"
+$issPath = Join-Path $repoRoot 'installer/ProcessBusInsight.iss'
+$installerName = "$AppName-v$Version-$Runtime-setup.exe"
+$installerPath = Join-Path $releaseDir $installerName
+$shaFile = Join-Path $releaseDir 'SHA256SUMS.txt'
+
+# Fail closed before producing an installer. This is the identical verified
+# portable payload, including legal docs, PDFs and the separate offline bench CLI.
+$mandatory = @(
+    "$AppName.exe", 'Quick Start.pdf', 'User Manual.pdf',
+    'LICENSE.txt', 'NOTICE.txt', 'COMMERCIAL-LICENSE.md',
+    'COPYRIGHT.md', 'TRADEMARK.md', 'THIRD_PARTY_NOTICES.md',
+    'Licensing.md', 'README.txt', 'Bench/ProcessBus.InteropCli.exe',
+    'Bench/START_HERE.md'
+)
+foreach ($file in $mandatory) {
+    $item = Join-Path $stageDir $file
+    if (-not (Test-Path -LiteralPath $item -PathType Leaf)) {
+        throw "Installer staging is missing $file. Run publish-windows-portable.ps1 first."
+    }
+}
+if (-not (Test-Path -LiteralPath $issPath -PathType Leaf)) {
+    throw "Missing Inno setup definition: $issPath"
+}
+
+if ([string]::IsNullOrWhiteSpace($IsccPath)) {
+    $command = Get-Command 'ISCC.exe' -ErrorAction SilentlyContinue
+    if ($command) { $IsccPath = $command.Source }
+    if ([string]::IsNullOrWhiteSpace($IsccPath)) {
+        foreach ($candidate in @(
+            "${env:ProgramFiles(x86)}\Inno Setup 6\ISCC.exe",
+            "$env:ProgramFiles\Inno Setup 6\ISCC.exe"
+        )) {
+            if (Test-Path -LiteralPath $candidate -PathType Leaf) {
+                $IsccPath = $candidate
+                break
+            }
+        }
+    }
+}
+if (-not (Test-Path -LiteralPath $IsccPath -PathType Leaf)) {
+    throw 'Inno Setup 6 compiler (ISCC.exe) is unavailable. Install Inno Setup 6 first.'
+}
+
+New-Item -ItemType Directory -Path $releaseDir -Force | Out-Null
+Remove-Item -LiteralPath $installerPath -Force -ErrorAction SilentlyContinue
+# Avoid prerelease labels in Win32 VERSIONINFO numeric resource.
+$numericVersion = $Version.Split('-', 2)[0]
+$versionNumbers = $numericVersion.Split('.')
+if ($versionNumbers.Length -eq 3) { $numericVersion += '.0' }
+
+Write-Host "Compiling Inno Setup installer: $installerName"
+Write-Host "Payload: $stageDir"
+Write-Host "Inno compiler: $IsccPath"
+$compilerArgs = @(
+    "/DAppVersion=$Version", "/DFileVersion=$numericVersion",
+    "/DStageDir=$stageDir", "/DOutputDir=$releaseDir", $issPath
+)
+& $IsccPath @compilerArgs
+if ($LASTEXITCODE -ne 0) { throw "ISCC failed with exit code $LASTEXITCODE." }
+if (-not (Test-Path -LiteralPath $installerPath -PathType Leaf)) {
+    throw "ISCC succeeded without producing $installerPath."
+}
+if ((Get-Item -LiteralPath $installerPath).Length -lt 1024 * 1024) {
+    throw 'Installer is unexpectedly small; refusing to publish.'
+}
+
+$hash = (Get-FileHash -LiteralPath $installerPath -Algorithm SHA256).Hash.ToLowerInvariant()
+$checksumLine = "$hash  $installerName"
+if (Test-Path $shaFile) {
+    # Running this step twice must not duplicate its checksum line.
+    $others = @(Get-Content $shaFile | Where-Object {
+        $_ -and $_ -notmatch ('\s+' + [regex]::Escape($installerName) + '$')
+    })
+    @($others + $checksumLine) | Set-Content $shaFile -Encoding ASCII
+} else {
+    Set-Content $shaFile $checksumLine -Encoding ASCII
+}
+Write-Host "Created $installerPath"
+Write-Host "SHA256 $hash"

From 0082e7ae73e35b7bbaf3a2bceaceafefaa70bfb6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:30:33 +0700
Subject: [PATCH 010/148] Separate numeric Windows version resource from
 friendly prerelease version

---
 installer/ProcessBusInsight.iss | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/installer/ProcessBusInsight.iss b/installer/ProcessBusInsight.iss
index 2c5abec5..f61a08d8 100644
--- a/installer/ProcessBusInsight.iss
+++ b/installer/ProcessBusInsight.iss
@@ -5,6 +5,9 @@
 #ifndef AppVersion
   #error AppVersion is required (/DAppVersion=...)
 #endif
+#ifndef FileVersion
+  #error FileVersion is required (/DFileVersion=...)
+#endif
 #ifndef StageDir
   #error StageDir is required (/DStageDir=...)
 #endif
@@ -55,7 +58,7 @@ InfoAfterFile={#StageDir}\README.txt
 VersionInfoDescription=Process Bus Insight Setup
 VersionInfoProductName=Process Bus Insight
 VersionInfoCompany=Process Bus Insight Contributors
-VersionInfoVersion={#AppVersion}
+VersionInfoVersion={#FileVersion}
 ; Installer remains unsigned until a legitimate code-signing certificate is configured.
 ; Never imply that an unsigned build bypasses Windows SmartScreen.
 

From f52c62407629e32fb763e07856f265b5fde69e5c Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:31:07 +0700
Subject: [PATCH 011/148] Add Windows installer install-repair-uninstall smoke
 test and PDF hash checks

---
 scripts/verify-windows-installer.ps1 | 89 ++++++++++++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 scripts/verify-windows-installer.ps1

diff --git a/scripts/verify-windows-installer.ps1 b/scripts/verify-windows-installer.ps1
new file mode 100644
index 00000000..4973a280
--- /dev/null
+++ b/scripts/verify-windows-installer.ps1
@@ -0,0 +1,89 @@
+param(
+    [Parameter(Mandatory = $true)]
+    [string]$Installer,
+    [string]$StageDir = '',
+    [switch]$SkipInstallSmoke
+)
+
+$ErrorActionPreference = 'Stop'
+$installerPath = (Resolve-Path -LiteralPath $Installer).Path
+if ((Get-Item -LiteralPath $installerPath).Length -lt 1024 * 1024) {
+    throw "Inno installer is too small: $installerPath"
+}
+if ([System.IO.Path]::GetExtension($installerPath) -ne '.exe' -or
+    (Split-Path -Leaf $installerPath) -notmatch '^ProcessBusInsight-v.+-win-x64-setup\.exe$') {
+    throw 'Unexpected installer name or extension.'
+}
+$installerDirectory = Split-Path $installerPath -Parent
+$sumPath = Join-Path $installerDirectory 'SHA256SUMS.txt'
+$sha = (Get-FileHash -LiteralPath $installerPath -Algorithm SHA256).Hash.ToLowerInvariant()
+if (-not (Test-Path -LiteralPath $sumPath)) { throw "Missing installer checksums: $sumPath" }
+$expectedLine = "$sha  $(Split-Path $installerPath -Leaf)"
+if (-not (@(Get-Content $sumPath) -ccontains $expectedLine)) {
+    throw "Installer checksum mismatch in SHA256SUMS.txt"
+}
+
+Write-Host "Verified installer checksum: $sha"
+if ($SkipInstallSmoke) { return }
+
+# Full install/repair/uninstall smoke test on an ephemeral GitHub Windows runner:
+# no production apps, user settings or real capture devices are touched.
+$root = Join-Path $env:TEMP ("ProcessBusInnoSmoke_" + [Guid]::NewGuid().ToString('N'))
+$installDir = Join-Path $root 'installed'
+$logDir = Join-Path $root 'logs'
+New-Item -ItemType Directory -Path $logDir -Force | Out-Null
+$uninstallPath = Join-Path $installDir 'unins000.exe'
+try {
+    for ($attempt = 1; $attempt -le 2; $attempt++) {
+        $log = Join-Path $logDir "setup-$attempt.log"
+        $arguments = @(
+            '/VERYSILENT', '/SUPPRESSMSGBOXES', '/NORESTART', '/SP-',
+            ('/DIR="' + $installDir + '"'), ('/LOG="' + $log + '"')
+        )
+        $process = Start-Process -FilePath $installerPath -ArgumentList $arguments -PassThru -Wait
+        if ($process.ExitCode -ne 0) {
+            throw "Silent install/repair attempt $attempt failed: exit $($process.ExitCode). Log: $log"
+        }
+        $required = @(
+            'ProcessBusInsight.exe',
+            'Quick Start.pdf',
+            'User Manual.pdf',
+            'LICENSE.txt',
+            'README.txt',
+            'Bench/ProcessBus.InteropCli.exe',
+            'unins000.exe'
+        )
+        foreach ($relative in $required) {
+            if (-not (Test-Path -LiteralPath (Join-Path $installDir $relative) -PathType Leaf)) {
+                throw "Installer smoke test: missing installed $relative."
+            }
+        }
+        if (-not [string]::IsNullOrWhiteSpace($StageDir)) {
+            foreach ($relative in @('ProcessBusInsight.exe', 'User Manual.pdf', 'Quick Start.pdf')) {
+                $source = Join-Path $StageDir $relative
+                if (-not (Test-Path -LiteralPath $source)) {
+                    throw "Smoke test source missing: $source"
+                }
+                $sourceHash = (Get-FileHash -LiteralPath $source -Algorithm SHA256).Hash
+                $destHash = (Get-FileHash -LiteralPath (Join-Path $installDir $relative) -Algorithm SHA256).Hash
+                if ($sourceHash -ne $destHash) { throw "Installed $relative does not match verified stage." }
+            }
+        }
+        Write-Host "Installed payload and offline manuals verified (run $attempt / 2)."
+    }
+
+    $uninstallArguments = @('/VERYSILENT', '/SUPPRESSMSGBOXES', '/NORESTART',
+        ('/LOG="' + (Join-Path $logDir 'uninstall.log') + '"'))
+    $process = Start-Process -FilePath $uninstallPath -ArgumentList $uninstallArguments -PassThru -Wait
+    if ($process.ExitCode -ne 0) { throw "Silent uninstall failed: exit $($process.ExitCode)." }
+    if (Test-Path -LiteralPath (Join-Path $installDir 'ProcessBusInsight.exe')) {
+        throw 'Uninstaller left the installed main executable behind.'
+    }
+    Write-Host 'Installer verification passed: install, same-version repair, offline PDFs, uninstall.'
+}
+finally {
+    # Only the uniquely generated ephemeral smoke path is removed.
+    if (Test-Path -LiteralPath $root) {
+        Remove-Item -LiteralPath $root -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}

From ff4466e986f98bb86b0b86cbc9841f48aa821b7f Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:31:46 +0700
Subject: [PATCH 012/148] Make Inno installer and offline manual smoke testing
 primary candidate artifact

---
 .github/workflows/candidate-package.yml | 31 ++++++++++++++++++++++---
 1 file changed, 28 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/candidate-package.yml b/.github/workflows/candidate-package.yml
index 18d6ce2c..f3fce863 100644
--- a/.github/workflows/candidate-package.yml
+++ b/.github/workflows/candidate-package.yml
@@ -15,6 +15,9 @@ on:
       - "src/**"
       - "tests/**"
       - "scripts/publish-windows-portable.ps1"
+      - "scripts/publish-windows-installer.ps1"
+      - "scripts/verify-windows-installer.ps1"
+      - "installer/**"
       - "scripts/verify-release-package.ps1"
       - "scripts/repository-health.ps1"
       - "docs/RELEASE_NOTES_v*.md"
@@ -38,7 +41,7 @@ jobs:
     name: Build verified Windows x64 candidate
     if: github.event_name == 'workflow_dispatch' || startsWith(github.head_ref, 'stabilization/') || startsWith(github.head_ref, 'architecture/') || startsWith(github.head_ref, 'legal/') || startsWith(github.head_ref, 'fix/') || startsWith(github.head_ref, 'feat/')
     runs-on: windows-latest
-    timeout-minutes: 35
+    timeout-minutes: 50
 
     steps:
       - name: Checkout
@@ -89,6 +92,24 @@ jobs:
           $zip = ".\artifacts\release\ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-portable.zip"
           .\scripts\verify-release-package.ps1 -PackageZip $zip
 
+      - name: Install Inno Setup 6
+        shell: pwsh
+        run: |
+          choco install innosetup --yes --no-progress
+          if ($LASTEXITCODE -ne 0) { throw 'Inno Setup compiler installation failed.' }
+
+      - name: Compile Inno installer
+        shell: pwsh
+        run: .\scripts\publish-windows-installer.ps1 -Version '${{ steps.version.outputs.value }}'
+
+      - name: Smoke test Inno installation and repair
+        shell: pwsh
+        run: |
+          $version = '${{ steps.version.outputs.value }}'
+          $installer = ".\artifacts\release\ProcessBusInsight-v$version-win-x64-setup.exe"
+          $stage = ".\artifacts\package\ProcessBusInsight-v$version-win-x64-portable"
+          .\scripts\verify-windows-installer.ps1 -Installer $installer -StageDir $stage
+
       - name: Create candidate manifest
         shell: pwsh
         run: |
@@ -100,6 +121,10 @@ jobs:
             sourceRef = '${{ github.head_ref || github.ref_name }}'
             runtime = 'win-x64'
             framework = 'net8.0-windows'
+            primaryDistribution = 'inno-setup-exe'
+            offlineManuals = @('User Manual.pdf', 'Quick Start.pdf')
+            upgradeMode = 'stable-inno-appid-in-place-repair'
+            installerSigned = $false
             communityLicense = 'GPL-3.0-or-later'
             historicalBoundary = '85d43a0fe58a5888a9e8008c168ab76d2333ea87'
             timestampUtc = (Get-Date).ToUniversalTime().ToString('o')
@@ -109,9 +134,9 @@ jobs:
       - name: Upload verified candidate
         uses: actions/upload-artifact@v7
         with:
-          name: ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-candidate-${{ github.run_number }}
+          name: ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-inno-candidate-${{ github.run_number }}
           path: |
-            artifacts/release/ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-portable.zip
+            artifacts/release/ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-setup.exe
             artifacts/release/SHA256SUMS.txt
             artifacts/release/candidate-manifest.json
             TestResults/**

From 16459fff5821ab30dd04e7db1ed4dd5d58071bca Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:32:12 +0700
Subject: [PATCH 013/148] Ship signed-ready Inno EXE as primary release
 download alongside optional ZIP

---
 .github/workflows/release-package.yml | 35 +++++++++++++++++++++++----
 1 file changed, 30 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index 2b0e0523..db55da22 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -1,4 +1,4 @@
-name: Release Windows portable package
+name: Release Windows installer and portable package
 
 on:
   workflow_dispatch:
@@ -45,7 +45,7 @@ jobs:
   package:
     name: Validate and package Windows x64
     runs-on: windows-latest
-    timeout-minutes: 35
+    timeout-minutes: 55
 
     steps:
       - name: Checkout
@@ -93,6 +93,24 @@ jobs:
           $zip = ".\artifacts\release\ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-portable.zip"
           .\scripts\verify-release-package.ps1 -PackageZip $zip
 
+      - name: Install Inno Setup 6
+        shell: pwsh
+        run: |
+          choco install innosetup --yes --no-progress
+          if ($LASTEXITCODE -ne 0) { throw 'Inno Setup compiler installation failed.' }
+
+      - name: Compile Inno installer
+        shell: pwsh
+        run: .\scripts\publish-windows-installer.ps1 -Version '${{ steps.version.outputs.value }}'
+
+      - name: Smoke test Inno installation and repair
+        shell: pwsh
+        run: |
+          $version = '${{ steps.version.outputs.value }}'
+          $installer = ".\artifacts\release\ProcessBusInsight-v$version-win-x64-setup.exe"
+          $stage = ".\artifacts\package\ProcessBusInsight-v$version-win-x64-portable"
+          .\scripts\verify-windows-installer.ps1 -Installer $installer -StageDir $stage
+
       - name: Create release manifest
         shell: pwsh
         run: |
@@ -102,6 +120,11 @@ jobs:
             commit = '${{ github.sha }}'
             runtime = 'win-x64'
             framework = 'net8.0-windows'
+            primaryDistribution = 'inno-setup-exe'
+            secondaryDistribution = 'portable-zip'
+            offlineManuals = @('User Manual.pdf', 'Quick Start.pdf')
+            upgradeMode = 'stable-inno-appid-in-place-repair'
+            installerSigned = $false
             communityLicense = 'GPL-3.0-or-later'
             historicalBoundary = '85d43a0fe58a5888a9e8008c168ab76d2333ea87'
             timestampUtc = (Get-Date).ToUniversalTime().ToString('o')
@@ -111,8 +134,9 @@ jobs:
       - name: Upload workflow artifact
         uses: actions/upload-artifact@v7
         with:
-          name: ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-portable
+          name: ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-installer-and-portable
           path: |
+            artifacts/release/ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-setup.exe
             artifacts/release/ProcessBusInsight-v${{ steps.version.outputs.value }}-win-x64-portable.zip
             artifacts/release/SHA256SUMS.txt
             artifacts/release/release-manifest.json
@@ -129,13 +153,14 @@ jobs:
           $version = '${{ steps.version.outputs.value }}'
           $tag = "v$version"
           $zip = "artifacts/release/ProcessBusInsight-v$version-win-x64-portable.zip"
+          $installer = "artifacts/release/ProcessBusInsight-v$version-win-x64-setup.exe"
           $sha = "artifacts/release/SHA256SUMS.txt"
           $manifest = "artifacts/release/release-manifest.json"
           $notesFile = '${{ github.event.inputs.release_notes_file }}'
           if ([string]::IsNullOrWhiteSpace($notesFile)) { $notesFile = 'docs/RELEASE_NOTES_v1.4.0.md' }
           if (-not (Test-Path $notesFile)) { throw "Release notes file not found: $notesFile" }
 
-          $releaseArgs = @('release', 'create', $tag, $zip, $sha, $manifest, '--title', "Process Bus Insight $tag", '--notes-file', $notesFile, '--target', '${{ github.sha }}')
+          $releaseArgs = @('release', 'create', $tag, $installer, $zip, $sha, $manifest, '--title', "Process Bus Insight $tag", '--notes-file', $notesFile, '--target', '${{ github.sha }}')
           $isDraft = '${{ github.event.inputs.draft }}'
           $isPrerelease = '${{ github.event.inputs.prerelease }}'
           if ('${{ github.event_name }}' -eq 'push') {
@@ -146,7 +171,7 @@ jobs:
 
           gh release view $tag *> $null
           if ($LASTEXITCODE -eq 0) {
-            gh release upload $tag $zip $sha $manifest --clobber
+            gh release upload $tag $installer $zip $sha $manifest --clobber
           } else {
             gh @releaseArgs
           }

From 633d36e8076d13808e797f84511e9e5c9f0cb8ac Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:32:55 +0700
Subject: [PATCH 014/148] Document safe offline installation, manual updates
 and repair/uninstall guarantees

---
 docs/INSTALLATION_AND_UPDATE.md | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 docs/INSTALLATION_AND_UPDATE.md

diff --git a/docs/INSTALLATION_AND_UPDATE.md b/docs/INSTALLATION_AND_UPDATE.md
new file mode 100644
index 00000000..bbc83203
--- /dev/null
+++ b/docs/INSTALLATION_AND_UPDATE.md
@@ -0,0 +1,29 @@
+# Installation and updates — Process Bus Insight
+
+## Standard Windows installation (recommended)
+
+Download the latest **ProcessBusInsight-v...-win-x64-setup.exe** from the official project's GitHub Releases. Run the Inno Setup installer as an administrator. Choose the destination (default: `C:\Program Files\Process Bus Insight`). A Start Menu entry is created; the desktop shortcut is optional.
+
+The installer places **User Manual.pdf**, **Quick Start.pdf**, this guide, the executable, license notices and read-only Bench tools in that same program folder. You can open either PDF without an internet connection. The Start Menu also contains a direct **User Manual (PDF)** shortcut.
+
+**Npcap is a separate prerequisite for live Ethernet capture**, not part of this installer. Offline PCAP analysis can still be used without Npcap. If Npcap is not detected the setup shows guidance rather than installing an unknown driver or blocking offline operation.
+
+## Update or repair an installed copy
+
+1. Stop any live capture and close Process Bus Insight (allow the application to finish its normal shutdown).
+2. Download a newer official setup EXE, verify the published SHA256, and run it.
+3. Inno Setup uses the same application ID and remembers the previous installation directory and shortcut options. No prior uninstall is normally necessary.
+4. The installer detects files in use using the Windows Restart Manager; do not forcibly replace files while the analyzer is running.
+5. Re-running the same version can repair damaged or missing installed files.
+
+**There is no background or in-app automatic update claim**. Updating is deliberately operator-initiated; no capture is started automatically and no live traffic or customer information is sent to the update service. AppUpdatesURL points at the official releases page for manually obtaining newer versions.
+
+## Uninstall, user data and troubleshooting
+
+Use Windows Settings > Installed apps > Process Bus Insight > Uninstall, or the Start Menu uninstall shortcut. The installer removes its deployed binaries/docs/shortcuts, but intentionally has no broad deletion rule for unrelated user captures, SCL files, logs or profiles. Back up any data you previously placed inside the program directory before uninstalling; the recommended location for user data is outside `Program Files`.
+
+The official community build is currently **unsigned**. Windows SmartScreen may show a publisher warning; do not treat that as proof of malware, and do not bypass security policy. Verify origin and SHA256 before deciding to run it. A future signed build would require a real code-signing certificate and verified CI provenance.
+
+If installation fails, locate the Inno installer log (setup logging is enabled) and provide sanitized error details without sharing customer identifiers or raw captures. An installation smoke test on the CI runner is useful engineering evidence, not proof for all Windows versions, antivirus products and Npcap configurations.
+
+For source builds and portable use, see the repository's release-packaging documentation.

From 817de5af0109246cdd55cf2ea889204c30da5bb6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:33:05 +0700
Subject: [PATCH 015/148] Bundle offline installation and update guide beside
 user manuals in installed payload

---
 scripts/publish-windows-portable.ps1 | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index b2305baf..5041434a 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -15,7 +15,7 @@ Set-Location $repoRoot
 if ([string]::IsNullOrWhiteSpace($Version)) { throw "Version cannot be empty." }
 
 $requiredReleaseDocs = @(
-    "docs/QUICK_START.pdf", "docs/USER_MANUAL.pdf", "LICENSE", "NOTICE",
+    "docs/QUICK_START.pdf", "docs/USER_MANUAL.pdf", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
     "COMMERCIAL-LICENSE.md", "COPYRIGHT.md", "TRADEMARK.md",
     "THIRD_PARTY_NOTICES.md", "docs/LICENSING.md"
 )
@@ -144,7 +144,8 @@ $copyMap = @(
     @{ Source = "THIRD_PARTY_NOTICES.md"; Destination = "THIRD_PARTY_NOTICES.md" },
     @{ Source = "docs/LICENSING.md"; Destination = "Licensing.md" },
     @{ Source = "docs/QUICK_START.pdf"; Destination = "Quick Start.pdf" },
-    @{ Source = "docs/USER_MANUAL.pdf"; Destination = "User Manual.pdf" }
+    @{ Source = "docs/USER_MANUAL.pdf"; Destination = "User Manual.pdf" },
+    @{ Source = "docs/INSTALLATION_AND_UPDATE.md"; Destination = "Install and Update.md" }
 )
 foreach ($item in $copyMap) {
     $source = Join-Path $repoRoot $item.Source

From e357d2b8a6d37749a82e5b683d5cf801465c6187 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:34:07 +0700
Subject: [PATCH 016/148] Bundle offline install/update guide and validate
 installer documentation

---
 scripts/verify-release-package.ps1 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/scripts/verify-release-package.ps1 b/scripts/verify-release-package.ps1
index 6845680d..d3a9f702 100644
--- a/scripts/verify-release-package.ps1
+++ b/scripts/verify-release-package.ps1
@@ -17,6 +17,7 @@ try {
         "$AppName.exe",
         "Quick Start.pdf",
         "User Manual.pdf",
+        "Install and Update.md",
         "README.txt",
         "LICENSE.txt",
         "NOTICE.txt",

From 3983c60bcdddc8dc36a2ef424d024930b2ead4e9 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:34:09 +0700
Subject: [PATCH 017/148] Bundle offline install/update guide and validate
 installer documentation

---
 scripts/verify-windows-installer.ps1 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/scripts/verify-windows-installer.ps1 b/scripts/verify-windows-installer.ps1
index 4973a280..01c4b6aa 100644
--- a/scripts/verify-windows-installer.ps1
+++ b/scripts/verify-windows-installer.ps1
@@ -48,6 +48,7 @@ try {
             'ProcessBusInsight.exe',
             'Quick Start.pdf',
             'User Manual.pdf',
+            'Install and Update.md',
             'LICENSE.txt',
             'README.txt',
             'Bench/ProcessBus.InteropCli.exe',

From 658fe732f07b73b0ee61b7518f22f44cf4f7540c Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:34:12 +0700
Subject: [PATCH 018/148] Bundle offline install/update guide and validate
 installer documentation

---
 docs/RELEASE_PACKAGING.md | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/docs/RELEASE_PACKAGING.md b/docs/RELEASE_PACKAGING.md
index 8a7da089..7d7b6c7d 100644
--- a/docs/RELEASE_PACKAGING.md
+++ b/docs/RELEASE_PACKAGING.md
@@ -1,10 +1,11 @@
 # Release Packaging — Process Bus Insight
 
-The release workflow creates a Windows x64 self-contained portable package for users who do not have Visual Studio or a separate .NET runtime.
+The release workflow produces a Windows x64 self-contained **Inno Setup 6 EXE installer (primary)**, plus an optional portable ZIP. The installer supports in-place upgrades and repairs via a stable AppId and includes both offline PDF manuals inside the installed program folder. It is currently unsigned and does not automatically download updates.
 
 ## Release files
 
 ```text
+ProcessBusInsight-v<version>-win-x64-setup.exe
 ProcessBusInsight-v<version>-win-x64-portable.zip
 SHA256SUMS.txt
 release-manifest.json
@@ -16,6 +17,7 @@ The ZIP contains:
 ProcessBusInsight.exe
 Quick Start.pdf
 User Manual.pdf
+Install and Update.md
 README.txt
 LICENSE.txt
 NOTICE.txt
@@ -26,7 +28,11 @@ THIRD_PARTY_NOTICES.md
 Licensing.md
 ```
 
-Npcap is required on the target Windows machine for live raw Ethernet capture and is not bundled.
+Npcap is required on the target Windows machine for live raw Ethernet capture and is not bundled. Setup provides nonblocking guidance if the driver is not detected because offline analysis remains available.
+
+The Inno Setup default location is `C:\Program Files\Process Bus Insight`. `User Manual.pdf`, `Quick Start.pdf`, `Install and Update.md`, and the read-only `Bench/` tools are physically installed there. Start Menu shortcuts link to the application and both PDFs. An optional desktop shortcut is available. To update, close the analyzer and rerun the newer installer; Inno remembers the install directory and updates in place. Reinstalling the same version can repair missing files. The uninstaller does not use broad rules to delete user captures or SCL data.
+
+GitHub Actions verifies checksums and performs a real silent install, repair, PDF hash comparison, and uninstall. Bench performance and third-party antivirus compatibility are not implied by that test.
 
 ## License boundary
 

From b005b3389dcd4cdd3921e7423b34cbdfc2e8c3b1 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:34:14 +0700
Subject: [PATCH 019/148] Bundle offline install/update guide and validate
 installer documentation

---
 installer/ProcessBusInsight.iss | 1 +
 1 file changed, 1 insertion(+)

diff --git a/installer/ProcessBusInsight.iss b/installer/ProcessBusInsight.iss
index f61a08d8..e982badb 100644
--- a/installer/ProcessBusInsight.iss
+++ b/installer/ProcessBusInsight.iss
@@ -77,6 +77,7 @@ Source: "{#StageDir}\*"; DestDir: "{app}"; Flags: ignoreversion recursesubdirs c
 Name: "{autoprograms}\Process Bus Insight"; Filename: "{app}\{#AppExe}"; WorkingDir: "{app}"
 Name: "{autoprograms}\User Manual (PDF)"; Filename: "{app}\User Manual.pdf"
 Name: "{autoprograms}\Quick Start (PDF)"; Filename: "{app}\Quick Start.pdf"
+Name: "{autoprograms}\Install and Update Guide"; Filename: "{app}\Install and Update.md"
 Name: "{autoprograms}\Uninstall Process Bus Insight"; Filename: "{uninstallexe}"
 Name: "{autodesktop}\Process Bus Insight"; Filename: "{app}\{#AppExe}"; Tasks: desktopicon
 

From ae0b0628c7bdca1a1989cb0c73f36708e08fcb96 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 08:34:42 +0700
Subject: [PATCH 020/148] Make verified Inno installer recommended Windows
 download with offline manuals and repair instructions

---
 README.md | 21 ++++++++++++---------
 1 file changed, 12 insertions(+), 9 deletions(-)

diff --git a/README.md b/README.md
index 96a01ca0..0e152517 100644
--- a/README.md
+++ b/README.md
@@ -46,22 +46,25 @@ The application can record what was configured in SCL, what the selected capture
 
 ## Download and run
 
-1. Install **Npcap** on the Windows capture machine when live raw Ethernet capture is required.
-2. Download the latest portable ZIP from [GitHub Releases](https://github.com/masarray/DigSubAnalyzer/releases).
-3. Extract it to a local folder such as `C:\Tools\ProcessBusInsight`.
-4. Run `ProcessBusInsight.exe`.
-5. Select a physical Ethernet adapter connected through an authorized TAP, mirror port, or isolated engineering test network.
-6. Start capture and select the SV/GOOSE/PTP target to inspect.
+1. Download the latest **Windows Inno Setup installer** from [GitHub Releases](https://github.com/masarray/DigSubAnalyzer/releases): `ProcessBusInsight-v1.4.0-win-x64-setup.exe`.
+2. Run the installer. Its stable app identity supports in-place updates, same-version repair, Windows uninstall, and optional desktop shortcut.
+3. **Offline manuals are installed directly inside the app folder** (`User Manual.pdf`, `Quick Start.pdf`, and `Install and Update.md`), with Start Menu shortcuts.
+4. Install **Npcap separately** when live raw Ethernet capture is required; it is not bundled. Offline PCAP analysis remains available without it.
+5. Launch Process Bus Insight, select an authorized TAP or mirror capture adapter, and start analysis.
+6. To update, close the app and run the newer installer; no uninstall is needed for standard in-place upgrades.
 
-Current post-transition package naming:
+An optional **portable ZIP** is also available for manual extraction. The community installer is currently unsigned, so verify its official source and SHA256; do not treat it as a background auto-updater. See [installation and update guidance](docs/INSTALLATION_AND_UPDATE.md).
+
+Current Windows distribution naming:
 
 ```text
-ProcessBusInsight-v1.4.0-win-x64-portable.zip
+ProcessBusInsight-v1.4.0-win-x64-setup.exe
+ProcessBusInsight-v1.4.0-win-x64-portable.zip  (optional)
 SHA256SUMS.txt
 release-manifest.json
 ```
 
-A separate .NET runtime is not required for the self-contained package. Npcap remains separately installed and is not redistributed by this repository.
+A separate .NET runtime is not required for these self-contained packages. Npcap remains separately installed and is not redistributed by this repository.
 
 See [`docs/QUICK_START.md`](docs/QUICK_START.md) for the field checklist.
 

From ccb6f8c70f49f2ebf4ada69d432d7226fdbc63d6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:38:01 +0700
Subject: [PATCH 021/148] Resolve 64-bit Npcap and Packet DLL from trusted
 system location for both capture consumers

---
 .../Services/NpcapNativeLibrary.cs            | 97 +++++++++++++++++++
 1 file changed, 97 insertions(+)
 create mode 100644 src/ProcessBus.Core/Services/NpcapNativeLibrary.cs

diff --git a/src/ProcessBus.Core/Services/NpcapNativeLibrary.cs b/src/ProcessBus.Core/Services/NpcapNativeLibrary.cs
new file mode 100644
index 00000000..7b77f26f
--- /dev/null
+++ b/src/ProcessBus.Core/Services/NpcapNativeLibrary.cs
@@ -0,0 +1,97 @@
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+namespace ProcessBus.Core.Services;
+
+/// <summary>
+/// Resolve Npcap from the native Windows system directory, never from the app
+/// working directory, an arbitrary PATH entry, or a stale WinPcap DLL. The same
+/// native module is shared between catalog enumeration and packet capture.
+/// No driver installation occurs here; a missing/broken Npcap stays a clear error.
+/// </summary>
+public static class NpcapNativeLibrary
+{
+    private static readonly object RegistrationGate = new();
+    private static readonly HashSet<Assembly> RegisteredAssemblies = new();
+    private static readonly Lazy<IntPtr> PcapHandle = new(LoadPcap);
+
+    /// <summary>
+    /// Register once for each assembly that contains wpcap P/Invokes.
+    /// Called from their static constructors, before the first native call.
+    /// </summary>
+    public static void RegisterFor(Assembly assembly)
+    {
+        if (!OperatingSystem.IsWindows())
+            return;
+
+        lock (RegistrationGate)
+        {
+            if (RegisteredAssemblies.Add(assembly))
+                NativeLibrary.SetDllImportResolver(assembly, Resolve);
+        }
+    }
+
+    // Also testable on non-Windows CI without loading a native Windows library.
+    public static string? SelectLibraryPath(string systemDirectory, Func<string, bool> fileExists)
+    {
+        if (string.IsNullOrWhiteSpace(systemDirectory))
+            return null;
+
+        // Prefer the modern Npcap installation, including its matching Packet.dll.
+        // Legacy system32 WinPcap-compatible deployments are a second choice only.
+        var npcap = Path.Combine(systemDirectory, "Npcap", "wpcap.dll");
+        if (fileExists(npcap))
+            return npcap;
+
+        var compatible = Path.Combine(systemDirectory, "wpcap.dll");
+        return fileExists(compatible) ? compatible : null;
+    }
+
+    private static IntPtr Resolve(string libraryName, Assembly assembly, DllImportSearchPath? searchPath)
+    {
+        if (!string.Equals(libraryName, "wpcap", StringComparison.OrdinalIgnoreCase) &&
+            !string.Equals(libraryName, "wpcap.dll", StringComparison.OrdinalIgnoreCase))
+            return IntPtr.Zero;
+
+        return PcapHandle.Value;
+    }
+
+    private static IntPtr LoadPcap()
+    {
+        if (!Environment.Is64BitProcess)
+            throw new BadImageFormatException(
+                "Process Bus Insight requires the Windows x64 build for the supported Npcap capture path.");
+
+        var system = Environment.SystemDirectory;
+        var dll = SelectLibraryPath(system, File.Exists);
+        if (dll is null)
+            throw new DllNotFoundException(
+                "Npcap wpcap.dll is not installed in the 64-bit Windows system directory. " +
+                "Install or repair the official Npcap x64 driver, then restart Process Bus Insight.");
+
+        // LOAD_LIBRARY_SEARCH_DLL_LOAD_DIR + SYSTEM32 keeps Packet.dll/dependencies
+        // away from unrelated PATH directories. Loading Packet.dll from the same
+        // approved installation first prevents old x86 Packet.dll precedence.
+        var options = DllImportSearchPath.UseDllDirectoryForDependencies | DllImportSearchPath.System32;
+        var packet = Path.Combine(Path.GetDirectoryName(dll)!, "Packet.dll");
+        if (File.Exists(packet))
+            NativeLibrary.Load(packet, typeof(NpcapNativeLibrary).Assembly, options);
+
+        try
+        {
+            return NativeLibrary.Load(dll, typeof(NpcapNativeLibrary).Assembly, options);
+        }
+        catch (BadImageFormatException ex)
+        {
+            throw new BadImageFormatException(
+                $"Npcap native DLL architecture is incompatible with the x64 process ({dll}). " +
+                "Repair/reinstall Npcap x64 and remove conflicting legacy WinPcap DLLs.", ex);
+        }
+        catch (DllNotFoundException ex)
+        {
+            throw new DllNotFoundException(
+                $"Npcap library or a native dependency could not be loaded from {dll}. " +
+                "Repair Npcap x64, then restart the analyzer.", ex);
+        }
+    }
+}

From 9af84709997b0eccf42c621ebebe816147586bc3 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:38:23 +0700
Subject: [PATCH 022/148] Stop fabricating Ethernet index:0; show
 non-capturable Npcap diagnostic row

---
 .../Services/PcapAdapterCatalog.cs              | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs b/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs
index 6f404716..94552fb8 100644
--- a/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs
+++ b/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs
@@ -4,6 +4,11 @@ namespace ProcessBus.Core.Services;
 
 public static class PcapAdapterCatalog
 {
+    static PcapAdapterCatalog()
+    {
+        NpcapNativeLibrary.RegisterFor(typeof(PcapAdapterCatalog).Assembly);
+    }
+
     public static List<NetworkAdapterInfo> GetAdapters()
     {
         try
@@ -12,7 +17,7 @@ public static List<NetworkAdapterInfo> GetAdapters()
         }
         catch (DllNotFoundException ex)
         {
-            return BuildFallback($"Npcap/wpcap.dll not found: {ex.Message}");
+            return BuildUnavailable($"Npcap/wpcap.dll not found: {ex.Message}");
         }
         catch (BadImageFormatException ex)
         {
@@ -82,11 +87,11 @@ private static List<NetworkAdapterInfo> BuildFallback(string reason)
         {
             new()
             {
-                Id = "0",
-                Index = 0,
-                Name = "Ethernet",
-                Description = $"Fallback adapter entry ({reason})",
-                RawDeviceName = "index:0"
+                Id = "npcap-unavailable",
+                Index = -1,
+                Name = "Npcap unavailable — capture disabled",
+                Description = reason,
+                RawDeviceName = string.Empty
             }
         };
     }

From 22127ae8fcfbf33c014fab626984026349bd5ec0 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:38:34 +0700
Subject: [PATCH 023/148] Pin packet capture P/Invokes to same trusted Npcap
 DLL as adapter enumeration

---
 src/ProcessBus.Iec61850.Raw/Capture/NpcapRawFrameSource.cs | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/ProcessBus.Iec61850.Raw/Capture/NpcapRawFrameSource.cs b/src/ProcessBus.Iec61850.Raw/Capture/NpcapRawFrameSource.cs
index 54799127..55defa6f 100644
--- a/src/ProcessBus.Iec61850.Raw/Capture/NpcapRawFrameSource.cs
+++ b/src/ProcessBus.Iec61850.Raw/Capture/NpcapRawFrameSource.cs
@@ -1,10 +1,17 @@
 using System.Runtime.CompilerServices;
 using System.Runtime.InteropServices;
+using ProcessBus.Core.Services;
 
 namespace ProcessBus.Iec61850.Raw.Capture;
 
 public sealed class NpcapRawFrameSource : IRawFrameSource
 {
+    static NpcapRawFrameSource()
+    {
+        // Capture and catalog resolve exactly the same trusted Npcap binary.
+        NpcapNativeLibrary.RegisterFor(typeof(NpcapRawFrameSource).Assembly);
+    }
+
     private const int SnapshotLength = 65536;
     private const int ReadTimeoutMilliseconds = 100;
     private const int DataLinkEthernet = 1;

From 834ff69ee0c39ff4deb730e16ad851efd1821659 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:39:13 +0700
Subject: [PATCH 024/148] Disable Run without a real Npcap device and retain
 adapter diagnostics

---
 src/ProcessBus.Core/Services/NetworkAdapterInfo.cs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/ProcessBus.Core/Services/NetworkAdapterInfo.cs b/src/ProcessBus.Core/Services/NetworkAdapterInfo.cs
index 7eaad2cf..b5bf3847 100644
--- a/src/ProcessBus.Core/Services/NetworkAdapterInfo.cs
+++ b/src/ProcessBus.Core/Services/NetworkAdapterInfo.cs
@@ -8,6 +8,10 @@ public sealed class NetworkAdapterInfo
     public string Description { get; set; } = string.Empty;
     public string RawDeviceName { get; set; } = string.Empty;
 
+    public bool IsCaptureCapable =>
+        !string.IsNullOrWhiteSpace(RawDeviceName) &&
+        !RawDeviceName.StartsWith("index:", StringComparison.OrdinalIgnoreCase);
+
     public override string ToString()
     {
         var label = string.IsNullOrWhiteSpace(Description) ? Name : $"{Name} ({Description})";

From b91b49b951ac503645422f94f3410458e6e436b3 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:39:17 +0700
Subject: [PATCH 025/148] Disable Run without a real Npcap device and retain
 adapter diagnostics

---
 .../ViewModels/MainWindowViewModel.cs                | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index 79187082..e03673b4 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -111,12 +111,16 @@ private set
             _isRunning = value;
             OnPropertyChanged();
             OnPropertyChanged(nameof(CanSwitchCaptureMode));
+            OnPropertyChanged(nameof(CanStartCapture));
             OnPropertyChanged(nameof(IsSelectedSvReceiving));
         }
     }
 
     public bool IsRawMode => true;
     public bool CanSwitchCaptureMode => !IsRunning;
+    public bool CanStartCapture => !IsRunning && GetSelectedAdapter()?.IsCaptureCapable == true;
+    public string SelectedAdapterDiagnostic => GetSelectedAdapter() is { IsCaptureCapable: false } invalid
+        ? invalid.Description : "Select a real Npcap capture adapter.";
 
     private readonly ObservableCollection<GooseTrafficRow> _gooseHistory = new();
     private readonly Dictionary<string, GooseMessageItem> _lastGooseState = new();
@@ -1976,8 +1980,11 @@ public string SelectedAdapterId
             _selectedAdapterId = value;
             var selected = Adapters.FirstOrDefault(adapter => adapter.Id == value);
             _rawDataSource.SelectAdapter(value, selected?.RawDeviceName ?? string.Empty);
-            SaveLastAdapterId(value);
+            if (selected?.IsCaptureCapable == true)
+                SaveLastAdapterId(value);
             OnPropertyChanged();
+            OnPropertyChanged(nameof(CanStartCapture));
+            OnPropertyChanged(nameof(SelectedAdapterDiagnostic));
             OnPropertyChanged(nameof(AdapterTimingRiskText));
             OnPropertyChanged(nameof(TimingConfidenceText));
             OnPropertyChanged(nameof(TimingConfidenceBadgeText));
@@ -4204,6 +4211,9 @@ private async Task SwitchToRawAsync()
 
     private async Task StartAsync()
     {
+        if (!CanStartCapture)
+            return;
+
         await _rawDataSource.StartAsync();
         IsRunning = _rawDataSource.IsRunning;
 

From 17026d8b7cc50eb71721e06986a82c6785e342d4 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:39:22 +0700
Subject: [PATCH 026/148] Disable Run without a real Npcap device and retain
 adapter diagnostics

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index b179340b..aa9dd26d 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -335,10 +335,11 @@
                                           ItemsSource="{Binding Adapters}"
                                           SelectedValuePath="Id"
                                           SelectedValue="{Binding SelectedAdapterId, UpdateSourceTrigger=PropertyChanged}"
-                                          ToolTip="Select capture adapter"/>
+                                          ToolTip="{Binding SelectedAdapterDiagnostic}"/>
 
                                 <Button Margin="8,0,0,0"
                                         Command="{Binding StartCommand}"
+                                         IsEnabled="{Binding CanStartCapture}"
                                         ToolTipService.InitialShowDelay="180">
                                     <Button.ToolTip>
                                         <ToolTip Style="{StaticResource GlassToolTipStyle}" Content="Start live SV/GOOSE/PTP capture"/>

From 2ad408fd1af05e091d43dd1c0ff66dc9296b387d Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:39:56 +0700
Subject: [PATCH 027/148] Regression-test trusted Npcap DLL lookup and
 never-selectable fallback

---
 .../NpcapArchitectureRegressionTests.cs       | 57 +++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 tests/ProcessBus.Tests/NpcapArchitectureRegressionTests.cs

diff --git a/tests/ProcessBus.Tests/NpcapArchitectureRegressionTests.cs b/tests/ProcessBus.Tests/NpcapArchitectureRegressionTests.cs
new file mode 100644
index 00000000..33ca8ed5
--- /dev/null
+++ b/tests/ProcessBus.Tests/NpcapArchitectureRegressionTests.cs
@@ -0,0 +1,57 @@
+using ProcessBus.Core.Services;
+using Xunit;
+
+namespace ProcessBus.Tests;
+
+/// <summary>
+/// The analyzer must not fabricate an Ethernet interface when wpcap cannot load.
+/// Test deterministic native lookup policy without needing actual Npcap in CI.
+/// </summary>
+public sealed class NpcapArchitectureRegressionTests
+{
+    [Fact]
+    public void TrustedNpcapDirectoryWinsOverLegacySystemDll()
+    {
+        var system = Path.Combine("C:", "Windows", "System32");
+        var npcap = Path.Combine(system, "Npcap", "wpcap.dll");
+        var old = Path.Combine(system, "wpcap.dll");
+        var candidates = new HashSet<string>(StringComparer.OrdinalIgnoreCase) { npcap, old };
+
+        Assert.Equal(npcap,
+            NpcapNativeLibrary.SelectLibraryPath(system, candidates.Contains));
+    }
+
+    [Fact]
+    public void OnlySystemDirectoryCandidatesAreAccepted()
+    {
+        var system = Path.Combine("C:", "Windows", "System32");
+        var unsafeLocal = Path.Combine("C:", "Tools", "ProcessBusInsight", "wpcap.dll");
+        var candidate = NpcapNativeLibrary.SelectLibraryPath(system,
+            path => string.Equals(path, unsafeLocal, StringComparison.OrdinalIgnoreCase));
+        Assert.Null(candidate);
+
+        var compatible = Path.Combine(system, "wpcap.dll");
+        Assert.Equal(compatible, NpcapNativeLibrary.SelectLibraryPath(system,
+            path => string.Equals(path, compatible, StringComparison.OrdinalIgnoreCase)));
+    }
+
+    [Fact]
+    public void MissingNativeLibraryNeverBecomesACapturableFakeEthernetAdapter()
+    {
+        var missing = new NetworkAdapterInfo
+        {
+            Id = "npcap-unavailable",
+            Index = -1,
+            Name = "Npcap unavailable — capture disabled",
+            Description = "Native architecture mismatch",
+            RawDeviceName = ""
+        };
+        Assert.False(missing.IsCaptureCapable);
+        Assert.DoesNotContain("[0]", missing.ToString());
+        Assert.False(new NetworkAdapterInfo { RawDeviceName = "index:0" }.IsCaptureCapable);
+        Assert.True(new NetworkAdapterInfo
+        {
+            RawDeviceName = @"\\Device\\NPF_{12345678-1111-2222-3333-123456789ABC}"
+        }.IsCaptureCapable);
+    }
+}

From 1939bbf629b5af6d79a5b0e9a28b118e5adaa188 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:40:39 +0700
Subject: [PATCH 028/148] Explain native Npcap architecture mismatch and safe
 verified host repair steps

---
 docs/TROUBLESHOOTING.md | 29 ++++++++++++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/docs/TROUBLESHOOTING.md b/docs/TROUBLESHOOTING.md
index 165fb61f..d12c077e 100644
--- a/docs/TROUBLESHOOTING.md
+++ b/docs/TROUBLESHOOTING.md
@@ -1,9 +1,36 @@
 # Troubleshooting — Process Bus Insight
 
-This guide covers common setup and field-use issues for the Windows portable package.
+This guide covers common setup and field-use issues for the Windows Inno installer and optional portable package.
 
 ## No adapters appear
 
+If the adapter selector reads **Npcap unavailable — capture disabled**, the native
+capture interface could not be enumerated. Older builds misleadingly displayed
+`Ethernet (Fallback adapter entry ... index:0)`; that was **not** a usable NIC.
+Run is disabled until a real device is enumerated.
+
+If the diagnostic says **Npcap architecture mismatch**, Windows refused to load
+`wpcap.dll` or one of its dependencies (often `Packet.dll`), potentially because
+a 32-bit or obsolete WinPcap copy was picked up by a 64-bit process.
+The analyzer now resolves those libraries from trusted system locations rather than
+the application folder or the arbitrary PATH search order.
+
+Check the 64-bit system installation (from 64-bit PowerShell):
+
+```powershell
+[Environment]::Is64BitProcess
+Test-Path "$env:WINDIR\System32\Npcap\wpcap.dll"
+Test-Path "$env:WINDIR\System32\Npcap\Packet.dll"
+```
+
+Both the application and native capture library must use matching architecture.
+If either DLL is absent or loading still fails, repair/reinstall the **official
+Npcap x64** installation and restart the application. A reboot may be needed.
+Do not download random individual DLLs, copy x86 DLLs into the app folder, or
+replace protected system DLLs manually. If Wireshark also cannot enumerate Npcap
+devices, fix the host Npcap installation before troubleshooting SV mapping.
+
+
 Possible causes:
 
 - Npcap is not installed.

From 6e42d5cd7396741eec44320acd75ed1dc66a9cc4 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:41:39 +0700
Subject: [PATCH 029/148] Fix all catalog unavailable callsites and preserve
 actionable architecture diagnostics

---
 src/ProcessBus.Core/Services/PcapAdapterCatalog.cs | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs b/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs
index 94552fb8..e7cab312 100644
--- a/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs
+++ b/src/ProcessBus.Core/Services/PcapAdapterCatalog.cs
@@ -21,15 +21,15 @@ public static List<NetworkAdapterInfo> GetAdapters()
         }
         catch (BadImageFormatException ex)
         {
-            return BuildFallback($"Npcap architecture mismatch: {ex.Message}");
+            return BuildUnavailable($"Npcap x64 native DLL could not be loaded. Repair Npcap x64 and restart. Details: {ex.Message}");
         }
         catch (EntryPointNotFoundException ex)
         {
-            return BuildFallback($"Npcap API entry point unavailable: {ex.Message}");
+            return BuildUnavailable($"Npcap API entry point unavailable: {ex.Message}");
         }
         catch (Exception ex)
         {
-            return BuildFallback($"Npcap adapter enumeration failed: {ex.Message}");
+            return BuildUnavailable($"Npcap adapter enumeration failed: {ex.Message}");
         }
     }
 
@@ -41,7 +41,7 @@ private static List<NetworkAdapterInfo> GetAdaptersCore()
         if (result == -1 || devices == IntPtr.Zero)
         {
             var error = ReadAnsiString(errbuf);
-            return BuildFallback(string.IsNullOrWhiteSpace(error)
+            return BuildUnavailable(string.IsNullOrWhiteSpace(error)
                 ? "Npcap enumerate returned no device list"
                 : $"Npcap enumerate failed: {error}");
         }
@@ -73,7 +73,7 @@ private static List<NetworkAdapterInfo> GetAdaptersCore()
 
             return adapters.Count > 0
                 ? adapters
-                : BuildFallback("Npcap returned no devices");
+                : BuildUnavailable("Npcap returned no devices");
         }
         finally
         {
@@ -81,7 +81,7 @@ private static List<NetworkAdapterInfo> GetAdaptersCore()
         }
     }
 
-    private static List<NetworkAdapterInfo> BuildFallback(string reason)
+    private static List<NetworkAdapterInfo> BuildUnavailable(string reason)
     {
         return new List<NetworkAdapterInfo>
         {

From fc35abb247d918eb7f2c25b485d1272e0f5d006e Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 11:41:53 +0700
Subject: [PATCH 030/148] Disable secondary Start toolbar button when Npcap is
 unavailable

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index aa9dd26d..d7b5cef7 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -546,6 +546,7 @@
                                     <!-- Primary action stays readable: icon + label -->
                                     <Button x:Name="StartCaptureButton"
                                             Command="{Binding StartCommand}"
+                                             IsEnabled="{Binding CanStartCapture}"
                                             ToolTipService.InitialShowDelay="180">
                                         <Button.ToolTip>
                                             <ToolTip Style="{StaticResource GlassToolTipStyle}" Content="Start live SV/GOOSE/PTP capture"/>

From 20fc355084671dd5043f96e71e6faa42eeba5573 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:33:57 +0700
Subject: [PATCH 031/148] =?UTF-8?q?Polish=20compact=20phasor=20with=20nume?=
 =?UTF-8?q?ric=20independent=20scales,=20clear=20270=C2=B0=20axis=20and=20?=
 =?UTF-8?q?unobtrusive=20leaders?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../Controls/PhasorDiagramControl.cs          | 35 ++++++++++++++++---
 1 file changed, 30 insertions(+), 5 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
index bc38a935..5256bc8f 100644
--- a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
+++ b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
@@ -195,9 +195,10 @@ protected override void OnRender(DrawingContext dc)
                 vector.Tip.X >= center.X);
         }
 
+        // Reserve two footer rows so label packing never obscures scale readouts.
         var positions = PhasorLabelLayout.Arrange(anchors, width, height,
             topPadding: IsStreamLive ? 18 : 30,
-            bottomPadding: 25);
+            bottomPadding: 42);
 
         for (var i = 0; i < vectors.Count; i++)
         {
@@ -207,13 +208,37 @@ protected override void OnRender(DrawingContext dc)
             var endpoint = new Point(
                 onRight ? position.X - 3 : position.X + vector.Label.Width + 3,
                 position.Y + vector.Label.Height / 2.0);
-            dc.DrawLine(LeaderPen, vector.Tip, endpoint);
+            // Long lines across the polar plot obscured vectors and looked like
+            // additional measurements. Use a short label-side indicator unless
+            // its actual tip is close enough for an unambiguous connector.
+            var connectorDistance = (vector.Tip - endpoint).Length;
+            if (connectorDistance <= 19)
+                dc.DrawLine(LeaderPen, vector.Tip, endpoint);
+            else
+                dc.DrawLine(LeaderPen,
+                    endpoint,
+                    new Point(endpoint.X + (onRight ? -7 : 7), endpoint.Y));
             dc.DrawText(vector.Label, new Point(position.X, position.Y));
         }
         dc.Pop();
 
-        DrawText(dc, "U solid  ·  I dashed  ·  separate scales",
-            9.0, new Point(6, height - 16), TextMutedBrush, BodyTypeface);
+        // Numeric scale evidence comes from the SAME six vectors as arrows.
+        // This footer is a visual reference (per-family maximum), not a
+        // calibration claim or one shared physical voltage/current scale.
+        var voltageUnit = _visualItems.FirstOrDefault(item =>
+            item.Family == PhasorFamily.Voltage && IsRenderable(item))?.Unit ?? "V";
+        var currentUnit = _visualItems.FirstOrDefault(item =>
+            item.Family == PhasorFamily.Current && IsRenderable(item))?.Unit ?? "A";
+        var voltageScaleText = voltageMax > 0
+            ? $"U max {voltageMax:0.##} {voltageUnit}"
+            : "U N/A";
+        var currentScaleText = currentMax > 0
+            ? $"I max {currentMax:0.##} {currentUnit}"
+            : "I N/A";
+        DrawText(dc, $"{voltageScaleText}   ·   {currentScaleText}",
+            10.0, new Point(6, height - 31), TextSecondaryBrush, BodyTypeface);
+        DrawText(dc, "Voltage solid   ·   Current dashed   ·   independent RMS scales",
+            8.5, new Point(6, height - 15), TextMutedBrush, BodyTypeface);
         if (!IsStreamLive)
             DrawText(dc, "STALE · last valid samples", 11, new Point(7, 5), StaleBrush, LabelTypeface);
     }
@@ -282,7 +307,7 @@ private void DrawGrid(DrawingContext dc, Point center, double radius)
         DrawText(dc, "0°", 9, new Point(center.X + radius - 19, center.Y + 4), TextMutedBrush, BodyTypeface);
         DrawText(dc, "180°", 9, new Point(center.X - radius + 4, center.Y + 4), TextMutedBrush, BodyTypeface);
         DrawText(dc, "+90°", 9, new Point(center.X + 5, center.Y - radius + 3), TextMutedBrush, BodyTypeface);
-        DrawText(dc, "-90°", 9, new Point(center.X + 5, center.Y + radius - 14), TextMutedBrush, BodyTypeface);
+        DrawText(dc, "270°", 9, new Point(center.X + 5, center.Y + radius - 14), TextMutedBrush, BodyTypeface);
     }
 
     private void DrawCenteredMessage(DrawingContext dc, Point center, string message)

From 810f882ff7dd08055bf821771335189be66a774f Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:34:24 +0700
Subject: [PATCH 032/148] Keep phasor scale footer readable in narrow panels

---
 src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
index 5256bc8f..64fe6a91 100644
--- a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
+++ b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
@@ -230,15 +230,15 @@ protected override void OnRender(DrawingContext dc)
         var currentUnit = _visualItems.FirstOrDefault(item =>
             item.Family == PhasorFamily.Current && IsRenderable(item))?.Unit ?? "A";
         var voltageScaleText = voltageMax > 0
-            ? $"U max {voltageMax:0.##} {voltageUnit}"
+            ? $"U max {voltageMax:0.###} {voltageUnit}"
             : "U N/A";
         var currentScaleText = currentMax > 0
-            ? $"I max {currentMax:0.##} {currentUnit}"
+            ? $"I max {currentMax:0.###} {currentUnit}"
             : "I N/A";
         DrawText(dc, $"{voltageScaleText}   ·   {currentScaleText}",
             10.0, new Point(6, height - 31), TextSecondaryBrush, BodyTypeface);
-        DrawText(dc, "Voltage solid   ·   Current dashed   ·   independent RMS scales",
-            8.5, new Point(6, height - 15), TextMutedBrush, BodyTypeface);
+        DrawText(dc, "U solid   ·   I dashed   ·   independent RMS scales",
+            9.5, new Point(6, height - 15), TextMutedBrush, BodyTypeface);
         if (!IsStreamLive)
             DrawText(dc, "STALE · last valid samples", 11, new Point(7, 5), StaleBrush, LabelTypeface);
     }

From 66c6fce835f62083f06c734d48983e4df659106d Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:34:52 +0700
Subject: [PATCH 033/148] Clarify live-with-warning and uncalibrated power
 without clipped N/A readouts

---
 src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
index 08fae1c6..4df497f8 100644
--- a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
+++ b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
@@ -1018,7 +1018,7 @@ public SvStreamItem ToStreamItem()
             var hasWarning = HasIntegrityIssue || RecentJitterOver300MicrosecondsCount > 0;
             var severityRank = isStale ? 2 : hasWarning ? 1 : 0;
             var statusText = isStale ? "Stale" : hasWarning ? "Live with warning" : "Live";
-            var displayStatus = isStale ? "STALE" : "LIVE";
+            var displayStatus = isStale ? "STALE" : hasWarning ? "LIVE · WARN" : "LIVE";
             var statusBrush = isStale ? "#F0B533" : hasWarning ? "#F0B533" : "#70D7A7";
             var statusSoftBrush = isStale ? "#3A2B12" : hasWarning ? "#3A2B12" : "#173528";
 

From c606cd172f384191bd449ac3d4c9d8d085d55692 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:34:56 +0700
Subject: [PATCH 034/148] Clarify live-with-warning and uncalibrated power
 without clipped N/A readouts

---
 src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index e03673b4..6c065f51 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -4325,7 +4325,7 @@ private static IReadOnlyList<PhasorDisplayItem> BuildPhasorItems(AnalogValuesSna
 
     private static string FormatPower(double value, string unit)
     {
-        if (!double.IsFinite(value)) return "N/A (scaling not verified)";
+        if (!double.IsFinite(value)) return "N/A";
         var abs = Math.Abs(value);
         if (abs >= 1_000_000.0)
             return $"{value / 1_000_000.0:0.00} M{unit}";

From 4e028cb8f38c627bf04b54e5ff8fdaad01c5a8fe Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:34:59 +0700
Subject: [PATCH 035/148] Clarify live-with-warning and uncalibrated power
 without clipped N/A readouts

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index d7b5cef7..9d4bfbe2 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -1086,7 +1086,8 @@
                                                     Margin="6,0,0,0"
                                                     VerticalAlignment="Center"
                                                     CornerRadius="9"
-                                                    Background="{Binding StatusSoftBrush}">
+                                                    Background="{Binding StatusSoftBrush}"
+                                                    ToolTip="{Binding IssueSummaryText}">
                                                 <TextBlock FontSize="8.8"
                                                            FontWeight="Bold"
                                                            Text="{Binding DisplayStatusText}"
@@ -2379,7 +2380,7 @@
                                                             <TextBlock DockPanel.Dock="Left" Text="Power estimate"
                                                                        Foreground="#A6CBE3" FontSize="11"
                                                                        FontWeight="SemiBold"/>
-                                                            <TextBlock DockPanel.Dock="Right" Text="Nominal scale"
+                                                            <TextBlock DockPanel.Dock="Right" Text="Nominal · uncalibrated"
                                                                        Foreground="#90B5D0" FontSize="9.5"
                                                                        ToolTip="{Binding EngineeringScaleExplanation}"/>
                                                         </DockPanel>
@@ -2387,28 +2388,28 @@
                                                             <StackPanel Margin="0,0,3,0">
                                                                 <TextBlock Text="P" Foreground="#8DAFCA" FontSize="9.5"/>
                                                                 <TextBlock Text="{Binding TotalActivePowerText}" Foreground="#EEF8FF"
-                                                                           FontSize="10.5" FontFamily="Consolas"
+                                                                           FontSize="11.2" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding TotalActivePowerText}"/>
                                                             </StackPanel>
                                                             <StackPanel Margin="0,0,3,0">
                                                                 <TextBlock Text="Q" Foreground="#8DAFCA" FontSize="9.5"/>
                                                                 <TextBlock Text="{Binding TotalReactivePowerText}" Foreground="#EEF8FF"
-                                                                           FontSize="10.5" FontFamily="Consolas"
+                                                                           FontSize="11.2" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding TotalReactivePowerText}"/>
                                                             </StackPanel>
                                                             <StackPanel Margin="0,0,3,0">
                                                                 <TextBlock Text="S" Foreground="#8DAFCA" FontSize="9.5"/>
                                                                 <TextBlock Text="{Binding TotalApparentPowerText}" Foreground="#EEF8FF"
-                                                                           FontSize="10.5" FontFamily="Consolas"
+                                                                           FontSize="11.2" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding TotalApparentPowerText}"/>
                                                             </StackPanel>
                                                             <StackPanel Margin="0,0,3,0">
                                                                 <TextBlock Text="PF" Foreground="#8DAFCA" FontSize="9.5"/>
                                                                 <TextBlock Text="{Binding PowerFactorText}" Foreground="#EEF8FF"
-                                                                           FontSize="10.5" FontFamily="Consolas"
+                                                                           FontSize="11.2" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding PowerFactorText}"/>
                                                             </StackPanel>

From 08d42e027f71d233d206af01aebe835bd4b59876 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:36:02 +0700
Subject: [PATCH 036/148] Regression-test live warning badges and independent
 current RMS/phasor readout

---
 .../OperatorPresentationReleaseTests.cs       | 57 +++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 tests/ProcessBus.Tests/OperatorPresentationReleaseTests.cs

diff --git a/tests/ProcessBus.Tests/OperatorPresentationReleaseTests.cs b/tests/ProcessBus.Tests/OperatorPresentationReleaseTests.cs
new file mode 100644
index 00000000..0127d0f5
--- /dev/null
+++ b/tests/ProcessBus.Tests/OperatorPresentationReleaseTests.cs
@@ -0,0 +1,57 @@
+using ProcessBus.Core.Models;
+using ProcessBus.Iec61850.Raw.Analysis;
+using Xunit;
+
+namespace ProcessBus.Tests;
+
+/// <summary>
+/// Keeps amber network-integrity health distinct from the green "receiving packets"
+/// badge while preventing a nominal-scale readout from inventing calibration.
+/// </summary>
+public sealed class OperatorPresentationReleaseTests
+{
+    private const int SamplesPerCycle = 80;
+
+    private static int[] Sample(int index)
+    {
+        var phase = 2.0 * Math.PI * index / SamplesPerCycle;
+        static int S(double x, double peak) => (int)Math.Round(Math.Sin(x) * peak);
+        return
+        [
+            S(phase, 1000), S(phase - 2 * Math.PI / 3, 1000),
+            S(phase + 2 * Math.PI / 3, 1200), 0,
+            S(phase, 8160), S(phase - 2 * Math.PI / 3, 8160),
+            S(phase + 2 * Math.PI / 3, 8160), 0
+        ];
+    }
+
+    [Fact]
+    public void StreamContinuityWarningIsNotMisrepresentedAsHealthyLive()
+    {
+        var analyzer = new RawProcessBusAnalyzer();
+        for (var i = 0; i < SamplesPerCycle * 4; i++)
+            analyzer.ObserveFrame(GoldenFrames.SvFrameWithChannelSamples((ushort)i, Sample(i)));
+        var healthy = Assert.Single(analyzer.GetAnalyzerSnapshot().Streams);
+        Assert.Equal("LIVE", healthy.DisplayStatusText);
+
+        // A forward counter gap is an integrity warning, not loss of live traffic.
+        analyzer.ObserveFrame(GoldenFrames.SvFrameWithChannelSamples(325, Sample(325)));
+        var warned = Assert.Single(analyzer.GetAnalyzerSnapshot().Streams);
+        Assert.True(warned.IsActive);
+        Assert.Equal("LIVE · WARN", warned.DisplayStatusText);
+        Assert.Equal("Live with warning", warned.StatusText);
+        Assert.Equal("#F0B533", warned.StatusBrush);
+    }
+
+    [Fact]
+    public void ChannelRmsAnglesRemainIndependentlyMeasuredAfterCounterWarning()
+    {
+        var analyzer = new RawProcessBusAnalyzer();
+        for (var i = 0; i < SamplesPerCycle * 4; i++)
+            analyzer.ObserveFrame(GoldenFrames.SvFrameWithChannelSamples((ushort)i, Sample(i)));
+        var values = analyzer.GetAnalyzerSnapshot().AnalogValues;
+        Assert.InRange(values.Ua.AngleDegrees!.Value, -0.1, 0.1);
+        Assert.InRange(values.Ic.RmsValue!.Value, 840, 860);
+        Assert.InRange(values.Ic.AngleDegrees!.Value, 119.8, 120.2);
+    }
+}

From 87f7bc09fe21724416ed1ed584697001fff3a790 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:36:47 +0700
Subject: [PATCH 037/148] Gate public releases on main and explicit field
 acceptance; never auto-publish on tag push

---
 .github/workflows/release-package.yml | 30 ++++++++++++++++++++++-----
 1 file changed, 25 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index db55da22..1d028f07 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -8,7 +8,12 @@ on:
         required: true
         default: 1.4.0
       publish_release:
-        description: Create or update a GitHub Release
+        description: Publish GitHub Release after successful validation (manual only)
+        required: true
+        default: false
+        type: boolean
+      field_acceptance_verified:
+        description: "I confirm documented real-NIC capture, injector agreement, and soak acceptance on the target Windows configuration"
         required: true
         default: false
         type: boolean
@@ -70,6 +75,22 @@ jobs:
           "value=$version" | Out-File -FilePath $env:GITHUB_OUTPUT -Append -Encoding utf8
           Write-Host "Release version: $version"
 
+      # Tags can build reproducible packages, but never auto-publish an
+      # unreviewed stable release simply because a tag was pushed.
+      - name: Public release authorization gate
+        if: ${{ github.event_name == 'workflow_dispatch' && inputs.publish_release }}
+        shell: pwsh
+        env:
+          FIELD_ACCEPTANCE: ${{ inputs.field_acceptance_verified }}
+          RUN_REF: ${{ github.ref }}
+        run: |
+          if ($env:RUN_REF -ne 'refs/heads/main') {
+            throw 'Public releases must be built from the validated main branch.'
+          }
+          if ($env:FIELD_ACCEPTANCE -ne 'true') {
+            throw 'Public release blocked: field acceptance has not been explicitly verified.'
+          }
+
       - name: Repository health gate
         shell: pwsh
         run: .\scripts\repository-health.ps1 -ExpectedVersion '${{ steps.version.outputs.value }}'
@@ -145,7 +166,7 @@ jobs:
           retention-days: 30
 
       - name: Publish GitHub Release
-        if: ${{ github.event_name == 'push' || github.event.inputs.publish_release == 'true' }}
+        if: ${{ github.event_name == 'workflow_dispatch' && inputs.publish_release }}
         shell: pwsh
         env:
           GH_TOKEN: ${{ github.token }}
@@ -163,9 +184,8 @@ jobs:
           $releaseArgs = @('release', 'create', $tag, $installer, $zip, $sha, $manifest, '--title', "Process Bus Insight $tag", '--notes-file', $notesFile, '--target', '${{ github.sha }}')
           $isDraft = '${{ github.event.inputs.draft }}'
           $isPrerelease = '${{ github.event.inputs.prerelease }}'
-          if ('${{ github.event_name }}' -eq 'push') {
-            $isPrerelease = if ($version -match '-') { 'true' } else { 'false' }
-          }
+          # A pre-release version must always remain a prerelease.
+          if ($version -match '-') { $isPrerelease = 'true' }
           if ($isDraft -eq 'true') { $releaseArgs += '--draft' }
           if ($isPrerelease -eq 'true') { $releaseArgs += '--prerelease' }
 

From e9af76c114aca3f57f5c9c450251e53473a3ddd1 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:38:45 +0700
Subject: [PATCH 038/148] Add compact finite-valued U/I RMS scale labels
 without rounding nonzero signals to zero

---
 .../Presentation/PhasorScaleCaption.cs        | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 src/ProcessBus.Core/Presentation/PhasorScaleCaption.cs

diff --git a/src/ProcessBus.Core/Presentation/PhasorScaleCaption.cs b/src/ProcessBus.Core/Presentation/PhasorScaleCaption.cs
new file mode 100644
index 00000000..b8797b99
--- /dev/null
+++ b/src/ProcessBus.Core/Presentation/PhasorScaleCaption.cs
@@ -0,0 +1,35 @@
+using System.Globalization;
+
+namespace ProcessBus.Core.Presentation;
+
+/// <summary>
+/// Compact engineering labels for the normalized U/I plot; never mutate or
+/// quantize the underlying RMS values or phase-angle measurements.
+/// </summary>
+public static class PhasorScaleCaption
+{
+    public static string Format(string family, double rmsMaximum, string? unit)
+    {
+        if (!double.IsFinite(rmsMaximum) || rmsMaximum <= 0)
+            return $"{family} N/A";
+
+        var suffix = string.IsNullOrWhiteSpace(unit) ? "counts" : unit.Trim();
+        var value = rmsMaximum;
+        var prefix = string.Empty;
+        if (value >= 1_000_000)
+        {
+            value /= 1_000_000;
+            prefix = "M";
+        }
+        else if (value >= 10_000)
+        {
+            value /= 1_000;
+            prefix = "k";
+        }
+
+        // Nonzero currents must never look like zero just because the legend
+        // chose two decimal places. Keep 3 significant digits on small values.
+        var format = value < 0.01 ? "G3" : "0.###";
+        return $"{family} max {value.ToString(format, CultureInfo.InvariantCulture)} {prefix}{suffix}";
+    }
+}

From 2ea90cd90f12164f7c73b82b6c887a6589f8c88a Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:38:57 +0700
Subject: [PATCH 039/148] Use tested engineering-scale formatter for phasor
 legend

---
 src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
index 64fe6a91..a7396086 100644
--- a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
+++ b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
@@ -229,12 +229,8 @@ protected override void OnRender(DrawingContext dc)
             item.Family == PhasorFamily.Voltage && IsRenderable(item))?.Unit ?? "V";
         var currentUnit = _visualItems.FirstOrDefault(item =>
             item.Family == PhasorFamily.Current && IsRenderable(item))?.Unit ?? "A";
-        var voltageScaleText = voltageMax > 0
-            ? $"U max {voltageMax:0.###} {voltageUnit}"
-            : "U N/A";
-        var currentScaleText = currentMax > 0
-            ? $"I max {currentMax:0.###} {currentUnit}"
-            : "I N/A";
+        var voltageScaleText = PhasorScaleCaption.Format("U", voltageMax, voltageUnit);
+        var currentScaleText = PhasorScaleCaption.Format("I", currentMax, currentUnit);
         DrawText(dc, $"{voltageScaleText}   ·   {currentScaleText}",
             10.0, new Point(6, height - 31), TextSecondaryBrush, BodyTypeface);
         DrawText(dc, "U solid   ·   I dashed   ·   independent RMS scales",

From 7d5e5caa5454c17e6f84f3c01439fd5b726a029a Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:39:13 +0700
Subject: [PATCH 040/148] Test compact phasor U/I scale legends including tiny
 nonzero and missing RMS

---
 .../PhasorPresentationContractTests.cs        | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
index 0fe6e5e5..9253ff99 100644
--- a/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
+++ b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
@@ -94,6 +94,25 @@ public void SixCrowdedLabelsStayInsideNarrowViewportAndNeverOverlap(double width
         }
     }
 
+
+    [Theory]
+    [InlineData(57.739999, "V", "U max 57.74 V")]
+    [InlineData(0.0001234, "A", "U max 0.000123 A")]
+    [InlineData(15000, "counts", "U max 15 kcounts")]
+    [InlineData(1250000, "V", "U max 1.25 MV")]
+    public void PhasorScaleLabelsPreserveNonzeroEvidenceWithoutChangingEngineeringData(
+        double rms, string unit, string expected)
+    {
+        Assert.Equal(expected, PhasorScaleCaption.Format("U", rms, unit));
+    }
+
+    [Fact]
+    public void MissingOrInvalidRmsNeverCreatesAConvincingScale()
+    {
+        Assert.Equal("I N/A", PhasorScaleCaption.Format("I", 0, "A"));
+        Assert.Equal("I N/A", PhasorScaleCaption.Format("I", double.NaN, "A"));
+    }
+
     [Fact]
     public void SixVectorsSharingOneAngleStillReceiveDistinctStableLabelSlots()
     {

From 68b23d91f3e2ebe3c113d9367af49615cf25cf60 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:40:28 +0700
Subject: [PATCH 041/148] Align offline manuals and bench guidance with Inno
 installer, SSOT and operator-controlled updates

---
 docs/USER_MANUAL.md | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/docs/USER_MANUAL.md b/docs/USER_MANUAL.md
index c44605ba..9afa743c 100644
--- a/docs/USER_MANUAL.md
+++ b/docs/USER_MANUAL.md
@@ -14,13 +14,15 @@ Process Bus Insight is a receive-only Windows analyzer for IEC 61850 Process Bus
 
 Use a safe capture path such as a TAP, mirror port, or isolated engineering test switch. Avoid connecting an unverified PC directly into a protection-critical path. Install Npcap when raw Ethernet frame capture is required.
 
-## Running the portable package
+## Install, update, or run the portable option
 
-1. Download the latest Windows x64 portable ZIP from GitHub Releases.
-2. Extract it to a local folder, for example `C:\Tools\ProcessBusInsight`.
-3. Run `ProcessBusInsight.exe`.
-4. Select the physical Ethernet adapter connected to the Process Bus traffic.
-5. Start capture.
+1. Obtain `ProcessBusInsight-vX.Y.Z-win-x64-setup.exe` from the official GitHub Releases page and compare its SHA256 with the published manifest.
+2. Close the analyzer before installing or upgrading. Run the Inno Setup installer (administrator privileges are required for Program Files). It retains the previous install directory during in-place upgrades.
+3. Start **Process Bus Insight** from the Windows Start Menu. The installed folder includes **User Manual.pdf**, **Quick Start.pdf**, **Install and Update.md**, and separate offline Bench tools; these do not require network access.
+4. Install Npcap separately for live raw Ethernet capture. If its architecture or native driver is incompatible, the selector reports `Npcap unavailable — capture disabled`; no dummy Ethernet entry is usable for capture.
+5. Select the physical Ethernet adapter connected to an authorized TAP/SPAN/test network, then start capture.
+
+A manual portable ZIP remains available for specialist use. If a same-version installation is damaged, rerun that setup EXE for repair; use Windows Installed apps or the Start Menu to uninstall. This is **operator-initiated updating**, not automatic background updating. The current installer is unsigned, so verify source and SHA256 and follow your organization's software policy.
 
 ## Main workflow
 
@@ -34,7 +36,7 @@ Use a safe capture path such as a TAP, mirror port, or isolated engineering test
 
 ## Sampled Values view
 
-Use the SV workspace to check stream identity, APPID, svID, VLAN, source MAC, continuity counters, waveform, phasor, and metering context. Treat missing stream or mismatch indications as investigation leads, not final protection conclusions until the network capture path is confirmed.
+Use the SV workspace to check stream identity, APPID, svID, VLAN, source MAC, continuity counters, waveform, phasor, and metering context. The phasor plot uses independent voltage/current RMS scales, solid U and dashed I arrows, and an explicit held-state indicator when the stream is stale. An amber **LIVE · WARN** stream badge means samples are arriving but continuity/arrival diagnostics require review; a green waveform LIVE badge signals activity, not clean integrity. Treat missing stream or mismatch indications as investigation leads, not final protection conclusions until the network capture path is confirmed.
 
 ## GOOSE inspector
 
@@ -53,7 +55,7 @@ Load SCD, ICD, or CID files when engineering files are available. The app can co
 Common causes:
 
 - Wrong adapter selected.
-- Npcap is not installed or capture permission is restricted.
+- Npcap is not installed, its native x64 libraries cannot load, or capture permission is restricted.
 - Switch mirror port is not configured correctly.
 - VLAN traffic is not forwarded to the capture port.
 - PC is connected to the wrong network segment.

From 5ccf1e4785e145ee6945dff6247449d024de9dbc Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:40:32 +0700
Subject: [PATCH 042/148] Align offline manuals and bench guidance with Inno
 installer, SSOT and operator-controlled updates

---
 docs/QUICK_START.md | 25 +++++++++----------------
 1 file changed, 9 insertions(+), 16 deletions(-)

diff --git a/docs/QUICK_START.md b/docs/QUICK_START.md
index e97b4300..276f82fc 100644
--- a/docs/QUICK_START.md
+++ b/docs/QUICK_START.md
@@ -1,6 +1,6 @@
 # Quick Start — Process Bus Insight
 
-Process Bus Insight is a receive-only IEC 61850 Process Bus analyzer for Windows. This guide helps you run the portable package and start a safe observation workflow.
+Process Bus Insight is a receive-only IEC 61850 Process Bus analyzer for Windows. This guide explains the recommended Inno Setup installation (or optional portable ZIP) and a safe observation workflow.
 
 ## 1. Prepare the Windows machine
 
@@ -18,26 +18,19 @@ Avoid these adapters for serious timing interpretation:
 - Hyper-V, VMware, VPN, or virtual bridge adapters.
 - Unverified USB Ethernet adapters when timing evidence matters.
 
-## 2. Download and extract
+## 2. Download and install
 
-1. Open the GitHub Releases page.
-2. Download the latest `ProcessBusInsight-vX.Y.Z-win-x64-portable.zip`.
-3. Download `SHA256SUMS.txt` if you want to verify file integrity.
-4. Extract the ZIP to a local folder such as:
-
-```text
-C:\Tools\ProcessBusInsight
-```
+1. Open [official GitHub Releases](https://github.com/masarray/DigSubAnalyzer/releases).
+2. Download `ProcessBusInsight-vX.Y.Z-win-x64-setup.exe` and verify its SHA256 against `SHA256SUMS.txt`.
+3. Close any prior running instance and run the Inno Setup installer. It installs into `C:\Program Files\Process Bus Insight` by default, creating a Start Menu shortcut and optional desktop shortcut.
+4. For an upgrade, run the newer installer without uninstalling first; the stable application identity retains the previous install directory. Re-running the same installer can repair files.
+5. The optional portable ZIP can still be extracted manually to `C:\Tools\ProcessBusInsight` when appropriate.
 
 ## 3. Run the app
 
-Open the extracted folder and run:
-
-```text
-ProcessBusInsight.exe
-```
+Launch **Process Bus Insight** from the Start Menu, or run `ProcessBusInsight.exe` from the installed folder. **Quick Start.pdf**, **User Manual.pdf**, and **Install and Update.md** are available offline in the same folder; shortcuts to both PDFs are in the Start Menu.
 
-The default release package publishes the app as a self-contained single EXE at the package root. The package also includes Quick Start PDF and User Manual PDF documents for offline field use.
+The application is self-contained. Npcap is installed separately for live capture, never silently by this installer. If Npcap cannot load, the application shows `Npcap unavailable — capture disabled` and will not fabricate a capture-capable Ethernet adapter.
 
 ## 4. Start a safe capture workflow
 

From f13e813cd546f619558c15311e62b3426bf1ae0e Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:40:34 +0700
Subject: [PATCH 043/148] Align offline manuals and bench guidance with Inno
 installer, SSOT and operator-controlled updates

---
 docs/PHYSICAL_BENCH_QUICK_START.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/PHYSICAL_BENCH_QUICK_START.md b/docs/PHYSICAL_BENCH_QUICK_START.md
index f0440830..2db49055 100644
--- a/docs/PHYSICAL_BENCH_QUICK_START.md
+++ b/docs/PHYSICAL_BENCH_QUICK_START.md
@@ -1,12 +1,12 @@
 # Physical test quick start — DigSubAnalyzer / Process Bus Insight
 
-This folder is included in the **Windows x64 release candidate ZIP** so the bench
+This folder is included in the **installed Windows x64 application and optional portable ZIP** so the bench
 does not need a .NET SDK. Run only on an authorized, isolated engineering process
 bus. The analyzer is **receive-only** and cannot operate or protect an IED.
 
 ## 1. Run the desktop application
 
-1. Extract the entire ZIP, not just the EXE, to a local folder.
+1. Install the Inno Setup candidate to a local Windows test machine (or extract the entire optional portable ZIP).
 2. Install Npcap separately with appropriate raw Ethernet capture rights.
 3. Run `ProcessBusInsight.exe` in the package root.
 4. Select the verified adapter connected to an independent TAP/SPAN (preserve
@@ -24,7 +24,7 @@ the NIC do **not** establish clock discipline or lock.
 
 ## 2. Screen the same wire recording with the bundled CLI
 
-Open PowerShell in the extracted package directory. Replace file paths with
+Open PowerShell in the installed program directory or extracted package directory. Replace file paths with
 files collected on your **own local bench**:
 
 ```powershell
@@ -72,5 +72,5 @@ Before any **physical acceptance** claim, independently verify:
 
 The detailed step-by-step sign-off matrix is in
 `Bench/M4_ARSTACK_INTEROP_ACCEPTANCE.md`. Record the candidate artifact run
-ID and checksums with your evidence. This candidate is not a stable/certified
+ID and checksums with your evidence. A candidate without documented physical acceptance is not a stable/certified
 release and provides no switching, control or protection-action authority.

From d27da7e7fc7b5ccd624f713ed6207730e971290b Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:40:52 +0700
Subject: [PATCH 044/148] Ship current editable offline manuals alongside PDF
 editions and verify installation

---
 scripts/publish-windows-portable.ps1 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index 5041434a..add28240 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -15,7 +15,7 @@ Set-Location $repoRoot
 if ([string]::IsNullOrWhiteSpace($Version)) { throw "Version cannot be empty." }
 
 $requiredReleaseDocs = @(
-    "docs/QUICK_START.pdf", "docs/USER_MANUAL.pdf", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
+    "docs/QUICK_START.pdf", "docs/USER_MANUAL.pdf", "docs/QUICK_START.md", "docs/USER_MANUAL.md", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
     "COMMERCIAL-LICENSE.md", "COPYRIGHT.md", "TRADEMARK.md",
     "THIRD_PARTY_NOTICES.md", "docs/LICENSING.md"
 )
@@ -145,6 +145,8 @@ $copyMap = @(
     @{ Source = "docs/LICENSING.md"; Destination = "Licensing.md" },
     @{ Source = "docs/QUICK_START.pdf"; Destination = "Quick Start.pdf" },
     @{ Source = "docs/USER_MANUAL.pdf"; Destination = "User Manual.pdf" },
+    @{ Source = "docs/QUICK_START.md"; Destination = "Quick Start.md" },
+    @{ Source = "docs/USER_MANUAL.md"; Destination = "User Manual.md" },
     @{ Source = "docs/INSTALLATION_AND_UPDATE.md"; Destination = "Install and Update.md" }
 )
 foreach ($item in $copyMap) {

From 16dcb1468294493b8daa5b410c1bf2d1507daeab Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:40:54 +0700
Subject: [PATCH 045/148] Ship current editable offline manuals alongside PDF
 editions and verify installation

---
 scripts/verify-release-package.ps1 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/scripts/verify-release-package.ps1 b/scripts/verify-release-package.ps1
index d3a9f702..7cb68a6e 100644
--- a/scripts/verify-release-package.ps1
+++ b/scripts/verify-release-package.ps1
@@ -17,6 +17,8 @@ try {
         "$AppName.exe",
         "Quick Start.pdf",
         "User Manual.pdf",
+        "Quick Start.md",
+        "User Manual.md",
         "Install and Update.md",
         "README.txt",
         "LICENSE.txt",

From 00d28e7064d94eb7ac7f1200756b3d7d12f699c6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:40:57 +0700
Subject: [PATCH 046/148] Ship current editable offline manuals alongside PDF
 editions and verify installation

---
 scripts/verify-windows-installer.ps1 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/scripts/verify-windows-installer.ps1 b/scripts/verify-windows-installer.ps1
index 01c4b6aa..6f24ec3c 100644
--- a/scripts/verify-windows-installer.ps1
+++ b/scripts/verify-windows-installer.ps1
@@ -48,6 +48,8 @@ try {
             'ProcessBusInsight.exe',
             'Quick Start.pdf',
             'User Manual.pdf',
+            'Quick Start.md',
+            'User Manual.md',
             'Install and Update.md',
             'LICENSE.txt',
             'README.txt',

From 0ac06f1dc3fdea372274d4151a75d382fb579c60 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:42:28 +0700
Subject: [PATCH 047/148] Add explicit per-commit physical acceptance and
 automated release gate matrix

---
 .../V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md       | 64 +++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md

diff --git a/docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md b/docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md
new file mode 100644
index 00000000..71cadb9a
--- /dev/null
+++ b/docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md
@@ -0,0 +1,64 @@
+# v1.4.0 public release acceptance — open gates
+
+This document distinguishes **automated evidence** from **physical acceptance**. It is a release gate, not a conformance certificate. Never claim measured performance or perfect IEC 61850 interoperability from a screenshot.
+
+## 1. Build and source identity
+
+- Target commit SHA: **PENDING — record the final merged main commit**
+- Public version: 1.4.0 (only after every gate is signed off)
+- Candidate installer: **PENDING — record GitHub Actions run number and SHA256**
+- Native target: Windows x64, self-contained .NET 8 and separately installed Npcap
+- Official license: GPL-3.0-or-later, with all notices and source availability
+
+## 2. Automated release checks
+
+| Gate | Evidence required | Status |
+| --- | --- | --- |
+| Repository health, clean restore/build and full unit suite | CI run and TRX | PENDING current final SHA |
+| Live current vs voltage angle/RMS, invalid sample, rollover, multi-stream isolation | Production analyzer xUnit regressions | PENDING final SHA |
+| Zero phasor invention, label collision and tiny-scale legend | Presentation xUnit regressions | PENDING final SHA |
+| Runtime stability and immutable snapshot/PCAP replay | Repeated Actions jobs | PENDING final SHA |
+| CodeQL and dependency high/critical audit | Completed successful Actions checks | PENDING final SHA |
+| Installer integrity and smoke | EXE SHA256, install → repair → documentation hashes → uninstall | PENDING final SHA |
+| Release notes, GPL notices, local Quick Start/User Manual and update guide | Installer contents + package verification | PENDING final SHA |
+
+An older `.github/release/v1.4.0.approved` file refers to an **older main commit / portable candidate** and does **not** approve this PR's new installer or Npcap/phasor code. The v1.3.0-beta.2 60-minute run is a useful historical baseline, not proof for this SHA.
+
+## 3. Current engineer-visible visual check
+
+The user-supplied same-session 50 Hz injector/analyzer screenshots show:
+
+| Channel | Injector RMS / angle | Analyzer RMS / angle |
+| --- | --- | --- |
+| Ua | 57.740 V / 0.00° | 57.73 V / 0.00° |
+| Ub | 57.740 V / -120.00° | 57.73 V / -120.01° |
+| Uc | 57.740 V / +120.00° | 57.73 V / +120.01° |
+| Ia | 1.000 A / +30.00° | 1.00 A / +30.00° |
+| Ib | 1.000 A / -90.00° | 1.00 A / -90.00° |
+| Ic | 1.200 A / +150.00° | 1.20 A / +149.99° |
+
+These observations show good displayed agreement **for that one setting only**. They are not calibrated accuracy proof, independent PCAP/SCL verification, or sustained-load evidence. Do not publish site/device-specific screenshots or identifiers.
+
+## 4. Physical target-PC acceptance (BLOCKING for stable public release)
+
+Run on the final installed candidate, not an earlier portable build:
+
+- [ ] Confirm Windows x64 version/build, native Npcap version, NIC driver, adapter name/type (sanitized), receive-only TAP/SPAN topology, installer SHA256, exact application assembly version.
+- [ ] Confirm actual ASIX/other physical adapter enumerates without a fabricated fallback; start/stop/restart capture and uninstall/upgrade/repair on target Windows.
+- [ ] Compare 6 channel U/I RMS + phase against the **actual injector source values** over multiple non-nominal settings; change each one independently. Include zero/missing, distorted/harmonic samples, scale changes and reference fallback.
+- [ ] Confirm phase reference and angle sign conventions on waveform, table, phasor and power; note 0° / +90° / 180° / 270° convention.
+- [ ] Verify true canonical SV publisher strong identity (APPID, svID, MAC, VLAN, confRev, smpCnt, ASDU mapping), not just a diagnostic mirror. Preserve authorized/sanitized PCAP + optional SCL evidence locally.
+- [ ] Test 4000 and 4800 sample-per-second profiles, counter rollovers, duplicate/missing samples, publisher restart, three or more streams selected/interleaved, and 2/4/8 cycle windows as applicable.
+- [ ] Verify GOOSE, PTP and SCL workspaces on actual bench traffic. PTP visibility does not establish hardware timing accuracy.
+- [ ] Record a minimum **60-minute** physical session at real capture rate, plus process CPU, heap/working set, UI responsiveness, native driver/interface drops and consecutive capture-error counts. Attach sanitized summaries, not raw customer captures.
+- [ ] Confirm closing capture, reinstalling/repairing and uninstalling do not hang and do not delete unrelated user data; verify no unexpected data upload/network transmission.
+- [ ] Confirm UI on 100%, 125% and 150% Windows DPI, 1366×768 minimum layout and normal 1920×1080, with readable phasor labels, legends, powers and status warnings.
+
+**Physical gate result:** PENDING. No final candidate-run evidence is attached yet.
+
+## 5. Publication control
+
+- Main-branch PR merge only after automated checks.
+- Public release workflow manual dispatch must explicitly confirm current **field_acceptance_verified**, and refuses non-main source; tag pushes **cannot automatically publish**.
+- Stable GitHub release must include the Inno Setup installer as primary, portable ZIP as optional, SHA256SUMS, manifest and current release notes.
+- Until all gates close: distribute an Actions **candidate** for testing, but do not tag/publish it as certified, calibrated, or generally interoperable.

From b596ddb552063ef5aaaf2e0db825e81481a8f83d Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:43:49 +0700
Subject: [PATCH 048/148] Align public release notes, checklist and test matrix
 with verified Inno gates and outstanding physical acceptance

---
 docs/validation/TESTED_CONFIGURATIONS.md | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/docs/validation/TESTED_CONFIGURATIONS.md b/docs/validation/TESTED_CONFIGURATIONS.md
index 9b53eb31..a1543436 100644
--- a/docs/validation/TESTED_CONFIGURATIONS.md
+++ b/docs/validation/TESTED_CONFIGURATIONS.md
@@ -10,15 +10,17 @@ This matrix records explicit evidence. It is not a vendor-certification claim.
 | Runtime snapshot | Copied selected-stream identity, waveform, analog, phasor, shape, and diagnostics; atomic generation publication | Repeated `RuntimeArchitecture` xUnit category with TRX artifacts | Automated |
 | Classic PCAP replay | PCAP 2.4, Ethernet link type 1, little/big endian, micro/nanosecond timestamps, truncated/oversized rejection | Repeated `RuntimeArchitecture` xUnit category with TRX artifacts | Automated |
 | Replay isolation | Three interleaved SV streams replayed through the live raw analyzer entry point | Runtime architecture regression tests | Automated |
-| Packaging | Windows x64 self-contained single-file ZIP | Candidate/release workflow and package verification script | Automated |
+| Packaging | Windows x64 Inno Setup self-contained installer (primary), portable ZIP (optional); install/repair/offline manuals/uninstall | Windows candidate workflow + SHA256 smoke gates | Automated |
 | Website | Static GitHub Pages source validation | Pages workflow | Automated |
-| Live capture | Windows + Npcap + selected Ethernet adapter | Maintainer smoke/soak evidence | Maintainer validation |
-| Runtime soak | 60-minute live session, three simultaneous streams, memory 141.6 MB start / 144.5 MB peak / 142.1 MB end, zero freeze/disconnect/cross-stream mixing | `V1.3.0_BETA2_FIELD_EVIDENCE.md` | PASS |
+| Live capture | Windows + Npcap + selected Ethernet adapter | Historical bench and current screenshot show adapter + one SV stream; fresh final candidate acceptance required | **Pending current final SHA** |
+| Runtime soak | Historical v1.3.0-beta.2 60-minute live session, three streams, memory 141.6/144.5/142.1 MB | `V1.3.0_BETA2_FIELD_EVIDENCE.md` | PASS **historical only; pending v1.4.0 final candidate** |
 | Timing | Windows/Npcap or recorded PCAP timestamps | Screening only | Not measurement-grade |
 | PCAPNG replay | Not implemented in v1.4.0-beta.1 | No evidence | Not claimed |
 | Multi-vendor SCL | SCD/ICD/CID examples and parser tests | Partial | Broader validation required |
 | Hardware timestamping | Validated NIC/TAP timestamp path | None in public beta | Not claimed |
 
+The 2026-10-19 same-session injector/analyzer screenshot shows close agreement for one 4I+4V 50 Hz configuration, including Ia +30°, Ib -90° and Ic +150°, but does not prove sustained resource usage or packet-by-packet equivalence. See [current v1.4.0 acceptance gates](V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md).
+
 ## Release evidence to record
 
 For each public beta, record:

From d08a19c9d56de348e5dc2113f685a3dbeb7a1ae5 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:43:54 +0700
Subject: [PATCH 049/148] Align public release notes, checklist and test matrix
 with verified Inno gates and outstanding physical acceptance

---
 docs/RELEASE_PACKAGING.md | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/docs/RELEASE_PACKAGING.md b/docs/RELEASE_PACKAGING.md
index 7d7b6c7d..c03e408c 100644
--- a/docs/RELEASE_PACKAGING.md
+++ b/docs/RELEASE_PACKAGING.md
@@ -57,16 +57,18 @@ git add -f docs/QUICK_START.pdf docs/USER_MANUAL.pdf
 ## Local packaging
 
 ```powershell
-.\scripts\repository-health.ps1 -ExpectedVersion "1.4.0-beta.2"
-.\scripts\publish-windows-portable.ps1 -Version "1.4.0-beta.2"
-.\scripts\verify-release-package.ps1 -PackageZip ".\artifacts\release\ProcessBusInsight-v1.4.0-beta.2-win-x64-portable.zip"
+.\scripts\repository-health.ps1 -ExpectedVersion "1.4.0"
+.\scripts\publish-windows-portable.ps1 -Version "1.4.0"
+.\scripts\verify-release-package.ps1 -PackageZip ".\artifacts\release\ProcessBusInsight-v1.4.0-win-x64-portable.zip"
+.\scripts\publish-windows-installer.ps1 -Version "1.4.0"
+.\scripts\verify-windows-installer.ps1 -Installer ".\artifacts\release\ProcessBusInsight-v1.4.0-win-x64-setup.exe" -StageDir ".\artifacts\package\ProcessBusInsight-v1.4.0-win-x64-portable"
 ```
 
 ## GitHub workflows
 
-The candidate workflow runs for `stabilization/*`, `architecture/*`, and `legal/*` pull requests when relevant files change. It restores, builds, tests, packages, verifies the ZIP and legal documents, creates a candidate manifest, and uploads the candidate without publishing a public release.
+The candidate workflow runs for supported pull-request branches (including `fix/*`, `feat/*`, `stabilization/*`, `architecture/*`, `legal/*`) when relevant files change. It restores, builds, tests, packages, verifies the ZIP and legal documents, creates a candidate manifest, and uploads the candidate without publishing a public release.
 
-The release workflow runs manually or for tags matching `v*`. It restores, builds, tests, packages, verifies the ZIP, produces a checksum and release manifest, uploads workflow evidence, and optionally creates a GitHub Release.
+The release workflow builds on manual dispatch or tags matching `v*`. **A tag push cannot publish a public release.** A public release is an explicit manual `publish_release=true` from `main` requiring `field_acceptance_verified=true`; this must correspond to the current final installer and documented physical soak gate. The workflow restores, builds, tests, packages the Inno EXE and optional ZIP, smoke-tests installation/repair/uninstall, produces checksums and a release manifest, and uploads evidence before publication.
 
 ## Packaging design notes
 

From 87a80d80f63c473c996d05c775cbba0902ef2fd1 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:43:57 +0700
Subject: [PATCH 050/148] Align public release notes, checklist and test matrix
 with verified Inno gates and outstanding physical acceptance

---
 docs/development/RELEASE_CHECKLIST.md | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/docs/development/RELEASE_CHECKLIST.md b/docs/development/RELEASE_CHECKLIST.md
index 29ee5fb5..35feea1b 100644
--- a/docs/development/RELEASE_CHECKLIST.md
+++ b/docs/development/RELEASE_CHECKLIST.md
@@ -24,8 +24,9 @@
 - [ ] Truncated, unsupported-link-type, invalid-timestamp, and oversized-record cases are rejected
 - [ ] CodeQL completes
 - [ ] Dependency review has no unresolved high-severity finding
-- [ ] Portable candidate package verification succeeds
-- [ ] ZIP checksum and candidate/release manifest are generated
+- [ ] Primary Inno Setup candidate and optional portable ZIP package verification succeed
+- [ ] Installer install → repair → offline PDFs/Markdown docs → uninstall smoke test succeeds
+- [ ] EXE and ZIP checksums and candidate/release manifests are generated
 
 ## Runtime smoke test
 
@@ -39,7 +40,9 @@
 - [ ] 4000 and 65536 sample-counter rollover behavior is exercised
 - [ ] Duplicate, forward-gap, and publisher-restart behavior is exercised
 - [ ] GOOSE, PTP, and SCL workspaces open and update
-- [ ] 30–60 minute soak test shows no material memory growth or UI freeze
+- [ ] At least 60-minute soak of the **exact final candidate** on actual Windows x64/Npcap/Ethernet hardware shows no material memory growth, capture failure or UI freeze; retain sanitized process statistics and driver-drop evidence
+- [ ] Injector U/I RMS/phase changes agree across all six channels in both directions and on non-nominal/zero/missing samples
+- [ ] UI/phasor/status/power is readable at 100%, 125%, 150% DPI, including stale/amber-warning states
 
 ## Replay and immutable snapshot checks
 
@@ -64,7 +67,7 @@
 
 ## Package legal content
 
-- [ ] ZIP contains `LICENSE.txt`, `NOTICE.txt`, `COMMERCIAL-LICENSE.md`, `COPYRIGHT.md`, `TRADEMARK.md`, `THIRD_PARTY_NOTICES.md`, and `Licensing.md`
+- [ ] Installer and ZIP contain `LICENSE.txt`, `NOTICE.txt`, `COMMERCIAL-LICENSE.md`, `COPYRIGHT.md`, `TRADEMARK.md`, `THIRD_PARTY_NOTICES.md`, and `Licensing.md`
 - [ ] `LICENSE.txt` contains GNU GPL version 3
 - [ ] No historical Apache license file is presented as the current package license
 - [ ] Commercial notice non-grant wording is intact
@@ -73,7 +76,9 @@
 ## Release
 
 - [ ] Create signed/verified tag where available
-- [ ] Publish portable ZIP, `SHA256SUMS.txt`, and `release-manifest.json`
+- [ ] Publish Inno Setup installer (primary), optional portable ZIP, `SHA256SUMS.txt`, and `release-manifest.json`
+- [ ] Confirm `docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md` is signed off for the final commit and installed candidate (historic approval is insufficient)
+- [ ] Public release is manually dispatched **from main** with current field acceptance confirmation; pushing a tag cannot silently publish
 - [ ] Mark beta releases as prerelease
 - [ ] Confirm GitHub Pages and download links
 - [ ] Do not replace a historical Apache release asset with a post-transition GPL binary under the same tag; use the new version `v1.4.0-beta.2` or later
\ No newline at end of file

From dac94122dc78d05dbce67d69b18f5287dbac87bf Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:43:59 +0700
Subject: [PATCH 051/148] Align public release notes, checklist and test matrix
 with verified Inno gates and outstanding physical acceptance

---
 docs/RELEASE_NOTES_v1.4.0.md | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/docs/RELEASE_NOTES_v1.4.0.md b/docs/RELEASE_NOTES_v1.4.0.md
index 117ca3e7..f50b6911 100644
--- a/docs/RELEASE_NOTES_v1.4.0.md
+++ b/docs/RELEASE_NOTES_v1.4.0.md
@@ -1,22 +1,26 @@
-# Process Bus Insight v1.4.0 — Stable
+# Process Bus Insight v1.4.0 — Release notes (stable publication gated)
 
-Public Windows x64 portable release of **Process Bus Insight**, the receive-only IEC 61850 SV / GOOSE / PTP analyzer.
+Proposed public Windows x64 release of **Process Bus Insight**, the receive-only IEC 61850 SV / GOOSE / PTP analyzer. **Do not publish this build as stable until the current installer passes the documented physical acceptance gate** in `docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md`.
 
 ## Operator improvements
 
 - Five uncluttered primary workspaces: Analyzer, Diagnostics, GOOSE, Timing/PTP, and SCL.
 - Advanced raw packet inspection and engineering validation stay accessible through the Tools menu instead of adding navigation tabs.
 - SCL mismatch badges and expected/observed svID text remain readable with natural-height rows and multiline wrapping. Redundant column and explanatory captions are removed; full matched evidence is still available in technical details and tooltips.
-- SV real-sample waveform display, zero-cross alignment, stream-aware auto peak scaling, calibrated-unit selection, phasors and RMS.
+- SV real-sample waveform display, zero-cross alignment, stream-aware auto peak scaling, nominal engineering-unit selection, phasors and RMS. Nominal scaling is **not** metrological calibration.
+- Compact overlay fasors distinguish solid voltage / dashed current strokes, use separate relative RMS scales, display numerical U/I maxima and preserve an exact measured angle from the selected-stream engine.
+- Clear amber `LIVE · WARN` badge for an active stream with continuity/arrival warnings; green waveform LIVE means activity only. Stale vectors are explicitly held, not described as live.
+- A native Npcap architecture/load problem cannot be represented as a capturable dummy Ethernet interface. The app shows an unavailable diagnostic until a valid driver/NIC is detected.
 - Per-stream diagnostics: arrival jitter, smpCnt discontinuity, missing samples, svQuality/smpSynch and capture-path indicators.
 - GOOSE event timeline, PTP context, SCL stream catalog, dataset order and compare-to-wire evidence.
 
 ## Install and verify
 
-1. Download `ProcessBusInsight-v1.4.0-win-x64-portable.zip` from this release.
-2. Compare SHA256 with `SHA256SUMS.txt` and extract the portable application.
-3. Install Npcap separately for live network capture. For offline analysis, open a compatible classic Ethernet PCAP.
-4. Select the capture adapter and click Run. Use SCL Import to load SCD/CID/ICD/IID for expected/observed identity comparison.
+1. Download **`ProcessBusInsight-v1.4.0-win-x64-setup.exe`** and compare SHA256 with `SHA256SUMS.txt`.
+2. Run the Inno Setup installer. It includes self-contained application files, **User Manual.pdf**, **Quick Start.pdf**, updated Markdown manuals, and **Install and Update.md** directly in the install folder. Start Menu manual shortcuts are available offline.
+3. To update, close the application and run the newer installer; it retains the installation directory and can repair the same version. The optional portable ZIP remains available for manual use.
+4. Install Npcap separately for live capture. For offline analysis use a compatible classic Ethernet PCAP.
+5. Select a real Ethernet adapter and Run. Use SCL Import to load SCD/CID/ICD/IID for expected-vs-observed identity comparison. The installer is currently unsigned and does not provide unattended auto-updates.
 
 ## Important engineering limitations
 
@@ -30,4 +34,4 @@ Public Windows x64 portable release of **Process Bus Insight**, the receive-only
 
 ## Verification
 
-Windows Release build, xUnit regression suite, runtime stability and CodeQL / dependency audit are required before publication. The release workflow additionally rebuilds, tests, packages, and verifies the portable ZIP and SHA256 manifest.
+Windows Release build, xUnit regression suite, runtime stability, CodeQL and dependency audit are required before publication. The release workflow builds and verifies the Inno installer **and** optional portable ZIP, checks SHA256, then smoke-tests silent install, repair, offline manuals and uninstall. **Physical Npcap/NIC, injector comparison, 60-minute current-build soak and display/DPI acceptance are separate blocking checks; historical tests do not substitute.** A public release is an explicit, manual, main-only action after those checks are documented.

From 90e31020b500db38b73b8b9b8a800460d3b3b8a9 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:49:15 +0700
Subject: [PATCH 052/148] Generate styled offline PDF manuals from canonical
 Markdown during packaging

---
 scripts/render-offline-manuals.py | 151 ++++++++++++++++++++++++++++++
 1 file changed, 151 insertions(+)
 create mode 100644 scripts/render-offline-manuals.py

diff --git a/scripts/render-offline-manuals.py b/scripts/render-offline-manuals.py
new file mode 100644
index 00000000..6d079519
--- /dev/null
+++ b/scripts/render-offline-manuals.py
@@ -0,0 +1,151 @@
+#!/usr/bin/env python3
+"""Build offline PDF manuals from the same Markdown shipped with the app.
+
+Requires reportlab 4.4.x at packaging time; no runtime dependency or network calls.
+"""
+import argparse
+import hashlib
+import html
+import json
+import re
+from pathlib import Path
+
+from reportlab.lib import colors
+from reportlab.lib.pagesizes import A4
+from reportlab.lib.styles import ParagraphStyle
+from reportlab.platypus import BaseDocTemplate, Frame, PageTemplate, Paragraph, Preformatted
+
+NAVY = colors.HexColor("#122238")
+BLUE = colors.HexColor("#186DC0")
+INK = colors.HexColor("#1B2836")
+
+
+def inline(source):
+    source = html.escape(source, quote=True)
+    source = re.sub(r"\[([^\]]+)\]\((https?://[^)]+)\)",
+                    lambda m: f'<link href="{m.group(2)}" color="#186DC0">{m.group(1)}</link>', source)
+    source = re.sub(r"\*\*(.+?)\*\*", r"<b>\1</b>", source)
+    source = re.sub(r"\x60([^\x60]+)\x60", r'<font face="Courier" size="9">\1</font>', source)
+    return source
+
+
+def paragraphs(markdown, styles):
+    story, pending, code = [], [], []
+    in_code = False
+
+    def flush():
+        if pending:
+            story.append(Paragraph(inline(" ".join(pending)), styles["body"]))
+            pending.clear()
+
+    for line in markdown.splitlines():
+        value = line.strip()
+        if value.startswith(chr(96) * 3):
+            if in_code:
+                story.append(Preformatted("\n".join(code), styles["code"],
+                                          maxLineLength=85, splitChars=" /\\"))
+                code.clear()
+            else:
+                flush()
+            in_code = not in_code
+            continue
+        if in_code:
+            code.append(line.rstrip())
+        elif not value:
+            flush()
+        elif re.match(r"^#{1,3}\s", value):
+            flush()
+            depth = len(value.split(" ", 1)[0])
+            story.append(Paragraph(inline(value[depth:].strip()), styles[f"h{depth}"]))
+        elif re.match(r"^(?:[-*]\s|\d+\.\s)", value):
+            flush()
+            ordered = re.match(r"^(\d+)\.\s+(.*)$", value)
+            number = f"{ordered.group(1)}." if ordered else "•"
+            entry = ordered.group(2) if ordered else re.sub(r"^[-*]\s+", "", value)
+            story.append(Paragraph(f'<font color="#186DC0">{number}</font>  {inline(entry)}',
+                                   styles["list"]))
+        else:
+            pending.append(value)
+    flush()
+    if in_code:
+        raise ValueError("Unclosed Markdown code block")
+    return story
+
+
+def render(source, destination):
+    text = source.read_text(encoding="utf-8")
+    if "Npcap" not in text or "Inno Setup" not in text:
+        raise ValueError(f"Manual is missing current Inno Setup / Npcap guidance: {source}")
+
+    style = {
+        "h1": ParagraphStyle("h1", fontName="Helvetica-Bold", fontSize=18, leading=22,
+                             textColor=NAVY, spaceBefore=8, spaceAfter=16),
+        "h2": ParagraphStyle("h2", fontName="Helvetica-Bold", fontSize=13, leading=18,
+                             textColor=NAVY, spaceBefore=13, spaceAfter=8, keepWithNext=True),
+        "h3": ParagraphStyle("h3", fontName="Helvetica-Bold", fontSize=11, leading=15,
+                             textColor=NAVY, spaceBefore=10, spaceAfter=6, keepWithNext=True),
+        "body": ParagraphStyle("body", fontName="Helvetica", fontSize=10.3, leading=15.5,
+                               textColor=INK, spaceAfter=8),
+        "list": ParagraphStyle("list", fontName="Helvetica", fontSize=10.2, leading=15,
+                               leftIndent=12, firstLineIndent=-10, textColor=INK, spaceAfter=5),
+        "code": ParagraphStyle("code", fontName="Courier", fontSize=8.6, leading=12,
+                               leftIndent=8, rightIndent=8, backColor=colors.HexColor("#F0F5F9"),
+                               borderPadding=7, textColor=INK, spaceAfter=10),
+    }
+
+    page_width, page_height = A4
+    destination.parent.mkdir(parents=True, exist_ok=True)
+    doc = BaseDocTemplate(str(destination), pagesize=A4, leftMargin=48, rightMargin=48,
+                          topMargin=66, bottomMargin=48,
+                          title=f"Process Bus Insight - {source.stem.replace('_', ' ').title()}",
+                          author="Process Bus Insight Contributors")
+    frame = Frame(48, 48, page_width - 96, page_height - 114,
+                  leftPadding=0, rightPadding=0, topPadding=0, bottomPadding=0)
+
+    def decorate(canvas, document):
+        canvas.saveState()
+        canvas.setFillColor(NAVY)
+        canvas.rect(0, page_height - 39, page_width, 39, fill=1, stroke=0)
+        canvas.setFillColor(colors.white)
+        canvas.setFont("Helvetica-Bold", 10)
+        canvas.drawString(48, page_height - 25, "PROCESS BUS INSIGHT")
+        canvas.setFont("Helvetica", 8)
+        canvas.drawRightString(page_width - 48, page_height - 25, "OFFLINE OPERATOR GUIDE")
+        canvas.setStrokeColor(BLUE)
+        canvas.setLineWidth(2)
+        canvas.line(48, 38, page_width - 48, 38)
+        canvas.setFont("Helvetica", 8)
+        canvas.setFillColor(colors.HexColor("#5C6D7D"))
+        canvas.drawString(48, 27, "Receive-only  |  Windows / Npcap timing is screening evidence")
+        canvas.drawRightString(page_width - 48, 27, f"Page {document.page}")
+        canvas.restoreState()
+
+    doc.addPageTemplates([PageTemplate(id="manual", frames=frame, onPage=decorate)])
+    doc.build(paragraphs(text, style))
+    if destination.stat().st_size < 1400:
+        raise ValueError(f"Generated PDF too small: {destination}")
+    return hashlib.sha256(text.encode("utf-8")).hexdigest()
+
+
+def main():
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--repo-root", default=".")
+    parser.add_argument("--output-dir", default="artifacts/generated-docs")
+    args = parser.parse_args()
+    root = Path(args.repo_root).resolve()
+    output = (root / args.output_dir).resolve()
+    manifest = {"format": "ProcessBusInsight-offline-manuals-v1", "files": []}
+    for stem, name in [("QUICK_START", "Quick Start.pdf"), ("USER_MANUAL", "User Manual.pdf")]:
+        source, pdf = root / "docs" / f"{stem}.md", output / name
+        source_hash = render(source, pdf)
+        manifest["files"].append({
+            "source": source.name, "sourceSha256": source_hash,
+            "pdf": name, "pdfSha256": hashlib.sha256(pdf.read_bytes()).hexdigest()
+        })
+        print(f"{source.name} -> {pdf.name} ({pdf.stat().st_size} bytes)")
+    (output / "manual-manifest.json").write_text(
+        json.dumps(manifest, indent=2) + "\n", encoding="utf-8")
+
+
+if __name__ == "__main__":
+    main()

From e4a5ab5f57229447d31b58d59400b447a5be5ec6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:49:48 +0700
Subject: [PATCH 053/148] Manifest hashes original Markdown bytes exactly for
 reproducible package verification

---
 scripts/render-offline-manuals.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/render-offline-manuals.py b/scripts/render-offline-manuals.py
index 6d079519..14d92a3a 100644
--- a/scripts/render-offline-manuals.py
+++ b/scripts/render-offline-manuals.py
@@ -124,7 +124,7 @@ def decorate(canvas, document):
     doc.build(paragraphs(text, style))
     if destination.stat().st_size < 1400:
         raise ValueError(f"Generated PDF too small: {destination}")
-    return hashlib.sha256(text.encode("utf-8")).hexdigest()
+    return hashlib.sha256(source.read_bytes()).hexdigest()
 
 
 def main():

From d88edc516c1255a26b9f8c6d584bb68edfafe0b2 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:50:11 +0700
Subject: [PATCH 054/148] Fail closed on stale PDFs; stage SHA-linked generated
 manuals from Markdown SSOT

---
 scripts/publish-windows-portable.ps1 | 32 +++++++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index add28240..870c7582 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -15,7 +15,7 @@ Set-Location $repoRoot
 if ([string]::IsNullOrWhiteSpace($Version)) { throw "Version cannot be empty." }
 
 $requiredReleaseDocs = @(
-    "docs/QUICK_START.pdf", "docs/USER_MANUAL.pdf", "docs/QUICK_START.md", "docs/USER_MANUAL.md", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
+    "docs/QUICK_START.md", "docs/USER_MANUAL.md", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
     "COMMERCIAL-LICENSE.md", "COPYRIGHT.md", "TRADEMARK.md",
     "THIRD_PARTY_NOTICES.md", "docs/LICENSING.md"
 )
@@ -31,6 +31,31 @@ if (Test-Path (Join-Path $repoRoot "LICENSE-APACHE-2.0")) {
     throw "Historical Apache license must not be staged as a current release license."
 }
 
+# Release PDFs are rendered fresh from the canonical Markdown source and
+# cryptographically tied to the two Markdown files in the same installer.
+# Old tracked PDFs must never silently enter a new public package.
+$manualDir = Join-Path $repoRoot "$OutputRoot/generated-docs"
+$manualManifestPath = Join-Path $manualDir "manual-manifest.json"
+if (-not (Test-Path -LiteralPath $manualManifestPath)) {
+    throw "Current offline PDF manual manifest missing. Run python scripts/render-offline-manuals.py first."
+}
+$manualManifest = Get-Content -LiteralPath $manualManifestPath -Raw | ConvertFrom-Json
+if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") { throw 'Unsupported manual manifest format.' }
+foreach ($entry in $manualManifest.files) {
+    if ($entry.source -notin @("QUICK_START.md", "USER_MANUAL.md")) {
+        throw "Unexpected manual source: $($entry.source)"
+    }
+    $src = Join-Path $repoRoot ("docs/" + $entry.source)
+    $pdf = Join-Path $manualDir $entry.pdf
+    if (-not (Test-Path -LiteralPath $pdf)) { throw "Missing generated PDF $pdf" }
+    $sourceHash = (Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash
+    $pdfHash = (Get-FileHash -LiteralPath $pdf -Algorithm SHA256).Hash
+    if ($sourceHash -ne $entry.sourceSha256 -or $pdfHash -ne $entry.pdfSha256) {
+        throw "Offline PDF not synchronized with $($entry.source); regenerate manuals."
+    }
+}
+if (@($manualManifest.files).Count -ne 2) { throw "Exactly two offline PDF manuals are required." }
+
 $portableName = "$AppName-v$Version-$Runtime-portable"
 $publishDir = Join-Path $repoRoot "$OutputRoot/publish/$portableName/publish"
 $stageDir = Join-Path $repoRoot "$OutputRoot/package/$portableName"
@@ -143,8 +168,9 @@ $copyMap = @(
     @{ Source = "TRADEMARK.md"; Destination = "TRADEMARK.md" },
     @{ Source = "THIRD_PARTY_NOTICES.md"; Destination = "THIRD_PARTY_NOTICES.md" },
     @{ Source = "docs/LICENSING.md"; Destination = "Licensing.md" },
-    @{ Source = "docs/QUICK_START.pdf"; Destination = "Quick Start.pdf" },
-    @{ Source = "docs/USER_MANUAL.pdf"; Destination = "User Manual.pdf" },
+    @{ Source = "$OutputRoot/generated-docs/Quick Start.pdf"; Destination = "Quick Start.pdf" },
+    @{ Source = "$OutputRoot/generated-docs/User Manual.pdf"; Destination = "User Manual.pdf" },
+    @{ Source = "$OutputRoot/generated-docs/manual-manifest.json"; Destination = "ManualSources.json" },
     @{ Source = "docs/QUICK_START.md"; Destination = "Quick Start.md" },
     @{ Source = "docs/USER_MANUAL.md"; Destination = "User Manual.md" },
     @{ Source = "docs/INSTALLATION_AND_UPDATE.md"; Destination = "Install and Update.md" }

From a160d59608c4c022b7cd1f89a3324ca7ccab3794 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:50:34 +0700
Subject: [PATCH 055/148] Generate version-synchronized offline PDF manuals
 before Inno and portable packaging

---
 .github/workflows/candidate-package.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.github/workflows/candidate-package.yml b/.github/workflows/candidate-package.yml
index f3fce863..0c3b7f93 100644
--- a/.github/workflows/candidate-package.yml
+++ b/.github/workflows/candidate-package.yml
@@ -16,6 +16,11 @@ on:
       - "tests/**"
       - "scripts/publish-windows-portable.ps1"
       - "scripts/publish-windows-installer.ps1"
+      - "scripts/render-offline-manuals.py"
+      - "docs/USER_MANUAL.md"
+      - "docs/QUICK_START.md"
+      - "docs/INSTALLATION_AND_UPDATE.md"
+      - "docs/RELEASE_PACKAGING.md"
       - "scripts/verify-windows-installer.ps1"
       - "installer/**"
       - "scripts/verify-release-package.ps1"
@@ -82,6 +87,14 @@ jobs:
       - name: Test
         run: dotnet test .\ProcessBusSuite.sln -c Release --no-build --logger "trx;LogFileName=candidate-tests.trx" --results-directory .\TestResults
 
+      - name: Generate current offline PDF manuals
+        shell: pwsh
+        run: |
+          python -m pip install --disable-pip-version-check reportlab==4.4.9
+          if ($LASTEXITCODE -ne 0) { throw 'Pinned ReportLab PDF build dependency unavailable.' }
+          python .\scripts\render-offline-manuals.py
+          if ($LASTEXITCODE -ne 0) { throw 'Offline manual PDF generation failed.' }
+
       - name: Publish portable package
         shell: pwsh
         run: .\scripts\publish-windows-portable.ps1 -Version '${{ steps.version.outputs.value }}' -Configuration Release -Runtime win-x64

From b6f05d621b5e87e0732c6b200f937952e0baac8a Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:50:37 +0700
Subject: [PATCH 056/148] Generate version-synchronized offline PDF manuals
 before Inno and portable packaging

---
 .github/workflows/release-package.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index 1d028f07..212d8052 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -104,6 +104,14 @@ jobs:
       - name: Test
         run: dotnet test .\ProcessBusSuite.sln -c Release --no-build --logger "trx;LogFileName=release-tests.trx" --results-directory .\TestResults
 
+      - name: Generate current offline PDF manuals
+        shell: pwsh
+        run: |
+          python -m pip install --disable-pip-version-check reportlab==4.4.9
+          if ($LASTEXITCODE -ne 0) { throw 'Pinned ReportLab PDF build dependency unavailable.' }
+          python .\scripts\render-offline-manuals.py
+          if ($LASTEXITCODE -ne 0) { throw 'Offline manual PDF generation failed.' }
+
       - name: Publish portable package
         shell: pwsh
         run: .\scripts\publish-windows-portable.ps1 -Version '${{ steps.version.outputs.value }}' -Configuration Release -Runtime win-x64

From e116ffceb8bdc8322485583f1bc287f8ebee72d4 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:51:01 +0700
Subject: [PATCH 057/148] Verify packaged PDF and Markdown source hashes
 against generated manual manifest

---
 scripts/verify-release-package.ps1 | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/scripts/verify-release-package.ps1 b/scripts/verify-release-package.ps1
index 7cb68a6e..9c914e46 100644
--- a/scripts/verify-release-package.ps1
+++ b/scripts/verify-release-package.ps1
@@ -19,6 +19,7 @@ try {
         "User Manual.pdf",
         "Quick Start.md",
         "User Manual.md",
+        "ManualSources.json",
         "Install and Update.md",
         "README.txt",
         "LICENSE.txt",
@@ -39,6 +40,32 @@ try {
         }
     }
 
+    # The PDFs must be generated from exactly the Markdown editions also
+    # shipped in the installed package. Prevent an obsolete portable-only
+    # PDF from passing release verification after setup guidance changes.
+    $manualManifest = Get-Content (Join-Path $temp "ManualSources.json") -Raw | ConvertFrom-Json
+    if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") {
+        throw "Manual verification failed: missing provenance format."
+    }
+    if (@($manualManifest.files).Count -ne 2) {
+        throw "Manual verification failed: two synchronized PDF editions expected."
+    }
+    foreach ($entry in $manualManifest.files) {
+        $markdownName = switch ($entry.source) {
+            "QUICK_START.md" { "Quick Start.md" }
+            "USER_MANUAL.md" { "User Manual.md" }
+            default { throw "Unexpected PDF manual source: $($entry.source)" }
+        }
+        if ($entry.pdf -notin @("Quick Start.pdf", "User Manual.pdf")) {
+            throw "Unexpected generated PDF filename: $($entry.pdf)"
+        }
+        $markdownSha = (Get-FileHash (Join-Path $temp $markdownName) -Algorithm SHA256).Hash
+        $pdfSha = (Get-FileHash (Join-Path $temp $entry.pdf) -Algorithm SHA256).Hash
+        if ($markdownSha -ne $entry.sourceSha256 -or $pdfSha -ne $entry.pdfSha256) {
+            throw "Manual source/PDF hash mismatch for $markdownName."
+        }
+    }
+
     if (Test-Path (Join-Path $temp "LICENSE-APACHE-2.0")) {
         throw "Package verification failed. Historical Apache license is presented as a current package license."
     }

From 7908c81c2d41e74b6ac2f6f9b005c864f9c5d125 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:51:37 +0700
Subject: [PATCH 058/148] Make installed README accurate for both Inno Setup
 and optional portable distribution

---
 scripts/publish-windows-portable.ps1 | 24 +++++++++++++++++-------
 1 file changed, 17 insertions(+), 7 deletions(-)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index 870c7582..a36cecad 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -135,17 +135,27 @@ Copy-Item (Join-Path $repoRoot "docs/PHYSICAL_BENCH_QUICK_START.md") (Join-Path
 
 $packageReadme = @"
 Process Bus Insight / DigSubAnalyzer
-Windows portable package
+Windows self-contained distribution payload
 Version: $Version
 Community license: GPL-3.0-or-later
 
+This payload is packaged both by the Inno Setup installer (recommended)
+and as a separate optional portable ZIP.
+
+INSTALLER: Run the official win-x64-setup.exe. It installs this payload,
+Start Menu shortcuts, offline manuals and uninstaller to Program Files.
+UPDATE: Close the analyzer and run the newer installer (no uninstall needed).
+PORTABLE: Extract the ZIP completely and run $AppName.exe.
+
 1. Install Npcap separately when live raw Ethernet capture is required.
-2. Extract this ZIP to a local folder.
-3. Run $AppName.exe.
-4. Use an authorized TAP, mirror port, or isolated engineering test network.
-5. For physical SV/PTP test evidence read Bench/START_HERE.md.
-6. Bench/ProcessBus.InteropCli.exe works offline and does not need the .NET SDK.
-7. Bench/measure-m4-bench.ps1 records local process CPU/memory during a bench run.
+   Missing/incompatible native Npcap must not produce a fake usable adapter.
+2. Use an authorized TAP, mirror port, or isolated engineering test network.
+3. Read Quick Start.pdf, User Manual.pdf and Install and Update.md offline.
+   Current Markdown editions are included and cryptographically bound to PDFs
+   through ManualSources.json.
+4. For physical SV/PTP evidence read Bench/START_HERE.md.
+5. Bench/ProcessBus.InteropCli.exe works offline without the .NET SDK.
+6. Bench/measure-m4-bench.ps1 records local process CPU/memory.
    A diagnostic broadcast mirror does NOT prove the canonical VLAN SV path.
 
 Included legal documents:

From 8700815336e5aa834c82a6206d4df4ff48632fcb Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:51:56 +0700
Subject: [PATCH 059/148] Document SHA-linked PDF regeneration and offline
 manual release guarantees

---
 docs/RELEASE_PACKAGING.md | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/docs/RELEASE_PACKAGING.md b/docs/RELEASE_PACKAGING.md
index c03e408c..98c1544b 100644
--- a/docs/RELEASE_PACKAGING.md
+++ b/docs/RELEASE_PACKAGING.md
@@ -17,6 +17,9 @@ The ZIP contains:
 ProcessBusInsight.exe
 Quick Start.pdf
 User Manual.pdf
+Quick Start.md
+User Manual.md
+ManualSources.json
 Install and Update.md
 README.txt
 LICENSE.txt
@@ -48,7 +51,9 @@ The final active Apache-2.0 revision is commit `85d43a0fe58a5888a9e8008c168ab76d
 
 ## Required documentation
 
-The portable package includes `docs/QUICK_START.pdf` and `docs/USER_MANUAL.pdf`. They are intentionally tracked even though generated PDFs are otherwise ignored.
+The packaged **Quick Start.pdf** and **User Manual.pdf** are regenerated from their corresponding Markdown sources at build time, not copied from historically tracked PDF files. `ManualSources.json` records SHA256 for each Markdown source and generated PDF. Both the portable and installer verification reject stale/mismatched pairs.
+
+Older tracked PDFs may remain in the repository for historical website references but are never packaged as the current offline manuals. Build requires Python with pinned `reportlab==4.4.9`; end users do not need Python or ReportLab.
 
 ```powershell
 git add -f docs/QUICK_START.pdf docs/USER_MANUAL.pdf
@@ -58,6 +63,8 @@ git add -f docs/QUICK_START.pdf docs/USER_MANUAL.pdf
 
 ```powershell
 .\scripts\repository-health.ps1 -ExpectedVersion "1.4.0"
+python -m pip install reportlab==4.4.9
+python .\scripts\render-offline-manuals.py
 .\scripts\publish-windows-portable.ps1 -Version "1.4.0"
 .\scripts\verify-release-package.ps1 -PackageZip ".\artifacts\release\ProcessBusInsight-v1.4.0-win-x64-portable.zip"
 .\scripts\publish-windows-installer.ps1 -Version "1.4.0"
@@ -66,7 +73,7 @@ git add -f docs/QUICK_START.pdf docs/USER_MANUAL.pdf
 
 ## GitHub workflows
 
-The candidate workflow runs for supported pull-request branches (including `fix/*`, `feat/*`, `stabilization/*`, `architecture/*`, `legal/*`) when relevant files change. It restores, builds, tests, packages, verifies the ZIP and legal documents, creates a candidate manifest, and uploads the candidate without publishing a public release.
+The candidate workflow runs for supported pull-request branches (including `fix/*`, `feat/*`, `stabilization/*`, `architecture/*`, `legal/*`) when relevant files change. It restores, builds, tests, renders current offline PDFs, packages, verifies the ZIP/manual source hashes and legal documents, creates a candidate manifest, and uploads the candidate without publishing a public release.
 
 The release workflow builds on manual dispatch or tags matching `v*`. **A tag push cannot publish a public release.** A public release is an explicit manual `publish_release=true` from `main` requiring `field_acceptance_verified=true`; this must correspond to the current final installer and documented physical soak gate. The workflow restores, builds, tests, packages the Inno EXE and optional ZIP, smoke-tests installation/repair/uninstall, produces checksums and a release manifest, and uploads evidence before publication.
 

From f50f8436fadb0724e855a9b4aba26fa3ea63f048 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:53:56 +0700
Subject: [PATCH 060/148] Record release-candidate scope and require runtime
 architecture gate on phasor changes

---
 CHANGELOG.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2147cc19..872e5949 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@ All notable changes are documented here. The project follows Semantic Versioning
 
 ## [Unreleased]
 
+### Implemented in release-candidate branch (public stable acceptance pending)
+
+- Unified selected-stream phasor RMS/angle display without UI-side nominal phase overrides; improved six-vector label collisions, separate measured U/I scales, legible 270° convention, stale data and live-with-warning semantics
+- Removed fabricated Ethernet adapter fallback and pinned native Npcap discovery/capture to trusted Windows x64 system library paths
+- Added deterministic phasor, compact-caption, adapter and status regression tests
+- Made Inno Setup self-contained EXE the primary Windows distribution, with same-version repair, in-place upgrade, offline manuals and install/repair/uninstall CI evidence
+- Generated packaged PDF manuals from current Markdown source, with SHA256 provenance and stale-PDF rejection
+- Hardened stable publication to manual main-only authorization after documented physical acceptance; no automatic public release on tag push
+- Physical target-NIC/injector 60-minute acceptance remains pending for the current candidate; earlier 1.3.0 soak evidence does not substitute
+
 ### Planned
 
 - Sanitized golden PCAP/PCAPNG replay corpus with broader interoperability scenarios

From 036f9b93c2e685a8da0a9fdf5224b63c5f1048bb Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 17:53:59 +0700
Subject: [PATCH 061/148] Record release-candidate scope and require runtime
 architecture gate on phasor changes

---
 .github/workflows/runtime-architecture.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/runtime-architecture.yml b/.github/workflows/runtime-architecture.yml
index e705f633..a4135197 100644
--- a/.github/workflows/runtime-architecture.yml
+++ b/.github/workflows/runtime-architecture.yml
@@ -5,6 +5,11 @@ on:
     branches: [main]
     paths:
       - "src/ProcessBus.Iec61850.Raw/Runtime/**"
+      - "src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs"
+      - "src/ProcessBus.Core/Presentation/**"
+      - "src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs"
+      - "tests/ProcessBus.Tests/PhasorPresentationContractTests.cs"
+      - "tests/ProcessBus.Tests/OperatorPresentationReleaseTests.cs"
       - "src/ProcessBus.Iec61850.Raw/Replay/**"
       - "tests/ProcessBus.Tests/Pcap*Tests.cs"
       - "tests/ProcessBus.Tests/AnalyzerRuntimeSnapshotSourceTests.cs"

From 3042babc038eaccc475aebfc0a849a75048f57c0 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:01:04 +0700
Subject: [PATCH 062/148] Keep phasor regression tests analyzer-clean with
 ordinal char prefix check

---
 tests/ProcessBus.Tests/PhasorPresentationContractTests.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
index 9253ff99..20e5309d 100644
--- a/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
+++ b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
@@ -11,7 +11,7 @@ namespace ProcessBus.Tests;
 public sealed class PhasorPresentationContractTests
 {
     private static ChannelValueModel Channel(string name, double rms, double angle, double instant = 0) =>
-        new(name) { Unit = name.StartsWith("U") ? "V" : "A", RmsValue = rms,
+        new(name) { Unit = name.StartsWith('U') ? "V" : "A", RmsValue = rms,
             AngleDegrees = angle, InstantValue = instant };
 
     private static AnalogValuesSnapshot Values(

From 3422d020ad6b20ddc8e2edf938b9cdd0f010cefe Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:03:32 +0700
Subject: [PATCH 063/148] Prepare new v1.4.1 release documentation without
 overwriting published v1.4.0

---
 docs/RELEASE_NOTES_v1.4.1.md | 37 ++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 docs/RELEASE_NOTES_v1.4.1.md

diff --git a/docs/RELEASE_NOTES_v1.4.1.md b/docs/RELEASE_NOTES_v1.4.1.md
new file mode 100644
index 00000000..3fcac87a
--- /dev/null
+++ b/docs/RELEASE_NOTES_v1.4.1.md
@@ -0,0 +1,37 @@
+# Process Bus Insight v1.4.1 — Release notes (stable publication gated)
+
+Proposed public Windows x64 release of **Process Bus Insight**, the receive-only IEC 61850 SV / GOOSE / PTP analyzer. **Do not publish this build as stable until the current installer passes the documented physical acceptance gate** in `docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md`.
+
+## Operator improvements
+
+- Five uncluttered primary workspaces: Analyzer, Diagnostics, GOOSE, Timing/PTP, and SCL.
+- Advanced raw packet inspection and engineering validation stay accessible through the Tools menu instead of adding navigation tabs.
+- SCL mismatch badges and expected/observed svID text remain readable with natural-height rows and multiline wrapping. Redundant column and explanatory captions are removed; full matched evidence is still available in technical details and tooltips.
+- SV real-sample waveform display, zero-cross alignment, stream-aware auto peak scaling, nominal engineering-unit selection, phasors and RMS. Nominal scaling is **not** metrological calibration.
+- Compact overlay fasors distinguish solid voltage / dashed current strokes, use separate relative RMS scales, display numerical U/I maxima and preserve an exact measured angle from the selected-stream engine.
+- Clear amber `LIVE · WARN` badge for an active stream with continuity/arrival warnings; green waveform LIVE means activity only. Stale vectors are explicitly held, not described as live.
+- A native Npcap architecture/load problem cannot be represented as a capturable dummy Ethernet interface. The app shows an unavailable diagnostic until a valid driver/NIC is detected.
+- Per-stream diagnostics: arrival jitter, smpCnt discontinuity, missing samples, svQuality/smpSynch and capture-path indicators.
+- GOOSE event timeline, PTP context, SCL stream catalog, dataset order and compare-to-wire evidence.
+
+## Install and verify
+
+1. Download **`ProcessBusInsight-v1.4.1-win-x64-setup.exe`** and compare SHA256 with `SHA256SUMS.txt`.
+2. Run the Inno Setup installer. It includes self-contained application files, **User Manual.pdf**, **Quick Start.pdf**, updated Markdown manuals, and **Install and Update.md** directly in the install folder. Start Menu manual shortcuts are available offline.
+3. To update, close the application and run the newer installer; it retains the installation directory and can repair the same version. The optional portable ZIP remains available for manual use.
+4. Install Npcap separately for live capture. For offline analysis use a compatible classic Ethernet PCAP.
+5. Select a real Ethernet adapter and Run. Use SCL Import to load SCD/CID/ICD/IID for expected-vs-observed identity comparison. The installer is currently unsigned and does not provide unattended auto-updates.
+
+## Important engineering limitations
+
+**Stable** denotes a packaged software release, not a calibrated or IEC 61850-conformance-certified test instrument. No protection operation or SV/GOOSE publishing is included. Captured traffic does not prove a subscriber acted on it.
+
+- Normal Windows/Npcap timestamps and PCAP replay provide timing **screening evidence**; they are not proof of clock lock, precise jitter, or synchronization accuracy without independently validated capture and timestamping equipment.
+- The 4I+4V nominal profile is an engineering display scaling assumption unless corresponding SCL mapping/instrument calibration is established.
+- A stream with a different svID from expected SCL correctly reports mismatch even if APPID, destination MAC, VLAN and confRev agree.
+- Real field acceptance, DPI clipping, USB Ethernet capture timing, packet losses and sustained CPU/GC must be verified in the intended environment.
+- This release is licensed **GPL-3.0-or-later**. Review LICENSE, NOTICE, third-party and commercial-license documentation for the applicable terms.
+
+## Verification
+
+Windows Release build, xUnit regression suite, runtime stability, CodeQL and dependency audit are required before publication. The release workflow builds and verifies the Inno installer **and** optional portable ZIP, checks SHA256, then smoke-tests silent install, repair, offline manuals and uninstall. **Physical Npcap/NIC, injector comparison, 60-minute current-build soak and display/DPI acceptance are separate blocking checks; historical tests do not substitute.** A public release is an explicit, manual, main-only action after those checks are documented.

From 02fbb89accca8146b33577df0184939790540d19 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:03:36 +0700
Subject: [PATCH 064/148] Prepare new v1.4.1 release documentation without
 overwriting published v1.4.0

---
 .../V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md       | 64 +++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md

diff --git a/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md b/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
new file mode 100644
index 00000000..998070a4
--- /dev/null
+++ b/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
@@ -0,0 +1,64 @@
+# v1.4.1 public release acceptance — open gates
+
+This document distinguishes **automated evidence** from **physical acceptance**. It is a release gate, not a conformance certificate. Never claim measured performance or perfect IEC 61850 interoperability from a screenshot.
+
+## 1. Build and source identity
+
+- Target commit SHA: **PENDING — record the final merged main commit**
+- Public version: 1.4.0 (only after every gate is signed off)
+- Candidate installer: **PENDING — record GitHub Actions run number and SHA256**
+- Native target: Windows x64, self-contained .NET 8 and separately installed Npcap
+- Official license: GPL-3.0-or-later, with all notices and source availability
+
+## 2. Automated release checks
+
+| Gate | Evidence required | Status |
+| --- | --- | --- |
+| Repository health, clean restore/build and full unit suite | CI run and TRX | PENDING current final SHA |
+| Live current vs voltage angle/RMS, invalid sample, rollover, multi-stream isolation | Production analyzer xUnit regressions | PENDING final SHA |
+| Zero phasor invention, label collision and tiny-scale legend | Presentation xUnit regressions | PENDING final SHA |
+| Runtime stability and immutable snapshot/PCAP replay | Repeated Actions jobs | PENDING final SHA |
+| CodeQL and dependency high/critical audit | Completed successful Actions checks | PENDING final SHA |
+| Installer integrity and smoke | EXE SHA256, install → repair → documentation hashes → uninstall | PENDING final SHA |
+| Release notes, GPL notices, local Quick Start/User Manual and update guide | Installer contents + package verification | PENDING final SHA |
+
+An older `.github/release/v1.4.1.approved` file refers to an **older main commit / portable candidate** and does **not** approve this PR's new installer or Npcap/phasor code. The v1.3.0-beta.2 60-minute run is a useful historical baseline, not proof for this SHA.
+
+## 3. Current engineer-visible visual check
+
+The user-supplied same-session 50 Hz injector/analyzer screenshots show:
+
+| Channel | Injector RMS / angle | Analyzer RMS / angle |
+| --- | --- | --- |
+| Ua | 57.740 V / 0.00° | 57.73 V / 0.00° |
+| Ub | 57.740 V / -120.00° | 57.73 V / -120.01° |
+| Uc | 57.740 V / +120.00° | 57.73 V / +120.01° |
+| Ia | 1.000 A / +30.00° | 1.00 A / +30.00° |
+| Ib | 1.000 A / -90.00° | 1.00 A / -90.00° |
+| Ic | 1.200 A / +150.00° | 1.20 A / +149.99° |
+
+These observations show good displayed agreement **for that one setting only**. They are not calibrated accuracy proof, independent PCAP/SCL verification, or sustained-load evidence. Do not publish site/device-specific screenshots or identifiers.
+
+## 4. Physical target-PC acceptance (BLOCKING for stable public release)
+
+Run on the final installed candidate, not an earlier portable build:
+
+- [ ] Confirm Windows x64 version/build, native Npcap version, NIC driver, adapter name/type (sanitized), receive-only TAP/SPAN topology, installer SHA256, exact application assembly version.
+- [ ] Confirm actual ASIX/other physical adapter enumerates without a fabricated fallback; start/stop/restart capture and uninstall/upgrade/repair on target Windows.
+- [ ] Compare 6 channel U/I RMS + phase against the **actual injector source values** over multiple non-nominal settings; change each one independently. Include zero/missing, distorted/harmonic samples, scale changes and reference fallback.
+- [ ] Confirm phase reference and angle sign conventions on waveform, table, phasor and power; note 0° / +90° / 180° / 270° convention.
+- [ ] Verify true canonical SV publisher strong identity (APPID, svID, MAC, VLAN, confRev, smpCnt, ASDU mapping), not just a diagnostic mirror. Preserve authorized/sanitized PCAP + optional SCL evidence locally.
+- [ ] Test 4000 and 4800 sample-per-second profiles, counter rollovers, duplicate/missing samples, publisher restart, three or more streams selected/interleaved, and 2/4/8 cycle windows as applicable.
+- [ ] Verify GOOSE, PTP and SCL workspaces on actual bench traffic. PTP visibility does not establish hardware timing accuracy.
+- [ ] Record a minimum **60-minute** physical session at real capture rate, plus process CPU, heap/working set, UI responsiveness, native driver/interface drops and consecutive capture-error counts. Attach sanitized summaries, not raw customer captures.
+- [ ] Confirm closing capture, reinstalling/repairing and uninstalling do not hang and do not delete unrelated user data; verify no unexpected data upload/network transmission.
+- [ ] Confirm UI on 100%, 125% and 150% Windows DPI, 1366×768 minimum layout and normal 1920×1080, with readable phasor labels, legends, powers and status warnings.
+
+**Physical gate result:** PENDING. No final candidate-run evidence is attached yet.
+
+## 5. Publication control
+
+- Main-branch PR merge only after automated checks.
+- Public release workflow manual dispatch must explicitly confirm current **field_acceptance_verified**, and refuses non-main source; tag pushes **cannot automatically publish**.
+- Stable GitHub release must include the Inno Setup installer as primary, portable ZIP as optional, SHA256SUMS, manifest and current release notes.
+- Until all gates close: distribute an Actions **candidate** for testing, but do not tag/publish it as certified, calibrated, or generally interoperable.

From 3c2bff3cd101b5aa69a7c7abef9f60ad09aecdea Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:04:03 +0700
Subject: [PATCH 065/148] Preserve historical release notes of
 already-published v1.4.0

---
 docs/RELEASE_NOTES_v1.4.0.md | 20 ++++++++------------
 1 file changed, 8 insertions(+), 12 deletions(-)

diff --git a/docs/RELEASE_NOTES_v1.4.0.md b/docs/RELEASE_NOTES_v1.4.0.md
index f50b6911..117ca3e7 100644
--- a/docs/RELEASE_NOTES_v1.4.0.md
+++ b/docs/RELEASE_NOTES_v1.4.0.md
@@ -1,26 +1,22 @@
-# Process Bus Insight v1.4.0 — Release notes (stable publication gated)
+# Process Bus Insight v1.4.0 — Stable
 
-Proposed public Windows x64 release of **Process Bus Insight**, the receive-only IEC 61850 SV / GOOSE / PTP analyzer. **Do not publish this build as stable until the current installer passes the documented physical acceptance gate** in `docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md`.
+Public Windows x64 portable release of **Process Bus Insight**, the receive-only IEC 61850 SV / GOOSE / PTP analyzer.
 
 ## Operator improvements
 
 - Five uncluttered primary workspaces: Analyzer, Diagnostics, GOOSE, Timing/PTP, and SCL.
 - Advanced raw packet inspection and engineering validation stay accessible through the Tools menu instead of adding navigation tabs.
 - SCL mismatch badges and expected/observed svID text remain readable with natural-height rows and multiline wrapping. Redundant column and explanatory captions are removed; full matched evidence is still available in technical details and tooltips.
-- SV real-sample waveform display, zero-cross alignment, stream-aware auto peak scaling, nominal engineering-unit selection, phasors and RMS. Nominal scaling is **not** metrological calibration.
-- Compact overlay fasors distinguish solid voltage / dashed current strokes, use separate relative RMS scales, display numerical U/I maxima and preserve an exact measured angle from the selected-stream engine.
-- Clear amber `LIVE · WARN` badge for an active stream with continuity/arrival warnings; green waveform LIVE means activity only. Stale vectors are explicitly held, not described as live.
-- A native Npcap architecture/load problem cannot be represented as a capturable dummy Ethernet interface. The app shows an unavailable diagnostic until a valid driver/NIC is detected.
+- SV real-sample waveform display, zero-cross alignment, stream-aware auto peak scaling, calibrated-unit selection, phasors and RMS.
 - Per-stream diagnostics: arrival jitter, smpCnt discontinuity, missing samples, svQuality/smpSynch and capture-path indicators.
 - GOOSE event timeline, PTP context, SCL stream catalog, dataset order and compare-to-wire evidence.
 
 ## Install and verify
 
-1. Download **`ProcessBusInsight-v1.4.0-win-x64-setup.exe`** and compare SHA256 with `SHA256SUMS.txt`.
-2. Run the Inno Setup installer. It includes self-contained application files, **User Manual.pdf**, **Quick Start.pdf**, updated Markdown manuals, and **Install and Update.md** directly in the install folder. Start Menu manual shortcuts are available offline.
-3. To update, close the application and run the newer installer; it retains the installation directory and can repair the same version. The optional portable ZIP remains available for manual use.
-4. Install Npcap separately for live capture. For offline analysis use a compatible classic Ethernet PCAP.
-5. Select a real Ethernet adapter and Run. Use SCL Import to load SCD/CID/ICD/IID for expected-vs-observed identity comparison. The installer is currently unsigned and does not provide unattended auto-updates.
+1. Download `ProcessBusInsight-v1.4.0-win-x64-portable.zip` from this release.
+2. Compare SHA256 with `SHA256SUMS.txt` and extract the portable application.
+3. Install Npcap separately for live network capture. For offline analysis, open a compatible classic Ethernet PCAP.
+4. Select the capture adapter and click Run. Use SCL Import to load SCD/CID/ICD/IID for expected/observed identity comparison.
 
 ## Important engineering limitations
 
@@ -34,4 +30,4 @@ Proposed public Windows x64 release of **Process Bus Insight**, the receive-only
 
 ## Verification
 
-Windows Release build, xUnit regression suite, runtime stability, CodeQL and dependency audit are required before publication. The release workflow builds and verifies the Inno installer **and** optional portable ZIP, checks SHA256, then smoke-tests silent install, repair, offline manuals and uninstall. **Physical Npcap/NIC, injector comparison, 60-minute current-build soak and display/DPI acceptance are separate blocking checks; historical tests do not substitute.** A public release is an explicit, manual, main-only action after those checks are documented.
+Windows Release build, xUnit regression suite, runtime stability and CodeQL / dependency audit are required before publication. The release workflow additionally rebuilds, tests, packages, and verifies the portable ZIP and SHA256 manifest.

From afcb112683a7bb7f3893f62ecdfffd9c82546396 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:04:07 +0700
Subject: [PATCH 066/148] Reference the historic v1.4.0 approval correctly in
 new v1.4.1 gate

---
 docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md b/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
index 998070a4..1caa1fcd 100644
--- a/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
+++ b/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
@@ -22,7 +22,7 @@ This document distinguishes **automated evidence** from **physical acceptance**.
 | Installer integrity and smoke | EXE SHA256, install → repair → documentation hashes → uninstall | PENDING final SHA |
 | Release notes, GPL notices, local Quick Start/User Manual and update guide | Installer contents + package verification | PENDING final SHA |
 
-An older `.github/release/v1.4.1.approved` file refers to an **older main commit / portable candidate** and does **not** approve this PR's new installer or Npcap/phasor code. The v1.3.0-beta.2 60-minute run is a useful historical baseline, not proof for this SHA.
+An older `.github/release/v1.4.0.approved` file refers to an **older main commit / portable candidate** and does **not** approve this PR's new installer or Npcap/phasor code. The v1.3.0-beta.2 60-minute run is a useful historical baseline, not proof for this SHA.
 
 ## 3. Current engineer-visible visual check
 

From 6d075158e4453cf234635be735b9b3f9f92f2745 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:04:45 +0700
Subject: [PATCH 067/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 Directory.Build.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Directory.Build.props b/Directory.Build.props
index f44804fb..216f8573 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -10,7 +10,7 @@
     <NeutralLanguage>en</NeutralLanguage>
 
     <!-- Public release version. Pre-release versions may set VersionSuffix explicitly. -->
-    <VersionPrefix Condition="'$(VersionPrefix)' == ''">1.4.0</VersionPrefix>
+    <VersionPrefix Condition="'$(VersionPrefix)' == ''">1.4.1</VersionPrefix>
     <VersionSuffix Condition="'$(VersionSuffix)' == ''"></VersionSuffix>
     <Version Condition="'$(Version)' == '' and '$(VersionSuffix)' == ''">$(VersionPrefix)</Version>
     <Version Condition="'$(Version)' == '' and '$(VersionSuffix)' != ''">$(VersionPrefix)-$(VersionSuffix)</Version>

From caaa6b0b61a85f515d06fcab6f308e2895a6a351 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:04:49 +0700
Subject: [PATCH 068/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 README.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 0e152517..62f8b76f 100644
--- a/README.md
+++ b/README.md
@@ -46,7 +46,7 @@ The application can record what was configured in SCL, what the selected capture
 
 ## Download and run
 
-1. Download the latest **Windows Inno Setup installer** from [GitHub Releases](https://github.com/masarray/DigSubAnalyzer/releases): `ProcessBusInsight-v1.4.0-win-x64-setup.exe`.
+1. Download the latest **Windows Inno Setup installer** from [GitHub Releases](https://github.com/masarray/DigSubAnalyzer/releases): `ProcessBusInsight-v1.4.1-win-x64-setup.exe`.
 2. Run the installer. Its stable app identity supports in-place updates, same-version repair, Windows uninstall, and optional desktop shortcut.
 3. **Offline manuals are installed directly inside the app folder** (`User Manual.pdf`, `Quick Start.pdf`, and `Install and Update.md`), with Start Menu shortcuts.
 4. Install **Npcap separately** when live raw Ethernet capture is required; it is not bundled. Offline PCAP analysis remains available without it.
@@ -58,8 +58,8 @@ An optional **portable ZIP** is also available for manual extraction. The commun
 Current Windows distribution naming:
 
 ```text
-ProcessBusInsight-v1.4.0-win-x64-setup.exe
-ProcessBusInsight-v1.4.0-win-x64-portable.zip  (optional)
+ProcessBusInsight-v1.4.1-win-x64-setup.exe
+ProcessBusInsight-v1.4.1-win-x64-portable.zip  (optional)
 SHA256SUMS.txt
 release-manifest.json
 ```
@@ -100,8 +100,8 @@ dotnet run --project .\src\ProcessBus.App.Wpf\ProcessBus.App.Wpf.csproj -c Relea
 Create and verify a portable package:
 
 ```powershell
-.\scripts\publish-windows-portable.ps1 -Version "1.4.0"
-.\scripts\verify-release-package.ps1 -PackageZip ".\artifacts\release\ProcessBusInsight-v1.4.0-win-x64-portable.zip"
+.\scripts\publish-windows-portable.ps1 -Version "1.4.1"
+.\scripts\verify-release-package.ps1 -PackageZip ".\artifacts\release\ProcessBusInsight-v1.4.1-win-x64-portable.zip"
 ```
 
 Run the repository-quality gate:

From 8a8eeec7ca2fb0e1728fb144a9eda2b9ba927dd9 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:04:52 +0700
Subject: [PATCH 069/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 scripts/publish-windows-portable.ps1 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index a36cecad..521b4e02 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -1,5 +1,5 @@
 param(
-    [string]$Version = "1.4.0-beta.2",
+    [string]$Version = "1.4.1",
     [string]$Configuration = "Release",
     [string]$Runtime = "win-x64",
     [string]$AppName = "ProcessBusInsight",

From 4c7a4f79c66664d1e9215c3309ff09306b703281 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:04:55 +0700
Subject: [PATCH 070/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 docs/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/index.html b/docs/index.html
index 0f465fd9..d1aa805b 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -37,7 +37,7 @@
     "applicationCategory": "EngineeringApplication",
     "applicationSubCategory": "Digital substation and process bus analysis",
     "operatingSystem": "Windows 10, Windows 11",
-    "softwareVersion": "1.4.0",
+    "softwareVersion": "1.4.1",
     "license": "https://spdx.org/licenses/GPL-3.0-or-later.html",
     "isAccessibleForFree": true,
     "url": "https://masarray.github.io/DigSubAnalyzer/",

From 0b58cadf94e57af2c3360c30fe866b39d06d30e5 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:04:58 +0700
Subject: [PATCH 071/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 .github/workflows/release-package.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index 212d8052..efb22024 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -4,9 +4,9 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: Version label, for example 1.4.0
+        description: Version label, for example 1.4.1
         required: true
-        default: 1.4.0
+        default: 1.4.1
       publish_release:
         description: Publish GitHub Release after successful validation (manual only)
         required: true
@@ -30,7 +30,7 @@ on:
       release_notes_file:
         description: Markdown file used as release body
         required: true
-        default: docs/RELEASE_NOTES_v1.4.0.md
+        default: docs/RELEASE_NOTES_v1.4.1.md
   push:
     tags:
       - "v*"
@@ -186,7 +186,7 @@ jobs:
           $sha = "artifacts/release/SHA256SUMS.txt"
           $manifest = "artifacts/release/release-manifest.json"
           $notesFile = '${{ github.event.inputs.release_notes_file }}'
-          if ([string]::IsNullOrWhiteSpace($notesFile)) { $notesFile = 'docs/RELEASE_NOTES_v1.4.0.md' }
+          if ([string]::IsNullOrWhiteSpace($notesFile)) { $notesFile = 'docs/RELEASE_NOTES_v1.4.1.md' }
           if (-not (Test-Path $notesFile)) { throw "Release notes file not found: $notesFile" }
 
           $releaseArgs = @('release', 'create', $tag, $installer, $zip, $sha, $manifest, '--title', "Process Bus Insight $tag", '--notes-file', $notesFile, '--target', '${{ github.sha }}')

From 6a112e6ae830d256ec564397b6db41747095ef93 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:05:01 +0700
Subject: [PATCH 072/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 docs/RELEASE_PACKAGING.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/RELEASE_PACKAGING.md b/docs/RELEASE_PACKAGING.md
index 98c1544b..41f8f120 100644
--- a/docs/RELEASE_PACKAGING.md
+++ b/docs/RELEASE_PACKAGING.md
@@ -62,13 +62,13 @@ git add -f docs/QUICK_START.pdf docs/USER_MANUAL.pdf
 ## Local packaging
 
 ```powershell
-.\scripts\repository-health.ps1 -ExpectedVersion "1.4.0"
+.\scripts\repository-health.ps1 -ExpectedVersion "1.4.1"
 python -m pip install reportlab==4.4.9
 python .\scripts\render-offline-manuals.py
-.\scripts\publish-windows-portable.ps1 -Version "1.4.0"
-.\scripts\verify-release-package.ps1 -PackageZip ".\artifacts\release\ProcessBusInsight-v1.4.0-win-x64-portable.zip"
-.\scripts\publish-windows-installer.ps1 -Version "1.4.0"
-.\scripts\verify-windows-installer.ps1 -Installer ".\artifacts\release\ProcessBusInsight-v1.4.0-win-x64-setup.exe" -StageDir ".\artifacts\package\ProcessBusInsight-v1.4.0-win-x64-portable"
+.\scripts\publish-windows-portable.ps1 -Version "1.4.1"
+.\scripts\verify-release-package.ps1 -PackageZip ".\artifacts\release\ProcessBusInsight-v1.4.1-win-x64-portable.zip"
+.\scripts\publish-windows-installer.ps1 -Version "1.4.1"
+.\scripts\verify-windows-installer.ps1 -Installer ".\artifacts\release\ProcessBusInsight-v1.4.1-win-x64-setup.exe" -StageDir ".\artifacts\package\ProcessBusInsight-v1.4.1-win-x64-portable"
 ```
 
 ## GitHub workflows

From 9c57022f0fba10c61a60b2570bfce514b05b3c38 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:05:04 +0700
Subject: [PATCH 073/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 docs/development/RELEASE_CHECKLIST.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/development/RELEASE_CHECKLIST.md b/docs/development/RELEASE_CHECKLIST.md
index 35feea1b..a99c93d3 100644
--- a/docs/development/RELEASE_CHECKLIST.md
+++ b/docs/development/RELEASE_CHECKLIST.md
@@ -77,7 +77,7 @@
 
 - [ ] Create signed/verified tag where available
 - [ ] Publish Inno Setup installer (primary), optional portable ZIP, `SHA256SUMS.txt`, and `release-manifest.json`
-- [ ] Confirm `docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md` is signed off for the final commit and installed candidate (historic approval is insufficient)
+- [ ] Confirm `docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md` is signed off for the final commit and installed candidate (historic approval is insufficient)
 - [ ] Public release is manually dispatched **from main** with current field acceptance confirmation; pushing a tag cannot silently publish
 - [ ] Mark beta releases as prerelease
 - [ ] Confirm GitHub Pages and download links

From d2fa86a88d8c67aecb68a9fbe2b92089ccb4082e Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:05:07 +0700
Subject: [PATCH 074/148] Bump release candidate to 1.4.1; protect published
 1.4.0 artifacts

---
 docs/validation/TESTED_CONFIGURATIONS.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/validation/TESTED_CONFIGURATIONS.md b/docs/validation/TESTED_CONFIGURATIONS.md
index a1543436..c64f86d1 100644
--- a/docs/validation/TESTED_CONFIGURATIONS.md
+++ b/docs/validation/TESTED_CONFIGURATIONS.md
@@ -13,13 +13,13 @@ This matrix records explicit evidence. It is not a vendor-certification claim.
 | Packaging | Windows x64 Inno Setup self-contained installer (primary), portable ZIP (optional); install/repair/offline manuals/uninstall | Windows candidate workflow + SHA256 smoke gates | Automated |
 | Website | Static GitHub Pages source validation | Pages workflow | Automated |
 | Live capture | Windows + Npcap + selected Ethernet adapter | Historical bench and current screenshot show adapter + one SV stream; fresh final candidate acceptance required | **Pending current final SHA** |
-| Runtime soak | Historical v1.3.0-beta.2 60-minute live session, three streams, memory 141.6/144.5/142.1 MB | `V1.3.0_BETA2_FIELD_EVIDENCE.md` | PASS **historical only; pending v1.4.0 final candidate** |
+| Runtime soak | Historical v1.3.0-beta.2 60-minute live session, three streams, memory 141.6/144.5/142.1 MB | `V1.3.0_BETA2_FIELD_EVIDENCE.md` | PASS **historical only; pending v1.4.1 final candidate** |
 | Timing | Windows/Npcap or recorded PCAP timestamps | Screening only | Not measurement-grade |
 | PCAPNG replay | Not implemented in v1.4.0-beta.1 | No evidence | Not claimed |
 | Multi-vendor SCL | SCD/ICD/CID examples and parser tests | Partial | Broader validation required |
 | Hardware timestamping | Validated NIC/TAP timestamp path | None in public beta | Not claimed |
 
-The 2026-10-19 same-session injector/analyzer screenshot shows close agreement for one 4I+4V 50 Hz configuration, including Ia +30°, Ib -90° and Ic +150°, but does not prove sustained resource usage or packet-by-packet equivalence. See [current v1.4.0 acceptance gates](V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md).
+The 2026-10-19 same-session injector/analyzer screenshot shows close agreement for one 4I+4V 50 Hz configuration, including Ia +30°, Ib -90° and Ic +150°, but does not prove sustained resource usage or packet-by-packet equivalence. See [current v1.4.1 acceptance gates](V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md).
 
 ## Release evidence to record
 

From 42f2500f9b39db8ab7ae5043dd8ec07facd46a78 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:05:18 +0700
Subject: [PATCH 075/148] Retire superseded 1.4.0 candidate gate; use v1.4.1
 without rewriting historical release

---
 .../V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md       | 64 -------------------
 1 file changed, 64 deletions(-)
 delete mode 100644 docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md

diff --git a/docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md b/docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md
deleted file mode 100644
index 71cadb9a..00000000
--- a/docs/validation/V1.4.0_PUBLIC_RELEASE_ACCEPTANCE.md
+++ /dev/null
@@ -1,64 +0,0 @@
-# v1.4.0 public release acceptance — open gates
-
-This document distinguishes **automated evidence** from **physical acceptance**. It is a release gate, not a conformance certificate. Never claim measured performance or perfect IEC 61850 interoperability from a screenshot.
-
-## 1. Build and source identity
-
-- Target commit SHA: **PENDING — record the final merged main commit**
-- Public version: 1.4.0 (only after every gate is signed off)
-- Candidate installer: **PENDING — record GitHub Actions run number and SHA256**
-- Native target: Windows x64, self-contained .NET 8 and separately installed Npcap
-- Official license: GPL-3.0-or-later, with all notices and source availability
-
-## 2. Automated release checks
-
-| Gate | Evidence required | Status |
-| --- | --- | --- |
-| Repository health, clean restore/build and full unit suite | CI run and TRX | PENDING current final SHA |
-| Live current vs voltage angle/RMS, invalid sample, rollover, multi-stream isolation | Production analyzer xUnit regressions | PENDING final SHA |
-| Zero phasor invention, label collision and tiny-scale legend | Presentation xUnit regressions | PENDING final SHA |
-| Runtime stability and immutable snapshot/PCAP replay | Repeated Actions jobs | PENDING final SHA |
-| CodeQL and dependency high/critical audit | Completed successful Actions checks | PENDING final SHA |
-| Installer integrity and smoke | EXE SHA256, install → repair → documentation hashes → uninstall | PENDING final SHA |
-| Release notes, GPL notices, local Quick Start/User Manual and update guide | Installer contents + package verification | PENDING final SHA |
-
-An older `.github/release/v1.4.0.approved` file refers to an **older main commit / portable candidate** and does **not** approve this PR's new installer or Npcap/phasor code. The v1.3.0-beta.2 60-minute run is a useful historical baseline, not proof for this SHA.
-
-## 3. Current engineer-visible visual check
-
-The user-supplied same-session 50 Hz injector/analyzer screenshots show:
-
-| Channel | Injector RMS / angle | Analyzer RMS / angle |
-| --- | --- | --- |
-| Ua | 57.740 V / 0.00° | 57.73 V / 0.00° |
-| Ub | 57.740 V / -120.00° | 57.73 V / -120.01° |
-| Uc | 57.740 V / +120.00° | 57.73 V / +120.01° |
-| Ia | 1.000 A / +30.00° | 1.00 A / +30.00° |
-| Ib | 1.000 A / -90.00° | 1.00 A / -90.00° |
-| Ic | 1.200 A / +150.00° | 1.20 A / +149.99° |
-
-These observations show good displayed agreement **for that one setting only**. They are not calibrated accuracy proof, independent PCAP/SCL verification, or sustained-load evidence. Do not publish site/device-specific screenshots or identifiers.
-
-## 4. Physical target-PC acceptance (BLOCKING for stable public release)
-
-Run on the final installed candidate, not an earlier portable build:
-
-- [ ] Confirm Windows x64 version/build, native Npcap version, NIC driver, adapter name/type (sanitized), receive-only TAP/SPAN topology, installer SHA256, exact application assembly version.
-- [ ] Confirm actual ASIX/other physical adapter enumerates without a fabricated fallback; start/stop/restart capture and uninstall/upgrade/repair on target Windows.
-- [ ] Compare 6 channel U/I RMS + phase against the **actual injector source values** over multiple non-nominal settings; change each one independently. Include zero/missing, distorted/harmonic samples, scale changes and reference fallback.
-- [ ] Confirm phase reference and angle sign conventions on waveform, table, phasor and power; note 0° / +90° / 180° / 270° convention.
-- [ ] Verify true canonical SV publisher strong identity (APPID, svID, MAC, VLAN, confRev, smpCnt, ASDU mapping), not just a diagnostic mirror. Preserve authorized/sanitized PCAP + optional SCL evidence locally.
-- [ ] Test 4000 and 4800 sample-per-second profiles, counter rollovers, duplicate/missing samples, publisher restart, three or more streams selected/interleaved, and 2/4/8 cycle windows as applicable.
-- [ ] Verify GOOSE, PTP and SCL workspaces on actual bench traffic. PTP visibility does not establish hardware timing accuracy.
-- [ ] Record a minimum **60-minute** physical session at real capture rate, plus process CPU, heap/working set, UI responsiveness, native driver/interface drops and consecutive capture-error counts. Attach sanitized summaries, not raw customer captures.
-- [ ] Confirm closing capture, reinstalling/repairing and uninstalling do not hang and do not delete unrelated user data; verify no unexpected data upload/network transmission.
-- [ ] Confirm UI on 100%, 125% and 150% Windows DPI, 1366×768 minimum layout and normal 1920×1080, with readable phasor labels, legends, powers and status warnings.
-
-**Physical gate result:** PENDING. No final candidate-run evidence is attached yet.
-
-## 5. Publication control
-
-- Main-branch PR merge only after automated checks.
-- Public release workflow manual dispatch must explicitly confirm current **field_acceptance_verified**, and refuses non-main source; tag pushes **cannot automatically publish**.
-- Stable GitHub release must include the Inno Setup installer as primary, portable ZIP as optional, SHA256SUMS, manifest and current release notes.
-- Until all gates close: distribute an Actions **candidate** for testing, but do not tag/publish it as certified, calibrated, or generally interoperable.

From 895f844cb8caa74c7e023f6b787f2a2e463045ae Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:05:56 +0700
Subject: [PATCH 076/148] Fail closed rather than clobber any existing
 published release assets

---
 .github/workflows/release-package.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index efb22024..384cab7e 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -197,9 +197,10 @@ jobs:
           if ($isDraft -eq 'true') { $releaseArgs += '--draft' }
           if ($isPrerelease -eq 'true') { $releaseArgs += '--prerelease' }
 
+          # Immutable release identity: never overwrite a published historical
+          # EXE/ZIP/checksum with a new binary under the same semver tag.
           gh release view $tag *> $null
           if ($LASTEXITCODE -eq 0) {
-            gh release upload $tag $installer $zip $sha $manifest --clobber
-          } else {
-            gh @releaseArgs
+            throw "Release $tag already exists. Bump VersionPrefix; public assets are immutable."
           }
+          gh @releaseArgs

From 0be874a2d2b259740dc043c9302601001f38ee76 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 18:06:44 +0700
Subject: [PATCH 077/148] Fail candidate pipeline if stable package version has
 already been published

---
 .github/workflows/candidate-package.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/.github/workflows/candidate-package.yml b/.github/workflows/candidate-package.yml
index 0c3b7f93..e0d45cb7 100644
--- a/.github/workflows/candidate-package.yml
+++ b/.github/workflows/candidate-package.yml
@@ -74,6 +74,17 @@ jobs:
           "value=$version" | Out-File -FilePath $env:GITHUB_OUTPUT -Append -Encoding utf8
           Write-Host "Candidate version: $version"
 
+      - name: Reject already-published version
+        shell: pwsh
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          $tag = "v${{ steps.version.outputs.value }}"
+          gh release view $tag --repo "${{ github.repository }}" *> $null
+          if ($LASTEXITCODE -eq 0) {
+            throw "Version $tag was already published. Bump VersionPrefix; never replace historical public binaries."
+          }
+
       - name: Repository health gate
         shell: pwsh
         run: .\scripts\repository-health.ps1 -ExpectedVersion '${{ steps.version.outputs.value }}'

From 2908235513f946514b1e7a7efe72d72e70792601 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 19:12:08 +0700
Subject: [PATCH 078/148] Add exact-tip phasor callout routing with outward
 two-segment geometry

---
 .../Presentation/PhasorCalloutRouting.cs      | 40 +++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 src/ProcessBus.Core/Presentation/PhasorCalloutRouting.cs

diff --git a/src/ProcessBus.Core/Presentation/PhasorCalloutRouting.cs b/src/ProcessBus.Core/Presentation/PhasorCalloutRouting.cs
new file mode 100644
index 00000000..c2748613
--- /dev/null
+++ b/src/ProcessBus.Core/Presentation/PhasorCalloutRouting.cs
@@ -0,0 +1,40 @@
+namespace ProcessBus.Core.Presentation;
+
+/// <summary>
+/// Stateless, allocation-free geometry for a phasor annotation leader.
+/// Every route starts at the EXACT tip of its own measured vector.
+/// Routing must never substitute a label-side tick for the tip connection.
+/// </summary>
+public readonly record struct PhasorCalloutPoint(double X, double Y);
+
+public readonly record struct PhasorCalloutRoute(
+    PhasorCalloutPoint Tip,
+    PhasorCalloutPoint Knee,
+    PhasorCalloutPoint LabelEdge);
+
+public static class PhasorCalloutRouting
+{
+    public static PhasorCalloutRoute Route(
+        PhasorCalloutPoint tip,
+        PhasorLabelPosition label,
+        double labelWidth,
+        double labelHeight,
+        bool onRight)
+    {
+        // The label edge is outside text bounds, never under the glyphs.
+        var edge = new PhasorCalloutPoint(
+            onRight ? label.X - 3.0 : label.X + labelWidth + 3.0,
+            label.Y + labelHeight * 0.5);
+
+        // Send each leader outwards from its OWN arrow tip, then diagonally
+        // toward its reserved row and horizontally into its label. On aligned
+        // Ua/Ia vectors this lifts the inner current leader clear of the longer
+        // voltage shaft rather than tracing that shaft or joining its arrowhead.
+        var direction = onRight ? 1.0 : -1.0;
+        var available = Math.Max(0.0, (edge.X - tip.X) * direction);
+        var outward = Math.Min(10.0, available * 0.42);
+        var knee = new PhasorCalloutPoint(tip.X + direction * outward, edge.Y);
+
+        return new PhasorCalloutRoute(tip, knee, edge);
+    }
+}

From 7df5f7e294771b8bfd7eb9df297e5851d45bbbda Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 19:12:52 +0700
Subject: [PATCH 079/148] Stabilize near-collinear U/I label lanes without
 altering measured angles

---
 .../Presentation/PhasorLabelLayout.cs            | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
index ed11de1f..734aefc2 100644
--- a/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
+++ b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
@@ -6,7 +6,7 @@ namespace ProcessBus.Core.Presentation;
 /// This is presentation geometry only: it never changes measured phasor angles.
 /// </summary>
 public readonly record struct PhasorLabelAnchor(
-    double TipX, double TipY, double Width, double Height, bool Right);
+    double TipX, double TipY, double Width, double Height, bool Right, bool IsCurrent = false);
 
 public readonly record struct PhasorLabelPosition(double X, double Y);
 
@@ -29,9 +29,21 @@ public static PhasorLabelPosition[] Arrange(
                 if (anchors[i].Right == right)
                     indices.Add(i);
 
-            // Stable tie-breaker prevents jitter when two vectors share an angle.
+            // Co-linear U/I vectors need two clearly separate callout lanes:
+            // a short current arrow goes above its longer voltage counterpart.
+            // Quantize only label ordering (never electrical values) so tiny
+            // phase jitter does not invert the two labels frame-to-frame.
             indices.Sort((a, b) =>
             {
+                var bandA = Math.Floor(anchors[a].TipY / 12.0);
+                var bandB = Math.Floor(anchors[b].TipY / 12.0);
+                var bandOrder = bandA.CompareTo(bandB);
+                if (bandOrder != 0)
+                    return bandOrder;
+
+                if (anchors[a].IsCurrent != anchors[b].IsCurrent)
+                    return anchors[a].IsCurrent ? -1 : 1;
+
                 var order = anchors[a].TipY.CompareTo(anchors[b].TipY);
                 return order != 0 ? order : a.CompareTo(b);
             });

From f14a60c3301f979e641ae52795920daaca0c2397 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 19:13:21 +0700
Subject: [PATCH 080/148] Connect every phasor callout to its own arrow tip
 with family-specific two-segment leader

---
 .../Controls/PhasorDiagramControl.cs          | 48 ++++++++++++-------
 1 file changed, 32 insertions(+), 16 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
index a7396086..c3cbb31a 100644
--- a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
+++ b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
@@ -52,7 +52,20 @@ public sealed class PhasorDiagramControl : FrameworkElement
     private static readonly Pen RingPen = CreatePen(CreateBrush("#28445E"), 1.0, [3.0, 5.0]);
     private static readonly Pen AxisPen = CreatePen(CreateBrush("#45627E"), 1.2);
     private static readonly Pen DiagonalPen = CreatePen(CreateBrush("#1D344E"), 0.85, [2.5, 5.0]);
-    private static readonly Pen LeaderPen = CreatePen(CreateBrush("#58748E"), 0.75);
+    // Tinted, hairline leaders: voltage solid and current dashed, matching
+    // their respective arrow families. Cached/frozen like all plot pens.
+    private static readonly Pen[] VoltageLeaderPens =
+    [
+        CreatePen(CreateBrush("#A86877"), 0.95),
+        CreatePen(CreateBrush("#C0A055"), 0.95),
+        CreatePen(CreateBrush("#729FC8"), 0.95)
+    ];
+    private static readonly Pen[] CurrentLeaderPens =
+    [
+        CreatePen(CreateBrush("#A86877"), 1.05, [2.0, 2.0]),
+        CreatePen(CreateBrush("#C0A055"), 1.05, [2.0, 2.0]),
+        CreatePen(CreateBrush("#729FC8"), 1.05, [2.0, 2.0])
+    ];
     private static readonly Pen[] VoltagePens =
     [
         CreatePen(PhaseRBrush, VoltageLineThickness),
@@ -192,7 +205,8 @@ protected override void OnRender(DrawingContext dc)
             anchors[i] = new PhasorLabelAnchor(
                 vector.Tip.X, vector.Tip.Y,
                 vector.Label.Width, vector.Label.Height,
-                vector.Tip.X >= center.X);
+                vector.Tip.X >= center.X,
+                vector.Item.Family == PhasorFamily.Current);
         }
 
         // Reserve two footer rows so label packing never obscures scale readouts.
@@ -204,20 +218,22 @@ protected override void OnRender(DrawingContext dc)
         {
             var vector = vectors[i];
             var position = positions[i];
-            var onRight = anchors[i].Right;
-            var endpoint = new Point(
-                onRight ? position.X - 3 : position.X + vector.Label.Width + 3,
-                position.Y + vector.Label.Height / 2.0);
-            // Long lines across the polar plot obscured vectors and looked like
-            // additional measurements. Use a short label-side indicator unless
-            // its actual tip is close enough for an unambiguous connector.
-            var connectorDistance = (vector.Tip - endpoint).Length;
-            if (connectorDistance <= 19)
-                dc.DrawLine(LeaderPen, vector.Tip, endpoint);
-            else
-                dc.DrawLine(LeaderPen,
-                    endpoint,
-                    new Point(endpoint.X + (onRight ? -7 : 7), endpoint.Y));
+            var route = PhasorCalloutRouting.Route(
+                new PhasorCalloutPoint(vector.Tip.X, vector.Tip.Y),
+                position, vector.Label.Width, vector.Label.Height, anchors[i].Right);
+            var phase = PhaseIndex(vector.Item.Name);
+            var leaderPen = vector.Item.Family == PhasorFamily.Voltage
+                ? VoltageLeaderPens[phase] : CurrentLeaderPens[phase];
+
+            // Always start at the actual measured vector TIP. Each fasor owns
+            // its route; even collinear Ua/Ia may never share an invented anchor.
+            // The elbow separates labels without drawing across the shaft.
+            dc.DrawLine(leaderPen,
+                new Point(route.Tip.X, route.Tip.Y),
+                new Point(route.Knee.X, route.Knee.Y));
+            dc.DrawLine(leaderPen,
+                new Point(route.Knee.X, route.Knee.Y),
+                new Point(route.LabelEdge.X, route.LabelEdge.Y));
             dc.DrawText(vector.Label, new Point(position.X, position.Y));
         }
         dc.Pop();

From b92d53ba321b0ab8891eb4450d5484b4f9b76ad8 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 19:15:13 +0700
Subject: [PATCH 081/148] Reserve upper current callout lane for near-collinear
 U/I phasors

---
 .../Presentation/PhasorLabelLayout.cs         | 23 ++++++++++++++++++-
 1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
index 734aefc2..59c63825 100644
--- a/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
+++ b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
@@ -51,10 +51,31 @@ public static PhasorLabelPosition[] Arrange(
             var top = Math.Max(0, topPadding);
             var bottom = Math.Max(top, height - Math.Max(0, bottomPadding));
             var cursor = top;
-            foreach (var index in indices)
+            for (var slot = 0; slot < indices.Count; slot++)
             {
+                var index = indices[slot];
                 var label = anchors[index];
                 var desiredY = label.TipY - label.Height / 2;
+
+                // When the longer U arrow and shorter I arrow are nearly
+                // collinear, a current label centered on the arrow shaft would
+                // make its horizontal leader overlap U. Reserve an upper lane
+                // for the I leader before packing the lower U label.
+                if (label.IsCurrent)
+                {
+                    for (var next = slot + 1; next < indices.Count; next++)
+                    {
+                        var following = anchors[indices[next]];
+                        if (following.TipY - label.TipY > 4)
+                            break;
+                        if (!following.IsCurrent && Math.Abs(following.TipY - label.TipY) <= 4)
+                        {
+                            desiredY -= 10;
+                            break;
+                        }
+                    }
+                }
+
                 var y = Math.Max(cursor, Math.Max(top, desiredY));
                 positions[index] = new PhasorLabelPosition(
                     Math.Clamp(right ? width - label.Width - 4 : 4, 0, Math.Max(0, width - label.Width)),

From 2842f9e4a8c9c36c60690b43700c9b660d1c605b Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 19:16:11 +0700
Subject: [PATCH 082/148] Avoid label-order jitter near 12px bin boundaries
 with deterministic close-pair routing

---
 .../Presentation/PhasorLabelLayout.cs         | 35 ++++++++++++-------
 1 file changed, 22 insertions(+), 13 deletions(-)

diff --git a/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
index 59c63825..64976589 100644
--- a/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
+++ b/src/ProcessBus.Core/Presentation/PhasorLabelLayout.cs
@@ -29,24 +29,33 @@ public static PhasorLabelPosition[] Arrange(
                 if (anchors[i].Right == right)
                     indices.Add(i);
 
-            // Co-linear U/I vectors need two clearly separate callout lanes:
-            // a short current arrow goes above its longer voltage counterpart.
-            // Quantize only label ordering (never electrical values) so tiny
-            // phase jitter does not invert the two labels frame-to-frame.
+            // Sort from actual tip geometry first. For nearly coincident U/I
+            // tips, put the current callout into the upper label lane (never
+            // modify the measured angle or arrow position). Local stable
+            // relocation avoids quantization-boundary label jitter.
             indices.Sort((a, b) =>
             {
-                var bandA = Math.Floor(anchors[a].TipY / 12.0);
-                var bandB = Math.Floor(anchors[b].TipY / 12.0);
-                var bandOrder = bandA.CompareTo(bandB);
-                if (bandOrder != 0)
-                    return bandOrder;
-
-                if (anchors[a].IsCurrent != anchors[b].IsCurrent)
-                    return anchors[a].IsCurrent ? -1 : 1;
-
                 var order = anchors[a].TipY.CompareTo(anchors[b].TipY);
                 return order != 0 ? order : a.CompareTo(b);
             });
+            for (var slot = 0; slot < indices.Count; slot++)
+            {
+                if (anchors[indices[slot]].IsCurrent)
+                    continue;
+
+                for (var next = slot + 1; next < indices.Count; next++)
+                {
+                    if (anchors[indices[next]].TipY - anchors[indices[slot]].TipY > 4)
+                        break;
+                    if (!anchors[indices[next]].IsCurrent)
+                        continue;
+
+                    var current = indices[next];
+                    indices.RemoveAt(next);
+                    indices.Insert(slot, current);
+                    break;
+                }
+            }
 
             var top = Math.Max(0, topPadding);
             var bottom = Math.Max(top, height - Math.Max(0, bottomPadding));

From 508245fc3facfde72ed74ecce4ab4b297bb6f69c Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 19:17:06 +0700
Subject: [PATCH 083/148] Add phase-A exact-tip regression for long leader,
 collinear Ua/Ia and both sides

---
 .../PhasorPresentationContractTests.cs        | 78 +++++++++++++++++++
 1 file changed, 78 insertions(+)

diff --git a/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
index 20e5309d..553895e2 100644
--- a/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
+++ b/tests/ProcessBus.Tests/PhasorPresentationContractTests.cs
@@ -113,6 +113,84 @@ public void MissingOrInvalidRmsNeverCreatesAConvincingScale()
         Assert.Equal("I N/A", PhasorScaleCaption.Format("I", double.NaN, "A"));
     }
 
+
+    [Theory]
+    [InlineData(-0.10)]
+    [InlineData(0.00)]
+    [InlineData(0.10)]
+    public void PhaseAVoltageAndCurrentCalloutsLandOnTheirOwnDistinctArrowTips(
+        double smallVerticalJitter)
+    {
+        // Physical screenshot: Ua=57.73V ∠0°, Ia=0.50A ∠0.01°,
+        // with different normalized radii. Labels share the RIGHT rail.
+        const double uaY = 120;
+        var iaY = uaY + smallVerticalJitter;
+        var anchors = new[]
+        {
+            new PhasorLabelAnchor(246.4, uaY, 52, 14, true, false), // Ua
+            new PhasorLabelAnchor(114, 161, 52, 14, false, false), // Ub
+            new PhasorLabelAnchor(114, 78, 52, 14, false, false),  // Uc
+            new PhasorLabelAnchor(187.4, iaY, 52, 14, true, true), // Ia
+            new PhasorLabelAnchor(124, 152, 52, 14, false, true), // Ib
+            new PhasorLabelAnchor(124, 88, 52, 14, false, true)   // Ic
+        };
+        var positions = PhasorLabelLayout.Arrange(anchors, 320, 245, 18, 42);
+        var uaRoute = PhasorCalloutRouting.Route(
+            new PhasorCalloutPoint(anchors[0].TipX, anchors[0].TipY),
+            positions[0], anchors[0].Width, anchors[0].Height, true);
+        var iaRoute = PhasorCalloutRouting.Route(
+            new PhasorCalloutPoint(anchors[3].TipX, anchors[3].TipY),
+            positions[3], anchors[3].Width, anchors[3].Height, true);
+
+        Assert.Equal(new PhasorCalloutPoint(246.4, uaY), uaRoute.Tip);
+        Assert.Equal(new PhasorCalloutPoint(187.4, iaY), iaRoute.Tip);
+        Assert.NotEqual(uaRoute.Tip, iaRoute.Tip);
+        Assert.NotEqual(uaRoute.Knee, iaRoute.Knee);
+        Assert.NotEqual(uaRoute.LabelEdge, iaRoute.LabelEdge);
+
+        // Long Ia leader still stays connected to its real short current arrow.
+        Assert.True(iaRoute.LabelEdge.X - iaRoute.Tip.X > 19);
+        Assert.True(iaRoute.Knee.X > iaRoute.Tip.X);
+        Assert.Equal(iaRoute.Knee.Y, iaRoute.LabelEdge.Y);
+        Assert.True(iaRoute.LabelEdge.Y < uaY - 6,
+            "Current leader must leave the shared Ua/Ia axis ABOVE the voltage shaft.");
+        Assert.True(uaRoute.LabelEdge.Y > uaY + 5,
+            "Voltage leader must enter a lower, separate lane.");
+    }
+
+    [Theory]
+    [InlineData(false)]
+    [InlineData(true)]
+    public void CalloutRoutingConnectsRealTipsOnEitherSideEvenWithLongLeaders(bool right)
+    {
+        var tip = new PhasorCalloutPoint(right ? 185 : 100, 100);
+        var label = new PhasorLabelPosition(right ? 265 : 4, 58);
+        var route = PhasorCalloutRouting.Route(tip, label, 48, 14, right);
+
+        Assert.Equal(tip, route.Tip);
+        Assert.Equal(right ? 262 : 55, route.LabelEdge.X);
+        Assert.Equal(65, route.LabelEdge.Y);
+        Assert.True(right ? route.Knee.X > tip.X : route.Knee.X < tip.X);
+        Assert.True(right
+            ? route.Tip.X <= route.Knee.X && route.Knee.X <= route.LabelEdge.X
+            : route.Tip.X >= route.Knee.X && route.Knee.X >= route.LabelEdge.X);
+    }
+
+    [Fact]
+    public void ExactlyCollinearTipLabelsStaySeparateAcrossTinySignChanges()
+    {
+        foreach (var dy in new[] { -0.02, 0.0, 0.02 })
+        {
+            var anchors = new[]
+            {
+                new PhasorLabelAnchor(246, 119.99, 48, 14, true, false),
+                new PhasorLabelAnchor(187, 119.99 + dy, 48, 14, true, true)
+            };
+            var labels = PhasorLabelLayout.Arrange(anchors, 310, 215, 18, 42);
+            Assert.True(labels[1].Y + anchors[1].Height <= labels[0].Y);
+        }
+    }
+
     [Fact]
     public void SixVectorsSharingOneAngleStillReceiveDistinctStableLabelSlots()
     {

From 03293d990b4895cdacfda5b7fb0d840394cd3534 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Mon, 19 Oct 2026 19:19:53 +0700
Subject: [PATCH 084/148] Fix release candidate version guard: treat expected
 404 as available, fail closed otherwise

---
 .github/workflows/candidate-package.yml | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/candidate-package.yml b/.github/workflows/candidate-package.yml
index e0d45cb7..2d67c2d3 100644
--- a/.github/workflows/candidate-package.yml
+++ b/.github/workflows/candidate-package.yml
@@ -80,10 +80,23 @@ jobs:
           GH_TOKEN: ${{ github.token }}
         run: |
           $tag = "v${{ steps.version.outputs.value }}"
-          gh release view $tag --repo "${{ github.repository }}" *> $null
-          if ($LASTEXITCODE -eq 0) {
+          # GitHub CLI exits 1 for an expected 404. On modern PowerShell runners
+          # a failed native command can terminate the step BEFORE LASTEXITCODE
+          # is inspected. Query the REST status explicitly; 404 is an unused
+          # version, 200 is already published, and other statuses fail closed.
+          $uri = "https://api.github.com/repos/${{ github.repository }}/releases/tags/$tag"
+          $response = Invoke-WebRequest -Uri $uri -Method Get -SkipHttpErrorCheck -Headers @{
+            Authorization = "Bearer $env:GH_TOKEN"
+            Accept = "application/vnd.github+json"
+            "X-GitHub-Api-Version" = "2022-11-28"
+          }
+          if ($response.StatusCode -eq 200) {
             throw "Version $tag was already published. Bump VersionPrefix; never replace historical public binaries."
           }
+          if ($response.StatusCode -ne 404) {
+            throw "Unable to establish release-version availability: HTTP $($response.StatusCode)."
+          }
+          Write-Host "Unused release version verified: $tag"
 
       - name: Repository health gate
         shell: pwsh

From 4c3a467f579f9b083c8e62ef3f4e5c3097c67672 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:27:48 +0700
Subject: [PATCH 085/148] Introduce evidence-based per-channel SV freshness
 shared by live displays

---
 .../Models/ChannelFreshness.cs                | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 src/ProcessBus.Core/Models/ChannelFreshness.cs

diff --git a/src/ProcessBus.Core/Models/ChannelFreshness.cs b/src/ProcessBus.Core/Models/ChannelFreshness.cs
new file mode 100644
index 00000000..b11c906c
--- /dev/null
+++ b/src/ProcessBus.Core/Models/ChannelFreshness.cs
@@ -0,0 +1,30 @@
+namespace ProcessBus.Core.Models;
+
+/// <summary>
+/// Evidence-based status of a single decoded SV channel; never infer stale
+/// from a legitimate flat/zero signal. Stream timeout is an independent
+/// display override, shared by all channels from the selected publisher.
+/// </summary>
+public enum ChannelFreshness
+{
+    Live = 0,
+    Held = 1,
+    Missing = 2
+}
+
+public static class ChannelFreshnessDisplay
+{
+    public static double Opacity(ChannelFreshness status) => status switch
+    {
+        ChannelFreshness.Live => 1.0,
+        ChannelFreshness.Held => 0.38,
+        _ => 0.22
+    };
+
+    public static string Suffix(ChannelFreshness status) => status switch
+    {
+        ChannelFreshness.Held => "HELD",
+        ChannelFreshness.Missing => "MISSING",
+        _ => string.Empty
+    };
+}

From d6fcd5cc79a8e77eb435f304ad62c3dfdddf3c4d Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:28:13 +0700
Subject: [PATCH 086/148] Propagate channel freshness through SSOT, runtime and
 stable display update comparisons

---
 src/ProcessBus.Core/Models/WaveformSeriesModel.cs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/ProcessBus.Core/Models/WaveformSeriesModel.cs b/src/ProcessBus.Core/Models/WaveformSeriesModel.cs
index f9836d02..abc7aad8 100644
--- a/src/ProcessBus.Core/Models/WaveformSeriesModel.cs
+++ b/src/ProcessBus.Core/Models/WaveformSeriesModel.cs
@@ -4,6 +4,7 @@ public sealed class WaveformSeriesModel
 {
     public required string Name { get; init; }
     public string Unit { get; init; } = string.Empty;
+    public ChannelFreshness Freshness { get; init; } = ChannelFreshness.Live;
     public IReadOnlyList<double> Samples { get; init; } = Array.Empty<double>();
     public string ShapeSeverity { get; init; } = "Unknown";
     public string ShapeStatusText { get; init; } = "Shape pending";

From 2fa7e6c645ccccdafd7d0bbfa420a6519709cc60 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:28:17 +0700
Subject: [PATCH 087/148] Propagate channel freshness through SSOT, runtime and
 stable display update comparisons

---
 src/ProcessBus.Core/Models/ChannelValueModel.cs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/ProcessBus.Core/Models/ChannelValueModel.cs b/src/ProcessBus.Core/Models/ChannelValueModel.cs
index e29cc904..0d8d8574 100644
--- a/src/ProcessBus.Core/Models/ChannelValueModel.cs
+++ b/src/ProcessBus.Core/Models/ChannelValueModel.cs
@@ -14,6 +14,9 @@ public ChannelValueModel(string name)
     public double? RmsValue { get; init; }
     public double? AngleDegrees { get; init; }
     public string Unit { get; init; } = string.Empty;
+    public ChannelFreshness Freshness { get; init; } = ChannelFreshness.Live;
+    public double FreshnessOpacity => ChannelFreshnessDisplay.Opacity(Freshness);
+    public string FreshnessText => ChannelFreshnessDisplay.Suffix(Freshness);
 
     // The operator ledger keeps the numerical readout and its unit in separate columns.
     // Do not infer V/A when engineering scale authority has not supplied a unit.

From ebfc7124b5fd35631930c018cb20a9b15ec97248 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:28:20 +0700
Subject: [PATCH 088/148] Propagate channel freshness through SSOT, runtime and
 stable display update comparisons

---
 src/ProcessBus.Core/Models/PhasorDisplayItem.cs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/ProcessBus.Core/Models/PhasorDisplayItem.cs b/src/ProcessBus.Core/Models/PhasorDisplayItem.cs
index 47df2e53..80ead2d4 100644
--- a/src/ProcessBus.Core/Models/PhasorDisplayItem.cs
+++ b/src/ProcessBus.Core/Models/PhasorDisplayItem.cs
@@ -13,6 +13,7 @@ public sealed class PhasorDisplayItem
     public double? Magnitude { get; init; }
     public double? AngleDegrees { get; init; }
     public string Unit { get; init; } = string.Empty;
+    public ChannelFreshness Freshness { get; init; } = ChannelFreshness.Live;
     public bool HasValue => Magnitude.HasValue && AngleDegrees.HasValue;
     public string MagnitudeDisplayText => Magnitude.HasValue ? $"{Magnitude:0.###}" : "N/A";
     public string AngleDisplayText => AngleDegrees.HasValue ? $"{AngleDegrees:0.###} deg" : "N/A";

From 71fde3521c461eae01cc96c82abfaba151c68fda Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:28:22 +0700
Subject: [PATCH 089/148] Propagate channel freshness through SSOT, runtime and
 stable display update comparisons

---
 src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs b/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs
index 48e9310c..6a498646 100644
--- a/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs
+++ b/src/ProcessBus.Core/Presentation/LiveRenderCoalescer.cs
@@ -67,11 +67,13 @@ public static bool SamePhasors(AnalogValuesSnapshot left, AnalogValuesSnapshot r
 
     private static bool SamePhasorChannel(ChannelValueModel a, ChannelValueModel b) =>
         a.RmsValue == b.RmsValue &&
+        a.Freshness == b.Freshness &&
         a.AngleDegrees == b.AngleDegrees &&
         string.Equals(a.Unit, b.Unit, StringComparison.Ordinal);
 
     private static bool SameChannel(ChannelValueModel a, ChannelValueModel b) =>
         a.InstantValue == b.InstantValue && a.RmsValue == b.RmsValue &&
+        a.Freshness == b.Freshness &&
         a.AngleDegrees == b.AngleDegrees &&
         string.Equals(a.Unit, b.Unit, StringComparison.Ordinal);
 
@@ -102,6 +104,7 @@ private static bool SameSeries(IReadOnlyList<WaveformSeriesModel> a, IReadOnlyLi
                 x.ShapeResidualPercent != y.ShapeResidualPercent ||
                 x.CrestFactor != y.CrestFactor ||
                 x.HasShapeDistortion != y.HasShapeDistortion ||
+                x.Freshness != y.Freshness ||
                 x.Samples.Count != y.Samples.Count)
                 return false;
 

From 0e5d6bca770a813e7c07967689554703b97c10c6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:28:25 +0700
Subject: [PATCH 090/148] Propagate channel freshness through SSOT, runtime and
 stable display update comparisons

---
 src/ProcessBus.Core/Models/SvPhysicalPowerMeter.cs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.Core/Models/SvPhysicalPowerMeter.cs b/src/ProcessBus.Core/Models/SvPhysicalPowerMeter.cs
index 20b1de15..1ec7e4a6 100644
--- a/src/ProcessBus.Core/Models/SvPhysicalPowerMeter.cs
+++ b/src/ProcessBus.Core/Models/SvPhysicalPowerMeter.cs
@@ -21,7 +21,9 @@ public static bool TryCompute(AnalogValuesSnapshot snapshot, out SvPhysicalPower
         var s = 0.0;
         foreach (var (u, i) in phases)
         {
-            if (u.Unit != "V" || i.Unit != "A" ||
+            // Held or missing inputs cannot claim a CURRENT three-phase power estimate.
+            if (u.Freshness != ChannelFreshness.Live || i.Freshness != ChannelFreshness.Live ||
+                u.Unit != "V" || i.Unit != "A" ||
                 u.RmsValue is not { } uRms || i.RmsValue is not { } iRms ||
                 u.AngleDegrees is not { } uAngle || i.AngleDegrees is not { } iAngle ||
                 !double.IsFinite(uRms) || !double.IsFinite(iRms) ||

From b4c7e2bee581278e56da3850ef6a8445f9a1daf0 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:28:28 +0700
Subject: [PATCH 091/148] Propagate channel freshness through SSOT, runtime and
 stable display update comparisons

---
 src/ProcessBus.Iec61850.Raw/Runtime/SvRuntimeSnapshot.cs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/ProcessBus.Iec61850.Raw/Runtime/SvRuntimeSnapshot.cs b/src/ProcessBus.Iec61850.Raw/Runtime/SvRuntimeSnapshot.cs
index af9d402e..f8ebd723 100644
--- a/src/ProcessBus.Iec61850.Raw/Runtime/SvRuntimeSnapshot.cs
+++ b/src/ProcessBus.Iec61850.Raw/Runtime/SvRuntimeSnapshot.cs
@@ -92,6 +92,7 @@ public sealed class SvRuntimeChannelSnapshot
     internal SvRuntimeChannelSnapshot(
         string name,
         string unit,
+        ChannelFreshness freshness,
         double? instantValue,
         double? rmsValue,
         double? angleDegrees,
@@ -104,6 +105,7 @@ internal SvRuntimeChannelSnapshot(
     {
         Name = name;
         Unit = unit;
+        Freshness = freshness;
         InstantValue = instantValue;
         RmsValue = rmsValue;
         AngleDegrees = angleDegrees;
@@ -117,6 +119,7 @@ internal SvRuntimeChannelSnapshot(
 
     public string Name { get; }
     public string Unit { get; }
+    public ChannelFreshness Freshness { get; }
     public double? InstantValue { get; }
     public double? RmsValue { get; }
     public double? AngleDegrees { get; }
@@ -205,6 +208,7 @@ public static SvRuntimeSnapshot Create(AnalyzerSnapshot source, long generation,
             return new SvRuntimeChannelSnapshot(
                 name,
                 analog?.Unit ?? series?.Unit ?? string.Empty,
+                series?.Freshness ?? analog?.Freshness ?? ChannelFreshness.Missing,
                 analog?.InstantValue,
                 analog?.RmsValue,
                 analog?.AngleDegrees,

From 07e426fa445da50a981f655b6c21a25dfd5313d1 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:28:31 +0700
Subject: [PATCH 092/148] Propagate channel freshness through SSOT, runtime and
 stable display update comparisons

---
 src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index 6c065f51..57f0efbd 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -4342,7 +4342,8 @@ private static PhasorDisplayItem CreatePhasor(string name, PhasorFamily family,
             Magnitude = channel.RmsValue,
             // The engine alone owns relative-angle/reference interpretation.
             AngleDegrees = channel.AngleDegrees,
-            Unit = channel.Unit
+            Unit = channel.Unit,
+            Freshness = channel.Freshness
         };
 
     private bool FilterGooseHistory(object item)

From 3c973e97506ffe337f44b4fb264918666d238854 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:29:16 +0700
Subject: [PATCH 093/148] Decode known 4I+4V instMag/q trust per channel
 without inferring other layouts

---
 .../Sv/FourI4VQuality.cs                      | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/src/ProcessBus.Iec61850.Raw/Sv/FourI4VQuality.cs b/src/ProcessBus.Iec61850.Raw/Sv/FourI4VQuality.cs
index e3e3c419..0821983b 100644
--- a/src/ProcessBus.Iec61850.Raw/Sv/FourI4VQuality.cs
+++ b/src/ProcessBus.Iec61850.Raw/Sv/FourI4VQuality.cs
@@ -10,6 +10,26 @@ public static class FourI4VQuality
 {
     public enum MeasurementState { Good, Test, OperatorBlocked, Untrusted, UnknownLayout }
 
+    /// <summary>
+    /// Read the q word for one explicitly known instMag/q pair. ElementIndex
+    /// denotes the INT32 magnitude, not the byte offset or q element.
+    /// Unknown layouts must never be assessed by an assumed pair ordering.
+    /// </summary>
+    public static MeasurementState AssessChannel(ReadOnlySpan<byte> payload, int elementIndex)
+    {
+        if (payload.Length != 64 || elementIndex < 0 ||
+            elementIndex > 14 || (elementIndex & 1) != 0)
+            return MeasurementState.UnknownLayout;
+
+        var q = BinaryPrimitives.ReadUInt32BigEndian(
+            payload.Slice((elementIndex + 1) * sizeof(int), sizeof(uint)));
+        if ((q & ~((1U << 11) | (1U << 12))) != 0)
+            return MeasurementState.Untrusted;
+        if ((q & (1U << 12)) != 0)
+            return MeasurementState.OperatorBlocked;
+        return (q & (1U << 11)) != 0 ? MeasurementState.Test : MeasurementState.Good;
+    }
+
     public static MeasurementState Assess(ReadOnlySpan<byte> payload)
     {
         if (payload.Length != 64)

From a07f2aa7062e2912b2fe95cb2a69cb732b473a96 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:30:02 +0700
Subject: [PATCH 094/148] Keep trusted SV channels live while holding only
 invalid/incomplete instMag/q channels

---
 .../Analysis/RawProcessBusAnalyzer.cs         | 97 +++++++++++++++++--
 1 file changed, 88 insertions(+), 9 deletions(-)

diff --git a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
index 4df497f8..a2757fae 100644
--- a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
+++ b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
@@ -873,6 +873,9 @@ private static readonly (string Channel, int ElementIndex)[] OmicronInstMagQuali
         private SvChannelMappingProfile? _lastDecodedMapping;
         private int _lastDecodedElementCount = -1;
         private bool _qualityAccepted = true;
+        // Eight bits for the eight verified instMag/q channels; no per-frame
+        // dictionary/heap allocation. Only trusted q layouts can set a bit.
+        private byte _untrustedChannelMask;
         private bool _previousMultiAsduFrame;
         private bool _knownFourI4VMapping;
         private bool _lastMappingDisplayAccepted = true;
@@ -1231,14 +1234,29 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
                          e.TypeText.Contains("instMag", StringComparison.OrdinalIgnoreCase))));
             }
 
-            var quality = payload.Length == 64 && _knownFourI4VMapping
+            var trustedLayout = payload.Length == 64 && _knownFourI4VMapping;
+            var quality = trustedLayout
                 ? FourI4VQuality.Assess(payload)
                 : FourI4VQuality.MeasurementState.UnknownLayout;
+            byte untrustedMask = 0;
+            if (trustedLayout)
+            {
+                for (var index = 0; index < OmicronInstMagQualityMap.Length; index++)
+                {
+                    if (FourI4VQuality.AssessChannel(payload, index * 2) ==
+                        FourI4VQuality.MeasurementState.Untrusted)
+                        untrustedMask |= (byte)(1 << index);
+                }
+            }
+            _untrustedChannelMask = untrustedMask;
+            var allUntrusted = untrustedMask == 0xFF;
             QualityStatusText = quality switch
             {
                 FourI4VQuality.MeasurementState.Good => "4I+4V quality good",
                 FourI4VQuality.MeasurementState.Test => "4I+4V TEST data (laboratory stimulus)",
                 FourI4VQuality.MeasurementState.OperatorBlocked => "4I+4V operator-blocked data",
+                FourI4VQuality.MeasurementState.Untrusted when !allUntrusted =>
+                    $"4I+4V partial quality invalid: {System.Numerics.BitOperations.PopCount((uint)untrustedMask)} channel(s) held",
                 FourI4VQuality.MeasurementState.Untrusted => "4I+4V quality invalid: measurement withheld",
                 _ => "Quality mapping not verified"
             };
@@ -1246,12 +1264,20 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
             if (quality == FourI4VQuality.MeasurementState.Untrusted)
             {
                 QualityRejectedSamples++;
-                if (_qualityAccepted)
+                if (allUntrusted)
                 {
-                    _qualityAccepted = false;
-                    ClearRenderBuffers();
+                    // The entire payload is untrustworthy. Preserve the
+                    // pre-existing fail-closed contract; no stale "LIVE" values.
+                    if (_qualityAccepted)
+                    {
+                        _qualityAccepted = false;
+                        ClearRenderBuffers();
+                    }
+                    return;
                 }
-                return;
+                // Partial invalidity: never discard unrelated live channels.
+                // Invalid q channels are omitted from this scope frame, while
+                // trustworthy peers continue on the same smpCnt timeline.
             }
             _qualityAccepted = true;
 
@@ -1277,7 +1303,7 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
                         continue;
 
                     mappedCount++;
-                    if (acceptForDisplay)
+                    if (acceptForDisplay && !IsChannelUntrusted(element.ElementIndex))
                     {
                         var sample = BinaryPrimitives.ReadInt32BigEndian(payload.Slice(element.ElementIndex * 4, 4));
                         samples.Add(smpCnt, sample, samplesPerCycle);
@@ -1319,7 +1345,7 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
 
             foreach (var (channel, elementIndex) in OmicronInstMagQualityMap)
             {
-                if (!acceptForDisplay)
+                if (!acceptForDisplay || IsChannelUntrusted(elementIndex))
                     continue;
                 var sample = BinaryPrimitives.ReadInt32BigEndian(payload.Slice(elementIndex * 4, 4));
                 _channelSamples[channel].Add(smpCnt, sample, samplesPerCycle);
@@ -1338,6 +1364,26 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
             }
         }
 
+        private bool IsChannelUntrusted(int elementIndex) =>
+            _knownFourI4VMapping && elementIndex >= 0 && elementIndex <= 14 &&
+            (elementIndex & 1) == 0 &&
+            (_untrustedChannelMask & (1 << (elementIndex / 2))) != 0;
+
+        private ChannelFreshness ResolveChannelFreshness(string channel, IReadOnlyList<ScopeSampleFrame> window)
+        {
+            var index = Array.FindIndex(OmicronInstMagQualityMap,
+                item => string.Equals(item.Channel, channel, StringComparison.Ordinal));
+            if (index >= 0 && (_untrustedChannelMask & (1 << index)) != 0)
+                return _lastAnalogValues is not null ? ChannelFreshness.Held : ChannelFreshness.Missing;
+
+            // Each trace needs a complete coherent window. A compressed subset
+            // would move points on the time axis and misrepresent physical phase.
+            if (window.Count == 0 || window.Any(frame => !frame.GetValue(channel).HasValue))
+                return _lastAnalogValues is not null ? ChannelFreshness.Held : ChannelFreshness.Missing;
+
+            return ChannelFreshness.Live;
+        }
+
         private static string BuildMappingSignature(SvChannelMappingProfile? mappingProfile, int decodedElementCount)
         {
             if (mappingProfile?.HasRenderableChannels == true)
@@ -1398,6 +1444,20 @@ private ChannelValueModel CreateChannelValue(
         {
             var unit = SvEngineeringScaleFactors.Unit(_engineeringScale, channel);
             var factor = SvEngineeringScaleFactors.Factor(_engineeringScale, channel);
+            var freshness = ResolveChannelFreshness(channel, coherentWindow);
+            if (freshness != ChannelFreshness.Live)
+            {
+                var previous = _lastAnalogValues is null ? null : GetAnalogChannel(_lastAnalogValues, channel);
+                return new ChannelValueModel(channel)
+                {
+                    Unit = unit,
+                    Freshness = previous is { RmsValue: not null } ? ChannelFreshness.Held : ChannelFreshness.Missing,
+                    InstantValue = previous?.InstantValue,
+                    RmsValue = previous?.RmsValue,
+                    AngleDegrees = previous?.AngleDegrees
+                };
+            }
+
             var rawInstant = GetLatestScopeValue(channel);
             var instant = rawInstant.HasValue ? rawInstant.Value * factor : (double?)null;
             var rawAngle = GetFundamentalAngleDegrees(coherentWindow, channel, samplesPerCycle);
@@ -1410,7 +1470,8 @@ private ChannelValueModel CreateChannelValue(
                 InstantValue = instant,
                 RmsValue = rms,
                 AngleDegrees = angle,
-                Unit = unit
+                Unit = unit,
+                Freshness = ChannelFreshness.Live
             };
         }
 
@@ -1460,6 +1521,23 @@ private IReadOnlyList<WaveformSeriesModel> CreateLiveWaveformSeries(
 
             foreach (var channel in channels)
             {
+                var freshness = ResolveChannelFreshness(channel, coherentWindow);
+                if (freshness != ChannelFreshness.Live)
+                {
+                    var previous = _lastScopeWaveform?.VoltageSeries.Concat(_lastScopeWaveform.CurrentSeries)
+                        .FirstOrDefault(series => string.Equals(series.Name, channel, StringComparison.Ordinal));
+                    result.Add(new WaveformSeriesModel
+                    {
+                        Name = channel,
+                        Unit = SvEngineeringScaleFactors.Unit(_engineeringScale, channel),
+                        Samples = previous?.Samples ?? Array.Empty<double>(),
+                        ShapeSeverity = "Unknown",
+                        ShapeStatusText = previous is null ? "Missing valid channel samples" : "Held: invalid/incomplete channel evidence",
+                        Freshness = previous is null ? ChannelFreshness.Missing : ChannelFreshness.Held
+                    });
+                    continue;
+                }
+
                 var scopeWindow = GetChannelSamples(coherentWindow, channel);
                 if (scopeWindow.Count < 2)
                     continue;
@@ -1478,7 +1556,8 @@ private IReadOnlyList<WaveformSeriesModel> CreateLiveWaveformSeries(
                     ShapeStatusText = shape.StatusText,
                     ShapeResidualPercent = shape.ResidualPercent,
                     CrestFactor = shape.CrestFactor,
-                    HasShapeDistortion = shape.HasDistortion
+                    HasShapeDistortion = shape.HasDistortion,
+                    Freshness = ChannelFreshness.Live
                 });
             }
 

From 6114d0bb0c3f24b129eae8ad7207f46723cd405d Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:31:02 +0700
Subject: [PATCH 095/148] Render waveform live/held per channel and fully mute
 stale publishers, including legends

---
 .../Controls/WaveformPanelControl.cs          | 66 ++++++++++++++++---
 1 file changed, 58 insertions(+), 8 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Controls/WaveformPanelControl.cs b/src/ProcessBus.App.Wpf/Controls/WaveformPanelControl.cs
index a9f1800b..25145d81 100644
--- a/src/ProcessBus.App.Wpf/Controls/WaveformPanelControl.cs
+++ b/src/ProcessBus.App.Wpf/Controls/WaveformPanelControl.cs
@@ -117,6 +117,17 @@ public WaveformPanelControl()
             typeof(WaveformPanelControl),
             new FrameworkPropertyMetadata("Auto", FrameworkPropertyMetadataOptions.AffectsRender));
 
+    public static readonly DependencyProperty IsStreamLiveProperty =
+        DependencyProperty.Register(
+            nameof(IsStreamLive), typeof(bool), typeof(WaveformPanelControl),
+            new FrameworkPropertyMetadata(false, FrameworkPropertyMetadataOptions.AffectsRender));
+
+    public bool IsStreamLive
+    {
+        get => (bool)GetValue(IsStreamLiveProperty);
+        set => SetValue(IsStreamLiveProperty, value);
+    }
+
     public WaveformSnapshot? Snapshot
     {
         get => (WaveformSnapshot?)GetValue(SnapshotProperty);
@@ -266,17 +277,34 @@ private void DrawLane(DrawingContext dc, Rect rect, LaneDefinition lane, Wavefor
         var legendX = rect.Left + 103;
         foreach (var visible in laneSeries)
         {
-            var legend = CreateText(visible.Name, 10.5, LabelBrush, LabelTypeface);
+            var suffix = ChannelFreshnessDisplay.Suffix(visible.Freshness);
+            var title = suffix.Length == 0 ? visible.Name : visible.Name + " " + suffix;
+            var legend = CreateText(title, 10.5, LabelBrush, LabelTypeface);
+            dc.PushOpacity(TraceOpacity(IsStreamLive, visible.Freshness));
             dc.DrawEllipse(GetSeriesBrush(visible.Name), null,
                 new Point(legendX, rect.Top + 15), 3.5, 3.5);
             dc.DrawText(legend, new Point(legendX + 7, rect.Top + 7));
-            legendX += legend.Width + 25;
+            dc.Pop();
+            legendX += legend.Width + 22;
+        }
+
+        if (!IsStreamLive)
+        {
+            var staleText = CreateText("STALE · last valid samples", 10, ShapeWarningBrush, TitleTypeface);
+            dc.DrawText(staleText,
+                new Point(rect.Right - staleText.Width - 12, rect.Top + 8));
+        }
+        else if (laneSeries.Any(item => item.Freshness != ChannelFreshness.Live))
+        {
+            var held = CreateText("PARTIAL · quality held", 10, ShapeWarningBrush, TitleTypeface);
+            if (legendX + 14 < rect.Right - held.Width - 12)
+                dc.DrawText(held, new Point(rect.Right - held.Width - 12, rect.Top + 8));
         }
 
         DrawGrid(dc, innerRect);
         DrawYAxisScale(dc, innerRect, amplitudeMax, lane.Unit);
 
-        if (laneSeries.Count == 0)
+        if (laneSeries.Count == 0 || laneSeries.All(item => item.Samples.Count < 2))
         {
             DrawCenteredMessage(dc, innerRect, $"{lane.Title} samples pending");
             return;
@@ -284,7 +312,12 @@ private void DrawLane(DrawingContext dc, Rect rect, LaneDefinition lane, Wavefor
 
         var stacked = string.Equals(LayoutMode, "Stacked", StringComparison.OrdinalIgnoreCase);
         for (var index = 0; index < laneSeries.Count; index++)
-            DrawSeries(dc, innerRect, laneSeries[index], amplitudeMax, stacked, index, laneSeries.Count);
+        {
+            var trace = laneSeries[index];
+            dc.PushOpacity(TraceOpacity(IsStreamLive, trace.Freshness));
+            DrawSeries(dc, innerRect, trace, amplitudeMax, stacked, index, laneSeries.Count);
+            dc.Pop();
+        }
 
         // Inspection overlay is interactive only: never obstruct live curves
         // with a permanent cursor/tooltip when the operator is not inspecting.
@@ -320,10 +353,13 @@ private IReadOnlyList<WaveformSeriesModel> BuildVisibleSeries(
                     ShapeStatusText = item.ShapeStatusText,
                     ShapeResidualPercent = item.ShapeResidualPercent,
                     CrestFactor = item.CrestFactor,
-                    HasShapeDistortion = item.HasShapeDistortion
+                    HasShapeDistortion = item.HasShapeDistortion,
+                    Freshness = item.Freshness
                 };
             })
-            .Where(item => item.Samples.Count >= 2)
+            // Keep missing/held identities for honest per-phase legends; only
+            // trusted valid points are rendered as bright, live waveform.
+            .Where(item => item.Samples.Count >= 2 || item.Freshness != ChannelFreshness.Live)
             .ToArray();
     }
 
@@ -412,11 +448,21 @@ private double ResolveLaneAmplitudeMax(LaneDefinition lane, IReadOnlyList<Wavefo
         if (hasPhysicalUnits && !isVoltage && TryParseCurrentScalePeak(scaleText, out var fixedCurrentPeak))
             return Math.Max(fixedCurrentPeak, 1.0);
 
-        var observedPeak = ResolveRobustObservedPeak(series);
+        // Held channels must not drive the fresh auto-range. If the entire
+        // publisher stopped, keep its last range: no false auto-zoom on hold.
+        var savedPeak = isVoltage ? _voltageAutoPeak : _currentAutoPeak;
+        if (!IsStreamLive && savedPeak > 0)
+            return savedPeak;
+
+        var trusted = series.Where(item => item.Freshness == ChannelFreshness.Live).ToArray();
+        if (trusted.Length == 0 && savedPeak > 0)
+            return savedPeak;
+        var amplitudeSeries = trusted.Length > 0 ? trusted : series;
+        var observedPeak = ResolveRobustObservedPeak(amplitudeSeries);
 
         observedPeak = Math.Max(observedPeak, 1.0);
 
-        var rmsPeakEstimate = ResolveRmsBasedPeak(series);
+        var rmsPeakEstimate = ResolveRmsBasedPeak(amplitudeSeries);
         var targetPeak = Math.Max(observedPeak * 1.08, rmsPeakEstimate * AutoScaleHeadroom);
         targetPeak = Math.Max(targetPeak, 1.0);
 
@@ -991,6 +1037,10 @@ private static void DrawTimebaseLabel(DrawingContext dc, Rect rect, WaveformSnap
         dc.DrawText(CreateText(frequencyText, 10.5, MutedBrush, LabelTypeface), new Point(rect.Right - 106, rect.Bottom + 3));
     }
 
+    // Presentation only: no fade animations/timers or per-sample state.
+    public static double TraceOpacity(bool streamLive, ChannelFreshness freshness) =>
+        streamLive ? ChannelFreshnessDisplay.Opacity(freshness) : 0.38;
+
     private static Brush GetSeriesBrush(string name)
     {
         return name switch

From 7364cb359c0e3345f44ce6deec27f79607e93d84 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:31:38 +0700
Subject: [PATCH 096/148] Mute held phasor arrows and callouts individually
 while peers remain live

---
 src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
index c3cbb31a..2959a496 100644
--- a/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
+++ b/src/ProcessBus.App.Wpf/Controls/PhasorDiagramControl.cs
@@ -189,8 +189,10 @@ protected override void OnRender(DrawingContext dc)
             var pen = item.Family == PhasorFamily.Voltage ? VoltagePens[phase] : CurrentPens[phase];
             var arrowPen = item.Family == PhasorFamily.Voltage ? pen : CurrentArrowPens[phase];
 
+            dc.PushOpacity(ChannelFreshnessDisplay.Opacity(item.Freshness));
             dc.DrawLine(pen, center, tip);
             DrawArrow(dc, center, tip, arrowPen, item.Family == PhasorFamily.Voltage ? 9.5 : 8.0);
+            dc.Pop();
             vectors.Add(new RenderedVector(item, tip, brush,
                 CreateText(ToPhaseLabel(item.Name), 11.0, brush, LabelTypeface)));
         }
@@ -218,6 +220,7 @@ protected override void OnRender(DrawingContext dc)
         {
             var vector = vectors[i];
             var position = positions[i];
+            dc.PushOpacity(ChannelFreshnessDisplay.Opacity(vector.Item.Freshness));
             var route = PhasorCalloutRouting.Route(
                 new PhasorCalloutPoint(vector.Tip.X, vector.Tip.Y),
                 position, vector.Label.Width, vector.Label.Height, anchors[i].Right);
@@ -235,6 +238,7 @@ protected override void OnRender(DrawingContext dc)
                 new Point(route.Knee.X, route.Knee.Y),
                 new Point(route.LabelEdge.X, route.LabelEdge.Y));
             dc.DrawText(vector.Label, new Point(position.X, position.Y));
+            dc.Pop();
         }
         dc.Pop();
 

From cc619a5d502fc0ee6886bc1a4e0242a0188fb1d5 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:31:56 +0700
Subject: [PATCH 097/148] Bind waveform stream freshness and per-channel
 measurement readout opacity

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index 9d4bfbe2..8a6627e2 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -2099,6 +2099,7 @@
                                         <controls:WaveformPanelControl Grid.Row="2"
                                                                    d:Visibility="Collapsed"
                                            Snapshot="{Binding Waveform}"
+                                           IsStreamLive="{Binding SelectedStream.IsActive}"
                                            StreamKey="{Binding SelectedStream.StreamId}"
                                            ShowMode="{Binding WaveformShowMode}"
                                            LayoutMode="{Binding WaveformLayoutMode}"
@@ -2209,7 +2210,7 @@
                                                                Foreground="#91B3CF" FontSize="10.5"/>
                                                 </Grid>
 
-                                                <Border Style="{StaticResource MeterReadoutRowStyle}">
+                                                <Border Style="{StaticResource MeterReadoutRowStyle}" Opacity="{Binding AnalogValues.Ua.FreshnessOpacity}" ToolTip="{Binding AnalogValues.Ua.FreshnessText}">
                                                     <Grid>
                                                         <Grid.ColumnDefinitions>
     <ColumnDefinition Width="32"/>
@@ -2236,7 +2237,7 @@
                                                     </Grid>
                                                 </Border>
 
-                                                <Border Style="{StaticResource MeterReadoutRowStyle}">
+                                                <Border Style="{StaticResource MeterReadoutRowStyle}" Opacity="{Binding AnalogValues.Ub.FreshnessOpacity}" ToolTip="{Binding AnalogValues.Ub.FreshnessText}">
                                                     <Grid>
                                                         <Grid.ColumnDefinitions>
     <ColumnDefinition Width="32"/>
@@ -2263,7 +2264,7 @@
                                                     </Grid>
                                                 </Border>
 
-                                                <Border Style="{StaticResource MeterReadoutRowStyle}">
+                                                <Border Style="{StaticResource MeterReadoutRowStyle}" Opacity="{Binding AnalogValues.Uc.FreshnessOpacity}" ToolTip="{Binding AnalogValues.Uc.FreshnessText}">
                                                     <Grid>
                                                         <Grid.ColumnDefinitions>
     <ColumnDefinition Width="32"/>
@@ -2292,7 +2293,7 @@
                                                 <TextBlock Margin="5,10,0,4" Text="CURRENT"
                                                            FontSize="10.5" FontWeight="SemiBold" Foreground="#91B3CF"/>
 
-                                                <Border Style="{StaticResource MeterReadoutRowStyle}">
+                                                <Border Style="{StaticResource MeterReadoutRowStyle}" Opacity="{Binding AnalogValues.Ia.FreshnessOpacity}" ToolTip="{Binding AnalogValues.Ia.FreshnessText}">
                                                     <Grid>
                                                         <Grid.ColumnDefinitions>
     <ColumnDefinition Width="32"/>
@@ -2319,7 +2320,7 @@
                                                     </Grid>
                                                 </Border>
 
-                                                <Border Style="{StaticResource MeterReadoutRowStyle}">
+                                                <Border Style="{StaticResource MeterReadoutRowStyle}" Opacity="{Binding AnalogValues.Ib.FreshnessOpacity}" ToolTip="{Binding AnalogValues.Ib.FreshnessText}">
                                                     <Grid>
                                                         <Grid.ColumnDefinitions>
     <ColumnDefinition Width="32"/>
@@ -2346,7 +2347,7 @@
                                                     </Grid>
                                                 </Border>
 
-                                                <Border Style="{StaticResource MeterReadoutRowStyle}">
+                                                <Border Style="{StaticResource MeterReadoutRowStyle}" Opacity="{Binding AnalogValues.Ic.FreshnessOpacity}" ToolTip="{Binding AnalogValues.Ic.FreshnessText}">
                                                     <Grid>
                                                         <Grid.ColumnDefinitions>
     <ColumnDefinition Width="32"/>

From edb999e00ec441a3d0912c562d50bbcb762c67b3 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:32:26 +0700
Subject: [PATCH 098/148] Surface partial SV quality faults as amber LIVE-WARN
 instead of healthy green

---
 .../Analysis/RawProcessBusAnalyzer.cs                       | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
index a2757fae..1b01f52a 100644
--- a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
+++ b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
@@ -1018,7 +1018,8 @@ public SvStreamItem ToStreamItem()
         {
             var age = DateTime.UtcNow - LastSeenUtc;
             var isStale = age > TimeSpan.FromSeconds(2);
-            var hasWarning = HasIntegrityIssue || RecentJitterOver300MicrosecondsCount > 0;
+            var hasWarning = HasIntegrityIssue || RecentJitterOver300MicrosecondsCount > 0 ||
+                             _untrustedChannelMask != 0 || !_qualityAccepted;
             var severityRank = isStale ? 2 : hasWarning ? 1 : 0;
             var statusText = isStale ? "Stale" : hasWarning ? "Live with warning" : "Live";
             var displayStatus = isStale ? "STALE" : hasWarning ? "LIVE · WARN" : "LIVE";
@@ -1053,6 +1054,9 @@ private string BuildIssueSummary(bool isStale, TimeSpan age)
             if (isStale)
                 return $"No SV update for {age.TotalSeconds:0.0}s";
 
+            if (_untrustedChannelMask != 0 || !_qualityAccepted)
+                return QualityStatusText;
+
             if (HasIntegrityIssue)
                 return $"Sequence issue: jumps {SequenceErrors}, missing {MissingSamples}";
 

From 64fa1e71bddbaced24810b9292f9c0374e734fdd Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:33:52 +0700
Subject: [PATCH 099/148] Require full valid per-channel SV window before
 clearing held quality state

---
 .../Analysis/RawProcessBusAnalyzer.cs         | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
index 1b01f52a..d83b1cb1 100644
--- a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
+++ b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
@@ -876,6 +876,7 @@ private static readonly (string Channel, int ElementIndex)[] OmicronInstMagQuali
         // Eight bits for the eight verified instMag/q channels; no per-frame
         // dictionary/heap allocation. Only trusted q layouts can set a bit.
         private byte _untrustedChannelMask;
+        private readonly int[] _qualityGoodRuns = new int[8];
         private bool _previousMultiAsduFrame;
         private bool _knownFourI4VMapping;
         private bool _lastMappingDisplayAccepted = true;
@@ -1253,6 +1254,12 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
                 }
             }
             _untrustedChannelMask = untrustedMask;
+            if (acceptForDisplay && trustedLayout)
+            {
+                for (var index = 0; index < _qualityGoodRuns.Length; index++)
+                    _qualityGoodRuns[index] = (untrustedMask & (1 << index)) != 0
+                        ? 0 : Math.Min(_qualityGoodRuns[index] + 1, 65536);
+            }
             var allUntrusted = untrustedMask == 0xFF;
             QualityStatusText = quality switch
             {
@@ -1380,6 +1387,18 @@ private ChannelFreshness ResolveChannelFreshness(string channel, IReadOnlyList<S
             if (index >= 0 && (_untrustedChannelMask & (1 << index)) != 0)
                 return _lastAnalogValues is not null ? ChannelFreshness.Held : ChannelFreshness.Missing;
 
+            // A single valid frame after a bad-quality burst is not enough to
+            // label an older held waveform LIVE. Wait for a whole fresh scope
+            // acquisition to be received since that channel last went bad.
+            if (_knownFourI4VMapping && index >= 0)
+            {
+                var required = Math.Clamp(
+                    ResolveArsvinPointsPerCycle(ResolveSamplesPerCycle()) * _scopeCycles,
+                    32, 640);
+                if (_qualityGoodRuns[index] < required)
+                    return _lastAnalogValues is not null ? ChannelFreshness.Held : ChannelFreshness.Missing;
+            }
+
             // Each trace needs a complete coherent window. A compressed subset
             // would move points on the time axis and misrepresent physical phase.
             if (window.Count == 0 || window.Any(frame => !frame.GetValue(channel).HasValue))
@@ -1417,6 +1436,7 @@ private void ClearRenderBuffers()
         {
             foreach (var samples in _channelSamples.Values)
                 samples.Clear();
+            Array.Clear(_qualityGoodRuns);
 
             ClearScopeAcquisition(clearPublishedSnapshot: true);
 

From a86dd4da88e11581aa01a639e79764b0aaa439a4 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:35:13 +0700
Subject: [PATCH 100/148] Test single-channel invalid SV quality hold/recovery,
 healthy peers and valid zero

---
 .../ChannelFreshnessRegressionTests.cs        | 133 ++++++++++++++++++
 1 file changed, 133 insertions(+)
 create mode 100644 tests/ProcessBus.Tests/ChannelFreshnessRegressionTests.cs

diff --git a/tests/ProcessBus.Tests/ChannelFreshnessRegressionTests.cs b/tests/ProcessBus.Tests/ChannelFreshnessRegressionTests.cs
new file mode 100644
index 00000000..f22d3b30
--- /dev/null
+++ b/tests/ProcessBus.Tests/ChannelFreshnessRegressionTests.cs
@@ -0,0 +1,133 @@
+using System.Buffers.Binary;
+using ProcessBus.Core.Models;
+using ProcessBus.Core.Presentation;
+using ProcessBus.Iec61850.Raw.Analysis;
+using ProcessBus.Iec61850.Raw.Sv;
+using Xunit;
+
+namespace ProcessBus.Tests;
+
+/// <summary>
+/// Real decoder -> coherent snapshot quality/freshness regression for 4I4V SV.
+/// Does not invent missing phases from a valid zero-amplitude sample.
+/// </summary>
+public sealed class ChannelFreshnessRegressionTests
+{
+    private const int SamplesPerCycle = 80;
+
+    private static int[] Samples(int index)
+    {
+        var phase = 2 * Math.PI * index / SamplesPerCycle;
+        static int Sample(double angle, double peak) => (int)Math.Round(Math.Sin(angle) * peak);
+        return
+        [
+            Sample(phase, 600), Sample(phase - 2 * Math.PI / 3, 1500),
+            Sample(phase + 2 * Math.PI / 3, 1000), 0,
+            Sample(phase, 8160), Sample(phase - 2 * Math.PI / 3, 8160),
+            Sample(phase + 2 * Math.PI / 3, 4080), 0
+        ];
+    }
+
+    private static byte[] Frame(int index, int badChannel = -1)
+    {
+        var frame = GoldenFrames.SvFrameWithChannelSamples(
+            (ushort)index, Samples(index), "QUALITY_FRESHNESS_SV", 0x4000);
+        if (badChannel >= 0)
+        {
+            // The sample payload is the final 64 bytes of this synthetic frame,
+            // with eight instMag/q pairs. Corrupt only the requested q word.
+            BinaryPrimitives.WriteUInt32BigEndian(
+                frame.AsSpan(frame.Length - 64 + badChannel * 8 + 4, 4), 1u << 7);
+        }
+        return frame;
+    }
+
+    [Fact]
+    public void PerChannelQualityWordIsReadFromItsOwnInstMagPair()
+    {
+        var payload = new byte[64];
+        BinaryPrimitives.WriteUInt32BigEndian(payload.AsSpan(5 * 8 + 4, 4), 1u << 7);
+        Assert.Equal(FourI4VQuality.MeasurementState.Untrusted,
+            FourI4VQuality.AssessChannel(payload, 10)); // Ub
+        Assert.Equal(FourI4VQuality.MeasurementState.Good,
+            FourI4VQuality.AssessChannel(payload, 8)); // Ua
+        Assert.Equal(FourI4VQuality.MeasurementState.UnknownLayout,
+            FourI4VQuality.AssessChannel(payload, 11)); // misaligned q
+    }
+
+    [Fact]
+    public void OnlyBadIcIsHeldWhileOtherFiveChannelsStayLiveThenRecover()
+    {
+        var engine = new RawProcessBusAnalyzer();
+        for (var index = 0; index < 400; index++)
+            engine.ObserveFrame(Frame(index));
+
+        var first = engine.GetAnalyzerSnapshot();
+        var initialIc = first.Waveform.CurrentSeries.Single(x => x.Name == "Ic");
+        Assert.Equal(ChannelFreshness.Live, initialIc.Freshness);
+        Assert.True(initialIc.Samples.Count >= 80);
+
+        for (var index = 400; index < 440; index++)
+            engine.ObserveFrame(Frame(index, badChannel: 2)); // Ic, quality invalid
+
+        var partial = engine.GetAnalyzerSnapshot();
+        Assert.Equal(ChannelFreshness.Held, partial.Waveform.CurrentSeries.Single(x => x.Name == "Ic").Freshness);
+        Assert.Equal(ChannelFreshness.Held, partial.AnalogValues.Ic.Freshness);
+        Assert.Equal(initialIc.Samples.ToArray(),
+            partial.Waveform.CurrentSeries.Single(x => x.Name == "Ic").Samples.ToArray());
+        foreach (var channel in new[] { "Ia", "Ib" })
+            Assert.Equal(ChannelFreshness.Live,
+                partial.Waveform.CurrentSeries.Single(x => x.Name == channel).Freshness);
+        foreach (var channel in new[] { "Ua", "Ub", "Uc" })
+            Assert.Equal(ChannelFreshness.Live,
+                partial.Waveform.VoltageSeries.Single(x => x.Name == channel).Freshness);
+        Assert.True(partial.Streams.Single().IsActive);
+        Assert.Equal("LIVE · WARN", partial.Streams.Single().DisplayStatusText);
+        Assert.Contains("partial", partial.Diagnostics.ValidityText, StringComparison.OrdinalIgnoreCase);
+        Assert.False(SvPhysicalPowerMeter.TryCompute(partial.AnalogValues, out _));
+
+        // One fresh sample after a fault cannot turn the held phase bright.
+        engine.ObserveFrame(Frame(440));
+        Assert.Equal(ChannelFreshness.Held,
+            engine.GetAnalyzerSnapshot().Waveform.CurrentSeries.Single(x => x.Name == "Ic").Freshness);
+
+        for (var index = 441; index < 760; index++)
+            engine.ObserveFrame(Frame(index));
+        var recovered = engine.GetAnalyzerSnapshot();
+        Assert.Equal(ChannelFreshness.Live, recovered.Waveform.CurrentSeries.Single(x => x.Name == "Ic").Freshness);
+        Assert.Equal(ChannelFreshness.Live, recovered.AnalogValues.Ic.Freshness);
+        Assert.Equal("4I+4V quality good", recovered.Diagnostics.ValidityText);
+    }
+
+    [Fact]
+    public void ZeroCurrentIsStillLiveAndMustNeverBeCalledStale()
+    {
+        var engine = new RawProcessBusAnalyzer();
+        for (var index = 0; index < 360; index++)
+        {
+            var values = Samples(index);
+            values[2] = 0;
+            engine.ObserveFrame(GoldenFrames.SvFrameWithChannelSamples(
+                (ushort)index, values, "ZERO_CURRENT", 0x4000));
+        }
+        var snapshot = engine.GetAnalyzerSnapshot();
+        Assert.Equal(ChannelFreshness.Live,
+            snapshot.Waveform.CurrentSeries.Single(x => x.Name == "Ic").Freshness);
+        Assert.Equal(ChannelFreshness.Live, snapshot.AnalogValues.Ic.Freshness);
+        Assert.Equal(0, snapshot.AnalogValues.Ic.RmsValue);
+    }
+
+    [Fact]
+    public void PresentationOpacityDoesNotModifyEngineeringSamples()
+    {
+        Assert.Equal(1.0, ChannelFreshnessDisplay.Opacity(ChannelFreshness.Live));
+        Assert.Equal(0.38, ChannelFreshnessDisplay.Opacity(ChannelFreshness.Held));
+        Assert.Equal(0.22, ChannelFreshnessDisplay.Opacity(ChannelFreshness.Missing));
+        var signal = new WaveformSeriesModel
+        {
+            Name = "Ic", Unit = "A", Samples = [1.0, -1.0],
+            Freshness = ChannelFreshness.Held
+        };
+        Assert.Equal(new[] { 1.0, -1.0 }, signal.Samples);
+    }
+}

From 04d7bb04b33038ae17a94694ea552172c07a478c Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:38:28 +0700
Subject: [PATCH 101/148] Count first mapped SV frame in quality recovery
 window; restore exact 2/4/8-cycle replay

---
 .../Analysis/RawProcessBusAnalyzer.cs            | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
index d83b1cb1..8a625a9a 100644
--- a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
+++ b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
@@ -1254,12 +1254,6 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
                 }
             }
             _untrustedChannelMask = untrustedMask;
-            if (acceptForDisplay && trustedLayout)
-            {
-                for (var index = 0; index < _qualityGoodRuns.Length; index++)
-                    _qualityGoodRuns[index] = (untrustedMask & (1 << index)) != 0
-                        ? 0 : Math.Min(_qualityGoodRuns[index] + 1, 65536);
-            }
             var allUntrusted = untrustedMask == 0xFF;
             QualityStatusText = quality switch
             {
@@ -1299,6 +1293,16 @@ private void ObserveSamples(ReadOnlyMemory<byte> samplePayload, ushort? smpCnt,
                 _lastDecodedElementCount = elementCount;
             }
 
+            // Reset-on-mapping-change must happen BEFORE counting the first
+            // trustworthy ASDU. Otherwise exactly 2/4/8-cycle replay windows
+            // falsely appear incomplete by one sample (159/319/639).
+            if (acceptForDisplay && trustedLayout)
+            {
+                for (var index = 0; index < _qualityGoodRuns.Length; index++)
+                    _qualityGoodRuns[index] = (untrustedMask & (1 << index)) != 0
+                        ? 0 : Math.Min(_qualityGoodRuns[index] + 1, 65536);
+            }
+
             // This stack-local value record replaces a per-frame Dictionary + eight
             // dynamic entries. Stream ordering and strong identity remain unchanged.
             var values = new ScopeSampleValues();

From 3c93c6204e23d5e1746f82741b6a8d8c9a4cf32c Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 08:38:57 +0700
Subject: [PATCH 102/148] Use authoritative SCL instMag/q slot for per-channel
 freshness when channel order differs

---
 .../Analysis/RawProcessBusAnalyzer.cs         | 27 +++++++++++++++++--
 1 file changed, 25 insertions(+), 2 deletions(-)

diff --git a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
index 8a625a9a..c0c61d1c 100644
--- a/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
+++ b/src/ProcessBus.Iec61850.Raw/Analysis/RawProcessBusAnalyzer.cs
@@ -1384,10 +1384,33 @@ private bool IsChannelUntrusted(int elementIndex) =>
             (elementIndex & 1) == 0 &&
             (_untrustedChannelMask & (1 << (elementIndex / 2))) != 0;
 
+        private int ResolveQualitySlot(string channel)
+        {
+            // A verified SCL instMag/q mapping may legally arrange channels in
+            // a different order. Use its declared element index; fixed 4I4V
+            // order is only the no-SCL fallback. This runs at UI snapshot rate,
+            // never in the 4000 fps decoder hot path.
+            if (_lastDecodedMapping?.HasRenderableChannels == true)
+            {
+                foreach (var element in _lastDecodedMapping.Elements)
+                {
+                    if (string.Equals(element.ChannelName, channel, StringComparison.OrdinalIgnoreCase) &&
+                        element.ElementIndex >= 0 && element.ElementIndex <= 14 &&
+                        (element.ElementIndex & 1) == 0)
+                        return element.ElementIndex / 2;
+                }
+                return -1;
+            }
+
+            for (var index = 0; index < OmicronInstMagQualityMap.Length; index++)
+                if (string.Equals(OmicronInstMagQualityMap[index].Channel, channel, StringComparison.OrdinalIgnoreCase))
+                    return index;
+            return -1;
+        }
+
         private ChannelFreshness ResolveChannelFreshness(string channel, IReadOnlyList<ScopeSampleFrame> window)
         {
-            var index = Array.FindIndex(OmicronInstMagQualityMap,
-                item => string.Equals(item.Channel, channel, StringComparison.Ordinal));
+            var index = ResolveQualitySlot(channel);
             if (index >= 0 && (_untrustedChannelMask & (1 << index)) != 0)
                 return _lastAnalogValues is not null ? ChannelFreshness.Held : ChannelFreshness.Missing;
 

From 963107429adc0a22c24f1a689df10eaa958e3e46 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:09:57 +0700
Subject: [PATCH 103/148] Create shared compact workspace spacing tokens and
 unify primary panel inset

---
 src/ProcessBus.App.Wpf/Themes/Controls.xaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.App.Wpf/Themes/Controls.xaml b/src/ProcessBus.App.Wpf/Themes/Controls.xaml
index 4a04a8ee..87755c4a 100644
--- a/src/ProcessBus.App.Wpf/Themes/Controls.xaml
+++ b/src/ProcessBus.App.Wpf/Themes/Controls.xaml
@@ -1,6 +1,13 @@
 <ResourceDictionary xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
                     xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml">
 
+    <!-- Compact workspace geometry: shared by Analyzer, Diagnostics, GOOSE,
+         Timing/PTP and SCL. Outer column gutters 16 DIP; between stacked
+         primary panels 12 DIP; small control-level rhythm 4/8 DIP. -->
+    <Thickness x:Key="WorkspacePanelInset">12</Thickness>
+    <Thickness x:Key="WorkspaceHeroInset">16,12</Thickness>
+    <Thickness x:Key="WorkspacePanelGapBelow">0,0,0,12</Thickness>
+
     <!-- =========================================================
          VECTOR ICON SYSTEM v1 — Material/Fluent-like Path icons
          Use Path + Viewbox, not emoji/text font icons.
@@ -42,7 +49,7 @@
     </Style>
 
     <Style x:Key="DenseGroupBorderStyle" TargetType="Border" BasedOn="{StaticResource ShellCardStyle}">
-        <Setter Property="Padding" Value="8" />
+        <Setter Property="Padding" Value="{StaticResource WorkspacePanelInset}" />
     </Style>
 
     <Style x:Key="InnerSurfaceStyle" TargetType="Border">

From 7808983d68e12842c0d43ad6b13d7355509c6336 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:10:39 +0700
Subject: [PATCH 104/148] Unify workspace panel gutters and card spacing across
 Analyzer, Diagnostics, GOOSE, Timing and SCL

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index 8a6627e2..210e74b1 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -77,7 +77,7 @@
         </Style>
 
         <Style x:Key="PremiumWorkspaceHeroStyle" TargetType="Border">
-            <Setter Property="Padding" Value="16,12"/>
+            <Setter Property="Padding" Value="{StaticResource WorkspaceHeroInset}"/>
             <Setter Property="BorderBrush" Value="#28618F"/>
             <Setter Property="BorderThickness" Value="1"/>
             <Setter Property="CornerRadius" Value="12"/>
@@ -94,7 +94,7 @@
         </Style>
 
         <Style x:Key="PremiumWorkspacePanelStyle" TargetType="Border">
-            <Setter Property="Padding" Value="14"/>
+            <Setter Property="Padding" Value="{StaticResource WorkspacePanelInset}"/>
             <Setter Property="Background" Value="#0A1A2A"/>
             <Setter Property="BorderBrush" Value="#21496A"/>
             <Setter Property="BorderThickness" Value="1"/>
@@ -103,7 +103,7 @@
         </Style>
 
         <Style x:Key="PremiumInsightCardStyle" TargetType="Border">
-            <Setter Property="Padding" Value="14,12"/>
+            <Setter Property="Padding" Value="{StaticResource WorkspacePanelInset}"/>
             <Setter Property="Background" Value="#0D2033"/>
             <Setter Property="BorderBrush" Value="#255173"/>
             <Setter Property="BorderThickness" Value="1"/>
@@ -1321,7 +1321,7 @@
                                            VerticalAlignment="Center"/>
                             </Grid>
 
-                            <StackPanel Grid.Row="1" Margin="0,0,0,14">
+                            <StackPanel Grid.Row="1" Margin="{StaticResource WorkspacePanelGapBelow}">
                                 <TextBlock Text="Search"
                                            Foreground="#7FA8CC"
                                            FontSize="10.5"
@@ -1332,7 +1332,7 @@
                                          ToolTip="Filter publisher, GOOSE ID, APPID, MAC, or DataSet"/>
                             </StackPanel>
 
-                            <Grid Grid.Row="2" Margin="0,0,0,14">
+                            <Grid Grid.Row="2" Margin="{StaticResource WorkspacePanelGapBelow}">
                                 <Grid.RowDefinitions>
                                     <RowDefinition Height="Auto"/>
                                     <RowDefinition Height="10"/>
@@ -1540,7 +1540,7 @@
                                            Text="Source and capture confidence"/>
                             </StackPanel>
 
-                            <Border Grid.Row="1" Style="{StaticResource DenseMetricCardStyle}" Margin="0,0,0,8">
+                            <Border Grid.Row="1" Style="{StaticResource DenseMetricCardStyle}" Margin="{StaticResource WorkspacePanelGapBelow}">
                                 <StackPanel>
                                     <TextBlock Text="PTP Status" FontWeight="SemiBold" Foreground="{StaticResource TextPrimaryBrush}"/>
                                     <TextBlock Margin="0,8,0,0" Text="{Binding PtpStatusText}" Foreground="#EAF6FF" FontWeight="SemiBold" TextWrapping="Wrap"/>
@@ -1548,7 +1548,7 @@
                                 </StackPanel>
                             </Border>
 
-                            <Border Grid.Row="2" Style="{StaticResource DenseMetricCardStyle}" Margin="0,0,0,8">
+                            <Border Grid.Row="2" Style="{StaticResource DenseMetricCardStyle}" Margin="{StaticResource WorkspacePanelGapBelow}">
                                 <StackPanel>
                                     <TextBlock Text="Capture confidence" FontWeight="SemiBold" Foreground="{StaticResource TextPrimaryBrush}"/>
                                     <TextBlock Margin="0,8,0,0" Text="{Binding TimingConfidenceBadgeText}" Foreground="#F6D781"
@@ -3506,7 +3506,7 @@
                                             <TextBlock Text="Timing evidence" Style="{StaticResource PanelTitleTextStyle}" Margin="0,0,0,12"/>
                                             
 
-                                            <Border Background="#0E2539" BorderThickness="0" CornerRadius="8" Padding="12" Margin="0,0,0,8">
+                                            <Border Background="#0E2539" BorderThickness="0" CornerRadius="8" Padding="12" Margin="{StaticResource WorkspacePanelGapBelow}">
                                                 <StackPanel>
                                                     <TextBlock Text="Assessment" Foreground="#8FB8D8" FontSize="11" FontWeight="SemiBold"/>
                                                     <TextBlock Margin="0,7,0,0" Text="{Binding TimingConfidenceBadgeText}"

From af5f1941ac1ec07efb830f5a94c9bb050a9b27fa Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:11:20 +0700
Subject: [PATCH 105/148] Align GOOSE and SCL horizontal gutters with 16-DIP
 workspace standard

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index 210e74b1..d5fdd12c 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -1607,7 +1607,7 @@
                             </StackPanel>
 
                             <Border Grid.Row="1"
-                                    Margin="0,0,0,10"
+                                    Margin="{StaticResource WorkspacePanelGapBelow}"
                                     Style="{StaticResource CompactExplorerCardStyle}">
                                 <StackPanel>
                                     <TextBlock Text="Project summary"
@@ -2993,14 +2993,14 @@
                             <Grid Margin="0">
                                 <Grid.ColumnDefinitions>
                                     <ColumnDefinition Width="*"/>
-                                    <ColumnDefinition Width="14"/>
+                                    <ColumnDefinition Width="16"/>
                                     <ColumnDefinition Width="400"/>
                                 </Grid.ColumnDefinitions>
 
                                 <!-- Main event timeline: lean, readable, no debug ornaments. -->
                                 <Border Grid.Column="0"
                                         Style="{StaticResource DenseGroupBorderStyle}"
-                                        Padding="14">
+                                        Padding="{StaticResource WorkspacePanelInset}">
                                     <Grid>
                                         <Grid.RowDefinitions>
                                             <RowDefinition Height="Auto"/>
@@ -3185,7 +3185,7 @@
                                 <!-- Right inspector: clean grouped information, typed values emphasized. -->
                                 <Border Grid.Column="2"
                                         Style="{StaticResource DenseGroupBorderStyle}"
-                                        Padding="14">
+                                        Padding="{StaticResource WorkspacePanelInset}">
                                     <ScrollViewer VerticalScrollBarVisibility="Auto" HorizontalScrollBarVisibility="Disabled">
                                         <StackPanel>
                                             <TextBlock Text="GOOSE Inspector"
@@ -3979,7 +3979,7 @@
                                 <Grid Grid.Row="2">
                                     <Grid.ColumnDefinitions>
                                         <ColumnDefinition Width="1.18*"/>
-                                        <ColumnDefinition Width="14"/>
+                                        <ColumnDefinition Width="16"/>
                                         <ColumnDefinition Width="0.92*"/>
                                     </Grid.ColumnDefinitions>
 

From c08daecd164c100abbfe6c984dfff4f975ebb0de Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:12:56 +0700
Subject: [PATCH 106/148] Add enforceable five-workspace WPF spacing and panel
 inset regression contract

---
 scripts/verify-workspace-spacing.ps1 | 69 ++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 scripts/verify-workspace-spacing.ps1

diff --git a/scripts/verify-workspace-spacing.ps1 b/scripts/verify-workspace-spacing.ps1
new file mode 100644
index 00000000..ef0a9315
--- /dev/null
+++ b/scripts/verify-workspace-spacing.ps1
@@ -0,0 +1,69 @@
+# Fail the Windows release pipeline if primary WPF panel gutters regress.
+# Geometric source contract: 16 DIP between major columns, 12 DIP between
+# primary vertical panels. Inner label/control spacing remains 4/8 DIP.
+[CmdletBinding()]
+param(
+    [string]$Root = (Split-Path -Parent $PSScriptRoot)
+)
+
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+$windowPath = Join-Path $Root 'src/ProcessBus.App.Wpf/MainWindow.xaml'
+$themePath = Join-Path $Root 'src/ProcessBus.App.Wpf/Themes/Controls.xaml'
+[xml]$window = Get-Content -LiteralPath $windowPath -Raw
+[xml]$theme = Get-Content -LiteralPath $themePath -Raw
+$ns = [System.Xml.XmlNamespaceManager]::new($window.NameTable)
+$ns.AddNamespace('w', 'http://schemas.microsoft.com/winfx/2006/xaml/presentation')
+$ns.AddNamespace('x', 'http://schemas.microsoft.com/winfx/2006/xaml')
+
+function Assert-True([bool]$Ok, [string]$Description) {
+    if (-not $Ok) { throw "WPF spacing regression: $Description" }
+}
+
+function Has-Definitions([string]$DefinitionName, [string]$ChildName, [string]$Attribute, [string]$Expected) {
+    $selector = "//w:Grid/w:$DefinitionName"
+    $collections = $window.SelectNodes($selector, $ns)
+    foreach ($collection in $collections) {
+        $parts = @()
+        foreach ($child in $collection.ChildNodes) {
+            if ($child.LocalName -ne $ChildName) { continue }
+            $parts += $child.GetAttribute($Attribute)
+        }
+        if (($parts -join ',') -ceq $Expected) { return $true }
+    }
+    return $false
+}
+
+# Main three-column shell is the operator's visual alignment reference.
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '280,16,*,16,320') 'shell columns must have 16 DIP gutters'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,16,320') 'Analyzer waveform/inspector gutter'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' '0.82*,12,1.18*') 'Analyzer phasor/measurement gap'
+
+# All five customer-facing workspaces share the same horizontal or vertical rhythm.
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,12,Auto,12,Auto,Auto,*') 'Diagnostics primary vertical gutters'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,16,400') 'GOOSE timeline/inspector gutter'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,12,Auto,12,*') 'Timing/PTP major sections'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.15*,16,1.1*,16,1.2*') 'Timing/PTP header-card gutters'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.1*,16,1.4*') 'Timing/PTP evidence gutter'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,12,*') 'SCL hero/body vertical gutter'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.18*,16,0.92*') 'SCL catalog/inspector gutter'
+
+# Standardize padding via named tokens, not brittle per-tab copies.
+foreach ($rule in @(
+    @{ Name = 'WorkspacePanelInset'; Value = '12' },
+    @{ Name = 'WorkspaceHeroInset'; Value = '16,12' },
+    @{ Name = 'WorkspacePanelGapBelow'; Value = '0,0,0,12' }
+)) {
+    $nodes = $theme.SelectNodes("//w:Thickness[@x:Key='$($rule.Name)']", $ns)
+    Assert-True ($nodes.Count -eq 1) "one shared token: $($rule.Name)"
+    Assert-True ($nodes[0].InnerText.Trim() -eq $rule.Value) "$($rule.Name) must be $($rule.Value)"
+}
+
+$styles = $theme.SelectNodes("//w:Style[@x:Key='DenseGroupBorderStyle']/w:Setter[@Property='Padding']", $ns)
+Assert-True ($styles.Count -eq 1 -and $styles[0].GetAttribute('Value') -eq '{StaticResource WorkspacePanelInset}') 'shared primary panel padding'
+$source = Get-Content -LiteralPath $windowPath -Raw
+foreach ($name in @('WorkspacePanelInset', 'WorkspacePanelGapBelow', 'WorkspaceHeroInset')) {
+    Assert-True ($source.Contains("{StaticResource $name}")) "workspace must use spacing token $name"
+}
+Write-Host 'WPF workspace spacing contract: PASS (16 DIP columns / 12 DIP panel gaps, named insets)'

From be29f63bbb38043df1e762179784ad56c51261cf Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:13:30 +0700
Subject: [PATCH 107/148] Require standardized WPF layout geometry before CI,
 Inno candidate and stable packaging

---
 .github/workflows/ci.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 083995d5..3cd98395 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -37,6 +37,10 @@ jobs:
         shell: pwsh
         run: .\scripts\repository-health.ps1
 
+      - name: Workspace spacing geometry gate
+        shell: pwsh
+        run: .\scripts\verify-workspace-spacing.ps1
+
       - name: Restore
         run: dotnet restore .\ProcessBusSuite.sln
 

From 92523608fa80db2d1168d7fdc20825050396a265 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:13:33 +0700
Subject: [PATCH 108/148] Require standardized WPF layout geometry before CI,
 Inno candidate and stable packaging

---
 .github/workflows/release-package.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index 384cab7e..28635ee2 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -95,6 +95,10 @@ jobs:
         shell: pwsh
         run: .\scripts\repository-health.ps1 -ExpectedVersion '${{ steps.version.outputs.value }}'
 
+      - name: Workspace spacing geometry gate
+        shell: pwsh
+        run: .\scripts\verify-workspace-spacing.ps1
+
       - name: Restore
         run: dotnet restore .\ProcessBusSuite.sln
 

From 0083498e0efeb8fe41fec5a01fbc29ed125312af Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:13:36 +0700
Subject: [PATCH 109/148] Require standardized WPF layout geometry before CI,
 Inno candidate and stable packaging

---
 .github/workflows/candidate-package.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/candidate-package.yml b/.github/workflows/candidate-package.yml
index 2d67c2d3..4a391dde 100644
--- a/.github/workflows/candidate-package.yml
+++ b/.github/workflows/candidate-package.yml
@@ -25,6 +25,7 @@ on:
       - "installer/**"
       - "scripts/verify-release-package.ps1"
       - "scripts/repository-health.ps1"
+      - "scripts/verify-workspace-spacing.ps1"
       - "docs/RELEASE_NOTES_v*.md"
       - ".github/workflows/candidate-package.yml"
       - ".github/workflows/release-package.yml"
@@ -102,6 +103,10 @@ jobs:
         shell: pwsh
         run: .\scripts\repository-health.ps1 -ExpectedVersion '${{ steps.version.outputs.value }}'
 
+      - name: Workspace spacing geometry gate
+        shell: pwsh
+        run: .\scripts\verify-workspace-spacing.ps1
+
       - name: Restore
         run: dotnet restore .\ProcessBusSuite.sln
 

From de94ba8f9c4071433b0ee7fe30b435a623ed028a Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:53:36 +0700
Subject: [PATCH 110/148] Fix real WPF Grid gutters: 8 DIP horizontal/vertical,
 align explorer footer edge

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 31 +++++++++++++-------------
 1 file changed, 15 insertions(+), 16 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index d5fdd12c..cefd20da 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -874,10 +874,10 @@
                 <Grid.ColumnDefinitions>
                     <!-- Locked workspace layout: left explorer / main canvas / right inspector -->
                     <ColumnDefinition Width="280"/>
-                    <ColumnDefinition Width="16"/>
+                    <ColumnDefinition Width="8"/>
                     <!-- GAP -->
                     <ColumnDefinition Width="*"/>
-                    <ColumnDefinition Width="16"/>
+                    <ColumnDefinition Width="8"/>
                     <!-- GAP -->
                     <ColumnDefinition Width="320"/>
                 </Grid.ColumnDefinitions>
@@ -889,7 +889,6 @@
 
                 <Border Grid.Column="0"
         Grid.Row="0"
-        Grid.RowSpan="2"
         Style="{StaticResource DenseGroupBorderStyle}"
         Background="{StaticResource PanelDeepBrush}">
 
@@ -1943,7 +1942,7 @@
                             <Grid Margin="0">
                                 <Grid.ColumnDefinitions>
                                     <ColumnDefinition Width="*"/>
-                                    <ColumnDefinition Width="16"/>
+                                    <ColumnDefinition Width="8"/>
                                     <ColumnDefinition Width="320"/>
                                 </Grid.ColumnDefinitions>
                                 <Grid.RowDefinitions>
@@ -2118,7 +2117,7 @@
           Opacity="0.94">
                                     <Grid.RowDefinitions>
                                         <RowDefinition Height="0.82*"/>
-                                        <RowDefinition Height="12"/>
+                                        <RowDefinition Height="8"/>
                                         <RowDefinition Height="1.18*"/>
                                     </Grid.RowDefinitions>
 
@@ -2435,9 +2434,9 @@
                             <Grid Margin="0">
                                 <Grid.RowDefinitions>
                                     <RowDefinition Height="Auto"/>
-                                    <RowDefinition Height="12"/>
+                                    <RowDefinition Height="8"/>
                                     <RowDefinition Height="Auto"/>
-                                    <RowDefinition Height="12"/>
+                                    <RowDefinition Height="8"/>
                                     <RowDefinition Height="Auto"/>
                                     <RowDefinition Height="Auto"/>
                                     <RowDefinition Height="*"/>
@@ -2993,7 +2992,7 @@
                             <Grid Margin="0">
                                 <Grid.ColumnDefinitions>
                                     <ColumnDefinition Width="*"/>
-                                    <ColumnDefinition Width="16"/>
+                                    <ColumnDefinition Width="8"/>
                                     <ColumnDefinition Width="400"/>
                                 </Grid.ColumnDefinitions>
 
@@ -3449,9 +3448,9 @@
                             <Grid Margin="0">
                                 <Grid.RowDefinitions>
                                     <RowDefinition Height="Auto"/>
-                                    <RowDefinition Height="12"/>
+                                    <RowDefinition Height="8"/>
                                     <RowDefinition Height="Auto"/>
-                                    <RowDefinition Height="12"/>
+                                    <RowDefinition Height="8"/>
                                     <RowDefinition Height="*"/>
                                 </Grid.RowDefinitions>
 
@@ -3459,9 +3458,9 @@
                                     <Grid>
                                         <Grid.ColumnDefinitions>
                                             <ColumnDefinition Width="1.15*"/>
-                                            <ColumnDefinition Width="16"/>
+                                            <ColumnDefinition Width="8"/>
                                             <ColumnDefinition Width="1.1*"/>
-                                            <ColumnDefinition Width="16"/>
+                                            <ColumnDefinition Width="8"/>
                                             <ColumnDefinition Width="1.2*"/>
                                         </Grid.ColumnDefinitions>
 
@@ -3497,7 +3496,7 @@
                                 <Grid Grid.Row="2">
                                     <Grid.ColumnDefinitions>
                                         <ColumnDefinition Width="1.1*"/>
-                                        <ColumnDefinition Width="16"/>
+                                        <ColumnDefinition Width="8"/>
                                         <ColumnDefinition Width="1.4*"/>
                                     </Grid.ColumnDefinitions>
 
@@ -3947,7 +3946,7 @@
                             <Grid Margin="0">
                                 <Grid.RowDefinitions>
                                     <RowDefinition Height="Auto"/>
-                                    <RowDefinition Height="12"/>
+                                    <RowDefinition Height="8"/>
                                     <RowDefinition Height="*"/>
                                 </Grid.RowDefinitions>
 
@@ -3979,7 +3978,7 @@
                                 <Grid Grid.Row="2">
                                     <Grid.ColumnDefinitions>
                                         <ColumnDefinition Width="1.18*"/>
-                                        <ColumnDefinition Width="16"/>
+                                        <ColumnDefinition Width="8"/>
                                         <ColumnDefinition Width="0.92*"/>
                                     </Grid.ColumnDefinitions>
 
@@ -4354,7 +4353,7 @@
                             <Grid Margin="0">
                                 <Grid.ColumnDefinitions>
                                     <ColumnDefinition Width="*"/>
-                                    <ColumnDefinition Width="16"/>
+                                    <ColumnDefinition Width="8"/>
                                     <ColumnDefinition Width="320"/>
                                 </Grid.ColumnDefinitions>
 

From b44b07ee09078d67ecdceee8f0d25e489aedee3f Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:54:18 +0700
Subject: [PATCH 111/148] Apply uniform compact 8-DIP outer panel spacing
 across all five workspaces

---
 src/ProcessBus.App.Wpf/Themes/Controls.xaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Themes/Controls.xaml b/src/ProcessBus.App.Wpf/Themes/Controls.xaml
index 87755c4a..638e7615 100644
--- a/src/ProcessBus.App.Wpf/Themes/Controls.xaml
+++ b/src/ProcessBus.App.Wpf/Themes/Controls.xaml
@@ -3,10 +3,10 @@
 
     <!-- Compact workspace geometry: shared by Analyzer, Diagnostics, GOOSE,
          Timing/PTP and SCL. Outer column gutters 16 DIP; between stacked
-         primary panels 12 DIP; small control-level rhythm 4/8 DIP. -->
+         primary panels 8 DIP; small control-level rhythm 4/8 DIP. -->
     <Thickness x:Key="WorkspacePanelInset">12</Thickness>
     <Thickness x:Key="WorkspaceHeroInset">16,12</Thickness>
-    <Thickness x:Key="WorkspacePanelGapBelow">0,0,0,12</Thickness>
+    <Thickness x:Key="WorkspacePanelGapBelow">0,0,0,8</Thickness>
 
     <!-- =========================================================
          VECTOR ICON SYSTEM v1 — Material/Fluent-like Path icons

From eaf342d553c3a7dab9f79153026138fc668a398e Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:54:22 +0700
Subject: [PATCH 112/148] Apply uniform compact 8-DIP outer panel spacing
 across all five workspaces

---
 scripts/verify-workspace-spacing.ps1 | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/scripts/verify-workspace-spacing.ps1 b/scripts/verify-workspace-spacing.ps1
index ef0a9315..d4700d8e 100644
--- a/scripts/verify-workspace-spacing.ps1
+++ b/scripts/verify-workspace-spacing.ps1
@@ -1,5 +1,5 @@
 # Fail the Windows release pipeline if primary WPF panel gutters regress.
-# Geometric source contract: 16 DIP between major columns, 12 DIP between
+# Geometric source contract: 8 DIP between major columns, 8 DIP between
 # primary vertical panels. Inner label/control spacing remains 4/8 DIP.
 [CmdletBinding()]
 param(
@@ -36,24 +36,24 @@ function Has-Definitions([string]$DefinitionName, [string]$ChildName, [string]$A
 }
 
 # Main three-column shell is the operator's visual alignment reference.
-Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '280,16,*,16,320') 'shell columns must have 16 DIP gutters'
-Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,16,320') 'Analyzer waveform/inspector gutter'
-Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' '0.82*,12,1.18*') 'Analyzer phasor/measurement gap'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '280,8,*,8,320') 'shell columns must have 8 DIP gutters'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,8,320') 'Analyzer waveform/inspector gutter'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' '0.82*,8,1.18*') 'Analyzer phasor/measurement gap'
 
 # All five customer-facing workspaces share the same horizontal or vertical rhythm.
-Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,12,Auto,12,Auto,Auto,*') 'Diagnostics primary vertical gutters'
-Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,16,400') 'GOOSE timeline/inspector gutter'
-Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,12,Auto,12,*') 'Timing/PTP major sections'
-Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.15*,16,1.1*,16,1.2*') 'Timing/PTP header-card gutters'
-Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.1*,16,1.4*') 'Timing/PTP evidence gutter'
-Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,12,*') 'SCL hero/body vertical gutter'
-Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.18*,16,0.92*') 'SCL catalog/inspector gutter'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,8,Auto,8,Auto,Auto,*') 'Diagnostics primary vertical gutters'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,8,400') 'GOOSE timeline/inspector gutter'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,8,Auto,8,*') 'Timing/PTP major sections'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.15*,8,1.1*,8,1.2*') 'Timing/PTP header-card gutters'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.1*,8,1.4*') 'Timing/PTP evidence gutter'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' 'Auto,8,*') 'SCL hero/body vertical gutter'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '1.18*,8,0.92*') 'SCL catalog/inspector gutter'
 
 # Standardize padding via named tokens, not brittle per-tab copies.
 foreach ($rule in @(
     @{ Name = 'WorkspacePanelInset'; Value = '12' },
     @{ Name = 'WorkspaceHeroInset'; Value = '16,12' },
-    @{ Name = 'WorkspacePanelGapBelow'; Value = '0,0,0,12' }
+    @{ Name = 'WorkspacePanelGapBelow'; Value = '0,0,0,8' }
 )) {
     $nodes = $theme.SelectNodes("//w:Thickness[@x:Key='$($rule.Name)']", $ns)
     Assert-True ($nodes.Count -eq 1) "one shared token: $($rule.Name)"
@@ -66,4 +66,4 @@ $source = Get-Content -LiteralPath $windowPath -Raw
 foreach ($name in @('WorkspacePanelInset', 'WorkspacePanelGapBelow', 'WorkspaceHeroInset')) {
     Assert-True ($source.Contains("{StaticResource $name}")) "workspace must use spacing token $name"
 }
-Write-Host 'WPF workspace spacing contract: PASS (16 DIP columns / 12 DIP panel gaps, named insets)'
+Write-Host 'WPF workspace spacing contract: PASS (8 DIP columns / 8 DIP panel gaps, named insets)'

From 716bfe7471c6b7d2d6f00fb127fb445c4169861b Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:55:14 +0700
Subject: [PATCH 113/148] Normalize nine diagnostic evidence-card sibling
 gutters to the shared 8-DIP panel rhythm

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index cefd20da..549860ce 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -2514,7 +2514,7 @@
                                     </UniformGrid.Style>
 
                                     <Border Background="#0F2538" BorderBrush="#294864" BorderThickness="1"
-                                            CornerRadius="9" Padding="12,10" Margin="0,0,12,0"
+                                            CornerRadius="9" Padding="12,10" Margin="0,0,8,0"
                                             ToolTip="{Binding Diagnostics.JitterStatusText}">
                                         <StackPanel>
                                             <TextBlock Text="ARRIVAL JITTER" Foreground="#9BC7E4" FontSize="10.5"
@@ -2532,7 +2532,7 @@
                                     </Border>
 
                                     <Border Background="#0F2538" BorderBrush="#294864" BorderThickness="1"
-                                            CornerRadius="9" Padding="12,10" Margin="0,0,12,0"
+                                            CornerRadius="9" Padding="12,10" Margin="0,0,8,0"
                                             ToolTip="Discontinuous smpCnt transitions for the selected SV stream. Not the number of missing samples.">
                                         <StackPanel>
                                             <TextBlock Text="SMP COUNT JUMPS" Foreground="#9BC7E4" FontSize="10.5"
@@ -2549,7 +2549,7 @@
                                     </Border>
 
                                     <Border Background="#0F2538" BorderBrush="#294864" BorderThickness="1"
-                                            CornerRadius="9" Padding="12,10" Margin="0,0,12,0"
+                                            CornerRadius="9" Padding="12,10" Margin="0,0,8,0"
                                             ToolTip="Missing sample count comes from selected SV smpCnt continuity; decoder rejects are capture-wide.">
                                         <StackPanel>
                                             <TextBlock Text="MISSING SAMPLES" Foreground="#9BC7E4" FontSize="10.5"
@@ -2628,7 +2628,7 @@
                                     </UniformGrid.Style>
                                     <Border Background="#0F2538" BorderBrush="#294864"
                                             BorderThickness="1" CornerRadius="9" Padding="12,10"
-                                            Margin="0,0,12,0"
+                                            Margin="0,0,8,0"
                                             ToolTip="{Binding PtpTransportText}">
                                         <StackPanel>
                                             <TextBlock Text="SOURCE" Foreground="#91B3CF"
@@ -2644,7 +2644,7 @@
                                     </Border>
                                     <Border Background="#0F2538" BorderBrush="#294864"
                                             BorderThickness="1" CornerRadius="9" Padding="12,10"
-                                            Margin="0,0,12,0"
+                                            Margin="0,0,8,0"
                                             ToolTip="{Binding PtpProfileText}">
                                         <StackPanel>
                                             <TextBlock Text="TWO-STEP" Foreground="#91B3CF"
@@ -2660,7 +2660,7 @@
                                     </Border>
                                     <Border Background="#0F2538" BorderBrush="#294864"
                                             BorderThickness="1" CornerRadius="9" Padding="12,10"
-                                            Margin="0,0,12,0"
+                                            Margin="0,0,8,0"
                                             ToolTip="{Binding PtpRateText}">
                                         <StackPanel>
                                             <TextBlock Text="MESSAGE FLOW" Foreground="#91B3CF"
@@ -2706,7 +2706,7 @@
                                     </UniformGrid.Style>
                                     <Border Background="#0F2538" BorderBrush="#294864"
                                             BorderThickness="1" CornerRadius="9" Padding="12,10"
-                                            Margin="0,0,12,0"
+                                            Margin="0,0,8,0"
                                             ToolTip="{Binding SelectedDiagnosticTarget.IssueSummaryText}">
                                         <StackPanel>
                                             <TextBlock Text="PUBLISHER" Foreground="#91B3CF"
@@ -2722,7 +2722,7 @@
                                     </Border>
                                     <Border Background="#0F2538" BorderBrush="#294864"
                                             BorderThickness="1" CornerRadius="9" Padding="12,10"
-                                            Margin="0,0,12,0"
+                                            Margin="0,0,8,0"
                                             ToolTip="{Binding SelectedDiagnosticTarget.IssueSummaryText}">
                                         <StackPanel>
                                             <TextBlock Text="HEALTH" Foreground="#91B3CF"
@@ -2738,7 +2738,7 @@
                                     </Border>
                                     <Border Background="#0F2538" BorderBrush="#294864"
                                             BorderThickness="1" CornerRadius="9" Padding="12,10"
-                                            Margin="0,0,12,0"
+                                            Margin="0,0,8,0"
                                             ToolTip="{Binding SelectedDiagnosticTarget.IssueSummaryText}">
                                         <StackPanel>
                                             <TextBlock Text="STATE NUMBER" Foreground="#91B3CF"

From c57e4f25c06752612e53b861869f17390bfcc405 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 13:56:15 +0700
Subject: [PATCH 114/148] Enforce actual root Grid panel-bottom alignment and
 consistent diagnostic subpanel spacing

---
 scripts/verify-workspace-spacing.ps1 | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/scripts/verify-workspace-spacing.ps1 b/scripts/verify-workspace-spacing.ps1
index d4700d8e..a5988d1e 100644
--- a/scripts/verify-workspace-spacing.ps1
+++ b/scripts/verify-workspace-spacing.ps1
@@ -36,8 +36,22 @@ function Has-Definitions([string]$DefinitionName, [string]$ChildName, [string]$A
 }
 
 # Main three-column shell is the operator's visual alignment reference.
+# Before this fix, the left explorer spanned BOTH the workspace row and its
+# footer-gap row; that made its bottom edge 8 DIP lower than the main panel.
+$shells = @($window.SelectNodes("//w:Grid[w:Grid.ColumnDefinitions/w:ColumnDefinition[@Width='280']]", $ns))
+Assert-True ($shells.Count -eq 1) 'exactly one three-column workspace shell'
+$shell = $shells[0]
+$leftExplorer = $shell.SelectSingleNode("w:Border[@Grid.Column='0' and @Grid.Row='0']", $ns)
+Assert-True ($null -ne $leftExplorer) 'left explorer exists in the workspace row'
+Assert-True ($leftExplorer.GetAttribute('Grid.RowSpan') -in @('', '1')) 'left explorer cannot overlap footer-gap row'
+$mainCanvas = $shell.SelectSingleNode("w:Grid[@Grid.Column='2' and @Grid.Row='0']", $ns)
+Assert-True ($null -ne $mainCanvas) 'main workspace canvas shares left explorer row'
+$footer = $shell.SelectSingleNode("w:Border[@Grid.Row='2']", $ns)
+Assert-True ($null -ne $footer) 'workspace footer is separated from the panel row'
+Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' '*,8,28') 'uniform 8-DIP footer gutter'
 Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '280,8,*,8,320') 'shell columns must have 8 DIP gutters'
 Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,8,320') 'Analyzer waveform/inspector gutter'
+Assert-True (Has-Definitions 'Grid.ColumnDefinitions' 'ColumnDefinition' 'Width' '*,8,320') 'overlay aligns with outer explorer gutter'
 Assert-True (Has-Definitions 'Grid.RowDefinitions' 'RowDefinition' 'Height' '0.82*,8,1.18*') 'Analyzer phasor/measurement gap'
 
 # All five customer-facing workspaces share the same horizontal or vertical rhythm.
@@ -63,6 +77,12 @@ foreach ($rule in @(
 $styles = $theme.SelectNodes("//w:Style[@x:Key='DenseGroupBorderStyle']/w:Setter[@Property='Padding']", $ns)
 Assert-True ($styles.Count -eq 1 -and $styles[0].GetAttribute('Value') -eq '{StaticResource WorkspacePanelInset}') 'shared primary panel padding'
 $source = Get-Content -LiteralPath $windowPath -Raw
+$diagnosticsStart = $source.IndexOf('<!-- Immediate SV engineering evidence')
+$diagnosticsEnd = $source.IndexOf('<!-- Event Log:', $diagnosticsStart)
+Assert-True ($diagnosticsStart -ge 0 -and $diagnosticsEnd -gt $diagnosticsStart) 'Diagnostics evidence bounds'
+$diagnostics = $source.Substring($diagnosticsStart, $diagnosticsEnd - $diagnosticsStart)
+$legacyCardGapCount = ([regex]::Matches($diagnostics, '(?s)<Border\b[^>]*\bMargin="0,0,12,0"')).Count
+Assert-True ($legacyCardGapCount -eq 0) 'no legacy 12-DIP gaps between adjacent diagnostic cards'
 foreach ($name in @('WorkspacePanelInset', 'WorkspacePanelGapBelow', 'WorkspaceHeroInset')) {
     Assert-True ($source.Contains("{StaticResource $name}")) "workspace must use spacing token $name"
 }

From de78c500847bbe871a6fa0472547cda35bc9452c Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 14:54:39 +0700
Subject: [PATCH 115/148] Stamp installer payload with exact commit, run and
 EXE hash to identify running build

---
 scripts/publish-windows-portable.ps1 | 206 +++++++++++++++++++++++++++
 1 file changed, 206 insertions(+)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index 521b4e02..c3dbb8e5 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -14,6 +14,212 @@ $repoRoot = Resolve-Path (Join-Path $PSScriptRoot "..")
 Set-Location $repoRoot
 if ([string]::IsNullOrWhiteSpace($Version)) { throw "Version cannot be empty." }
 
+# Source identity must be unique even when successive test installers use 1.4.1.
+$sourceCommit = (& git rev-parse HEAD).Trim()
+if ($LASTEXITCODE -ne 0 -or $sourceCommit -cnotmatch '^[a-f0-9]{40}
+
+$requiredReleaseDocs = @(
+    "docs/QUICK_START.md", "docs/USER_MANUAL.md", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
+    "COMMERCIAL-LICENSE.md", "COPYRIGHT.md", "TRADEMARK.md",
+    "THIRD_PARTY_NOTICES.md", "docs/LICENSING.md"
+)
+foreach ($doc in $requiredReleaseDocs) {
+    if (-not (Test-Path (Join-Path $repoRoot $doc))) { throw "Required release document is missing: $doc" }
+}
+
+$licenseText = Get-Content (Join-Path $repoRoot "LICENSE") -Raw
+if ($licenseText -notmatch 'GNU GENERAL PUBLIC LICENSE' -or $licenseText -notmatch 'Version 3, 29 June 2007') {
+    throw "Current root LICENSE is not GNU GPL version 3."
+}
+if (Test-Path (Join-Path $repoRoot "LICENSE-APACHE-2.0")) {
+    throw "Historical Apache license must not be staged as a current release license."
+}
+
+# Release PDFs are rendered fresh from the canonical Markdown source and
+# cryptographically tied to the two Markdown files in the same installer.
+# Old tracked PDFs must never silently enter a new public package.
+$manualDir = Join-Path $repoRoot "$OutputRoot/generated-docs"
+$manualManifestPath = Join-Path $manualDir "manual-manifest.json"
+if (-not (Test-Path -LiteralPath $manualManifestPath)) {
+    throw "Current offline PDF manual manifest missing. Run python scripts/render-offline-manuals.py first."
+}
+$manualManifest = Get-Content -LiteralPath $manualManifestPath -Raw | ConvertFrom-Json
+if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") { throw 'Unsupported manual manifest format.' }
+foreach ($entry in $manualManifest.files) {
+    if ($entry.source -notin @("QUICK_START.md", "USER_MANUAL.md")) {
+        throw "Unexpected manual source: $($entry.source)"
+    }
+    $src = Join-Path $repoRoot ("docs/" + $entry.source)
+    $pdf = Join-Path $manualDir $entry.pdf
+    if (-not (Test-Path -LiteralPath $pdf)) { throw "Missing generated PDF $pdf" }
+    $sourceHash = (Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash
+    $pdfHash = (Get-FileHash -LiteralPath $pdf -Algorithm SHA256).Hash
+    if ($sourceHash -ne $entry.sourceSha256 -or $pdfHash -ne $entry.pdfSha256) {
+        throw "Offline PDF not synchronized with $($entry.source); regenerate manuals."
+    }
+}
+if (@($manualManifest.files).Count -ne 2) { throw "Exactly two offline PDF manuals are required." }
+
+$portableName = "$AppName-v$Version-$Runtime-portable"
+$publishDir = Join-Path $repoRoot "$OutputRoot/publish/$portableName/publish"
+$stageDir = Join-Path $repoRoot "$OutputRoot/package/$portableName"
+$releaseDir = Join-Path $repoRoot "$OutputRoot/release"
+$zipPath = Join-Path $releaseDir "$portableName.zip"
+$shaPath = Join-Path $releaseDir "SHA256SUMS.txt"
+$selfContained = -not $FrameworkDependent.IsPresent
+$singleFile = -not $MultiFile.IsPresent
+
+Write-Host "Publishing $AppName $Version for $Runtime"
+Write-Host "Community license: GPL-3.0-or-later"
+Remove-Item -LiteralPath $publishDir -Recurse -Force -ErrorAction SilentlyContinue
+Remove-Item -LiteralPath $stageDir -Recurse -Force -ErrorAction SilentlyContinue
+New-Item -ItemType Directory -Path $publishDir, $stageDir, $releaseDir | Out-Null
+
+$resolvedProjectPath = (Resolve-Path $ProjectPath).Path
+dotnet restore $resolvedProjectPath -r $Runtime /p:ContinuousIntegrationBuild=true
+if ($LASTEXITCODE -ne 0) { throw "Runtime-specific restore failed." }
+
+$versionParts = $Version.Split('-', 2)
+$versionPrefix = $versionParts[0]
+$versionSuffix = if ($versionParts.Length -gt 1) { $versionParts[1] } else { '' }
+$publishArgs = @(
+    "publish", $resolvedProjectPath, "--no-restore", "-c", $Configuration,
+    "-r", $Runtime, "-o", $publishDir,
+    "/p:Version=$Version", "/p:VersionPrefix=$versionPrefix", "/p:VersionSuffix=$versionSuffix",
+    "/p:PackageVersion=$Version", "/p:AssemblyVersion=$versionPrefix.0",
+    "/p:FileVersion=$versionPrefix.0", "/p:InformationalVersion=$Version",
+    "/p:PublishSingleFile=$($singleFile.ToString().ToLowerInvariant())",
+    "/p:IncludeNativeLibrariesForSelfExtract=true", "/p:EnableCompressionInSingleFile=true",
+    "/p:PublishTrimmed=false", "/p:DebugType=None", "/p:DebugSymbols=false",
+    "/p:ErrorOnDuplicatePublishOutputFiles=true", "--self-contained", $selfContained.ToString().ToLowerInvariant()
+)
+dotnet @publishArgs
+if ($LASTEXITCODE -ne 0) { throw "Publish failed." }
+
+$publishedExe = Join-Path $publishDir "$AppName.exe"
+if (-not (Test-Path $publishedExe)) {
+    $fallbackExe = Get-ChildItem -Path $publishDir -Filter "*.exe" -File | Select-Object -First 1
+    if ($fallbackExe) { $publishedExe = $fallbackExe.FullName }
+}
+if ($singleFile) {
+    if (-not (Test-Path $publishedExe)) { throw "Single-file publish did not produce an executable in: $publishDir" }
+    Copy-Item $publishedExe (Join-Path $stageDir "$AppName.exe") -Force
+} else {
+    $appStageDir = Join-Path $stageDir "app"
+    New-Item -ItemType Directory -Path $appStageDir | Out-Null
+    Copy-Item (Join-Path $publishDir "*") $appStageDir -Recurse -Force
+}
+
+# Physical acceptance needs a reproducible capture-vs-SCL inspector, not only
+# a Windows UI EXE. Publish the existing read-only CLI self-contained into a
+# separate tools folder; never stage raw PCAP/SCL or customer identities.
+$interopProject = Join-Path $repoRoot "tools/ProcessBus.InteropCli/ProcessBus.InteropCli.csproj"
+$interopPublishDir = Join-Path $repoRoot "$OutputRoot/publish/$portableName/interop-cli"
+$interopStageDir = Join-Path $stageDir "Bench"
+New-Item -ItemType Directory -Path $interopStageDir -Force | Out-Null
+dotnet restore $interopProject -r $Runtime /p:ContinuousIntegrationBuild=true
+if ($LASTEXITCODE -ne 0) { throw "Interop CLI runtime-specific restore failed." }
+$interopPublishArgs = @(
+    "publish", $interopProject, "--no-restore", "-c", $Configuration,
+    "-r", $Runtime, "-o", $interopPublishDir,
+    "/p:Version=$Version", "/p:VersionPrefix=$versionPrefix", "/p:VersionSuffix=$versionSuffix",
+    "/p:PublishSingleFile=true", "/p:IncludeNativeLibrariesForSelfExtract=true",
+    "/p:EnableCompressionInSingleFile=true", "/p:PublishTrimmed=false",
+    "/p:DebugType=None", "/p:DebugSymbols=false",
+    "/p:ErrorOnDuplicatePublishOutputFiles=true", "--self-contained", "true"
+)
+dotnet @interopPublishArgs
+if ($LASTEXITCODE -ne 0) { throw "Interop CLI publish failed." }
+$interopExe = Join-Path $interopPublishDir "ProcessBus.InteropCli.exe"
+if (-not (Test-Path $interopExe)) { throw "Interop CLI publish produced no executable." }
+Copy-Item $interopExe (Join-Path $interopStageDir "ProcessBus.InteropCli.exe") -Force
+Copy-Item (Join-Path $repoRoot "docs/M4_ARSTACK_INTEROP_ACCEPTANCE.md") (Join-Path $interopStageDir "M4_ARSTACK_INTEROP_ACCEPTANCE.md") -Force
+Copy-Item (Join-Path $repoRoot "scripts/measure-m4-bench.ps1") (Join-Path $interopStageDir "measure-m4-bench.ps1") -Force
+Copy-Item (Join-Path $repoRoot "docs/PHYSICAL_BENCH_QUICK_START.md") (Join-Path $interopStageDir "START_HERE.md") -Force
+
+$packageReadme = @"
+Process Bus Insight / DigSubAnalyzer
+Windows self-contained distribution payload
+Version: $Version
+Community license: GPL-3.0-or-later
+
+This payload is packaged both by the Inno Setup installer (recommended)
+and as a separate optional portable ZIP.
+
+INSTALLER: Run the official win-x64-setup.exe. It installs this payload,
+Start Menu shortcuts, offline manuals and uninstaller to Program Files.
+UPDATE: Close the analyzer and run the newer installer (no uninstall needed).
+PORTABLE: Extract the ZIP completely and run $AppName.exe.
+
+1. Install Npcap separately when live raw Ethernet capture is required.
+   Missing/incompatible native Npcap must not produce a fake usable adapter.
+2. Use an authorized TAP, mirror port, or isolated engineering test network.
+3. Read Quick Start.pdf, User Manual.pdf and Install and Update.md offline.
+   Current Markdown editions are included and cryptographically bound to PDFs
+   through ManualSources.json.
+4. For physical SV/PTP evidence read Bench/START_HERE.md.
+5. Bench/ProcessBus.InteropCli.exe works offline without the .NET SDK.
+6. Bench/measure-m4-bench.ps1 records local process CPU/memory.
+   A diagnostic broadcast mirror does NOT prove the canonical VLAN SV path.
+
+Included legal documents:
+LICENSE.txt, NOTICE.txt, COMMERCIAL-LICENSE.md, COPYRIGHT.md, TRADEMARK.md,
+THIRD_PARTY_NOTICES.md, and Licensing.md.
+
+Proprietary, OEM, white-label, closed-source redistribution, private-branch, or contractual service rights require a separate negotiated agreement. The commercial notice grants no additional rights by itself.
+
+Windows/Npcap timestamps are screening evidence unless independently validated. The software does not prove external IED acceptance or process action.
+
+https://github.com/masarray/DigSubAnalyzer
+"@
+Set-Content (Join-Path $stageDir "README.txt") $packageReadme -Encoding UTF8
+
+$copyMap = @(
+    @{ Source = "LICENSE"; Destination = "LICENSE.txt" },
+    @{ Source = "NOTICE"; Destination = "NOTICE.txt" },
+    @{ Source = "COMMERCIAL-LICENSE.md"; Destination = "COMMERCIAL-LICENSE.md" },
+    @{ Source = "COPYRIGHT.md"; Destination = "COPYRIGHT.md" },
+    @{ Source = "TRADEMARK.md"; Destination = "TRADEMARK.md" },
+    @{ Source = "THIRD_PARTY_NOTICES.md"; Destination = "THIRD_PARTY_NOTICES.md" },
+    @{ Source = "docs/LICENSING.md"; Destination = "Licensing.md" },
+    @{ Source = "$OutputRoot/generated-docs/Quick Start.pdf"; Destination = "Quick Start.pdf" },
+    @{ Source = "$OutputRoot/generated-docs/User Manual.pdf"; Destination = "User Manual.pdf" },
+    @{ Source = "$OutputRoot/generated-docs/manual-manifest.json"; Destination = "ManualSources.json" },
+    @{ Source = "docs/QUICK_START.md"; Destination = "Quick Start.md" },
+    @{ Source = "docs/USER_MANUAL.md"; Destination = "User Manual.md" },
+    @{ Source = "docs/INSTALLATION_AND_UPDATE.md"; Destination = "Install and Update.md" }
+)
+foreach ($item in $copyMap) {
+    $source = Join-Path $repoRoot $item.Source
+    if (-not (Test-Path $source)) { throw "Required package file missing: $($item.Source)" }
+    Copy-Item $source (Join-Path $stageDir $item.Destination) -Force
+}
+
+if (Test-Path (Join-Path $stageDir "LICENSE-APACHE-2.0")) {
+    throw "Historical Apache license must not appear in a current GPL package."
+}
+
+# Include SHA-linked provenance beside the EXE, both in Inno and portable
+# artifacts, so operators can identify a stale or alternate install path.
+$payloadProvenance = [ordered]@{
+    schema = "processbus-build-v1"
+    version = $Version
+    commit = $sourceCommit
+    executableSha256 = (Get-FileHash -LiteralPath (Join-Path $stageDir "$AppName.exe") -Algorithm SHA256).Hash.ToLowerInvariant()
+    githubRunId = if ($env:GITHUB_RUN_ID) { $env:GITHUB_RUN_ID } else { "" }
+}
+$payloadProvenance | ConvertTo-Json -Depth 3 | Set-Content -LiteralPath (Join-Path $stageDir "BuildInfo.json") -Encoding UTF8
+
+Remove-Item $zipPath -Force -ErrorAction SilentlyContinue
+Compress-Archive -Path (Join-Path $stageDir "*") -DestinationPath $zipPath -Force
+$hash = Get-FileHash $zipPath -Algorithm SHA256
+Set-Content $shaPath "$($hash.Hash.ToLowerInvariant())  $(Split-Path $zipPath -Leaf)" -Encoding ASCII
+Write-Host "Created: $zipPath"
+Write-Host "Created: $shaPath"
+) {
+    throw "Packaging requires a Git checkout and source commit SHA."
+}
+
 $requiredReleaseDocs = @(
     "docs/QUICK_START.md", "docs/USER_MANUAL.md", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
     "COMMERCIAL-LICENSE.md", "COPYRIGHT.md", "TRADEMARK.md",

From bc022281b3ac103e6b8d7d2073eaa49f736a86c2 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 14:54:59 +0700
Subject: [PATCH 116/148] Replace misleading hardcoded About version with
 actual build and executable location

---
 src/ProcessBus.App.Wpf/Views/AboutWindow.xaml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml b/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml
index e95fbd94..6bab82a4 100644
--- a/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml
+++ b/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml
@@ -263,14 +263,24 @@
                 </StackPanel>
 
                 <StackPanel Grid.Column="2" VerticalAlignment="Center" HorizontalAlignment="Right" Margin="18,0,0,0">
-                    <TextBlock Text="Version 1.0.0"
+                    <TextBlock x:Name="InstalledVersionText"
+                               Text="Version unknown"
                                Foreground="{StaticResource TextMain}"
                                FontWeight="SemiBold"
                                HorizontalAlignment="Right"/>
-                    <TextBlock Text="Build 2026.04"
+                    <TextBlock x:Name="InstalledBuildText"
+                               Text="Build provenance unavailable"
                                Foreground="{StaticResource TextMuted}"
-                               FontSize="12"
+                               FontSize="11"
                                HorizontalAlignment="Right"/>
+                    <TextBlock x:Name="InstalledPathText"
+                               Text="Executable location unavailable"
+                               Foreground="{StaticResource TextMuted}"
+                               FontSize="10"
+                               MaxWidth="260"
+                               TextTrimming="CharacterEllipsis"
+                               HorizontalAlignment="Right"
+                               ToolTipService.ShowDuration="30000"/>
                 </StackPanel>
             </Grid>
         </Border>

From dd698ab6c4a8ad07bc5aef18ed42a1d047aa4766 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 14:55:39 +0700
Subject: [PATCH 117/148] Show actual installed assembly version, commit and
 EXE path in About for release diagnosis

---
 .../Views/AboutWindow.xaml.cs                 | 68 +++++++++++++++++++
 1 file changed, 68 insertions(+)

diff --git a/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml.cs b/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml.cs
index 5ff1c45a..d7b83e44 100644
--- a/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml.cs
+++ b/src/ProcessBus.App.Wpf/Views/AboutWindow.xaml.cs
@@ -1,3 +1,7 @@
+using System;
+using System.IO;
+using System.Reflection;
+using System.Text.Json;
 using System.Windows;
 
 namespace ProcessBus.App.Wpf.Views
@@ -7,6 +11,70 @@ public partial class AboutWindow : Window
         public AboutWindow()
         {
             InitializeComponent();
+            ShowActualInstalledBuild();
+        }
+
+        private void ShowActualInstalledBuild()
+        {
+            // Neither a hardcoded About version nor an installer filename proves
+            // which ProcessBusInsight.exe the Windows shortcut actually launched.
+            var assembly = typeof(AboutWindow).Assembly;
+            var information = assembly.GetCustomAttribute<AssemblyInformationalVersionAttribute>()?.InformationalVersion;
+            var version = string.IsNullOrWhiteSpace(information)
+                ? assembly.GetName().Version?.ToString(3) ?? "unknown"
+                : information.Split('+', 2)[0];
+
+            InstalledVersionText.Text = "Version " + version;
+            var exe = Environment.ProcessPath ?? Path.Combine(AppContext.BaseDirectory, "ProcessBusInsight.exe");
+            InstalledPathText.Text = "Path: " + exe;
+            InstalledPathText.ToolTip = exe;
+            InstalledBuildText.Text = "Build identity unavailable";
+
+            try
+            {
+                var manifest = Path.Combine(AppContext.BaseDirectory, "BuildInfo.json");
+                if (!File.Exists(manifest))
+                {
+                    InstalledBuildText.Text = "Build identity missing (older install)";
+                    return;
+                }
+
+                using var document = JsonDocument.Parse(File.ReadAllText(manifest));
+                var root = document.RootElement;
+                var commit = root.GetProperty("commit").GetString() ?? string.Empty;
+                var sourceVersion = root.GetProperty("version").GetString() ?? string.Empty;
+                var runId = root.TryGetProperty("githubRunId", out var run)
+                    ? run.GetString() ?? string.Empty : string.Empty;
+
+                if (commit.Length != 40 || !System.Text.RegularExpressions.Regex.IsMatch(
+                    commit, "^[0-9a-fA-F]{40}$"))
+                {
+                    InstalledBuildText.Text = "Build identity invalid";
+                    return;
+                }
+
+                var shortId = commit[..8];
+                if (!string.Equals(sourceVersion, version, StringComparison.OrdinalIgnoreCase))
+                {
+                    InstalledBuildText.Text = "BUILD VERSION MISMATCH · " + shortId;
+                }
+                else
+                {
+                    InstalledBuildText.Text = "Build " + shortId +
+                        (string.IsNullOrEmpty(runId) ? string.Empty : " · CI " + runId);
+                }
+
+                InstalledBuildText.ToolTip = "Commit: " + commit +
+                    "\nInstalled version: " + sourceVersion +
+                    "\nExecutable: " + exe;
+            }
+            catch (Exception ex) when (
+                ex is IOException or UnauthorizedAccessException or JsonException or KeyNotFoundException or
+                InvalidOperationException)
+            {
+                InstalledBuildText.Text = "Build identity unreadable";
+                InstalledBuildText.ToolTip = ex.Message;
+            }
         }
 
         private void Close_Click(object sender, RoutedEventArgs e)

From a6b6a60cd7b752945d9d6f723f1d514e9ba00e2d Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 14:56:07 +0700
Subject: [PATCH 118/148] Refuse installer/ZIP with mismatched build
 provenance; verify EXE hash after install and repair

---
 scripts/verify-release-package.ps1 | 202 +++++++++++++++++++++++++++++
 1 file changed, 202 insertions(+)

diff --git a/scripts/verify-release-package.ps1 b/scripts/verify-release-package.ps1
index 9c914e46..f5d3e613 100644
--- a/scripts/verify-release-package.ps1
+++ b/scripts/verify-release-package.ps1
@@ -20,6 +20,7 @@ try {
         "Quick Start.md",
         "User Manual.md",
         "ManualSources.json",
+        "BuildInfo.json", 
         "Install and Update.md",
         "README.txt",
         "LICENSE.txt",
@@ -40,6 +41,207 @@ try {
         }
     }
 
+    $build = Get-Content (Join-Path $temp "BuildInfo.json") -Raw | ConvertFrom-Json
+    if ($build.schema -ne "processbus-build-v1" -or
+        $build.commit -cnotmatch '^[0-9a-f]{40}
+    # shipped in the installed package. Prevent an obsolete portable-only
+    # PDF from passing release verification after setup guidance changes.
+    $manualManifest = Get-Content (Join-Path $temp "ManualSources.json") -Raw | ConvertFrom-Json
+    if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") {
+        throw "Manual verification failed: missing provenance format."
+    }
+    if (@($manualManifest.files).Count -ne 2) {
+        throw "Manual verification failed: two synchronized PDF editions expected."
+    }
+    foreach ($entry in $manualManifest.files) {
+        $markdownName = switch ($entry.source) {
+            "QUICK_START.md" { "Quick Start.md" }
+            "USER_MANUAL.md" { "User Manual.md" }
+            default { throw "Unexpected PDF manual source: $($entry.source)" }
+        }
+        if ($entry.pdf -notin @("Quick Start.pdf", "User Manual.pdf")) {
+            throw "Unexpected generated PDF filename: $($entry.pdf)"
+        }
+        $markdownSha = (Get-FileHash (Join-Path $temp $markdownName) -Algorithm SHA256).Hash
+        $pdfSha = (Get-FileHash (Join-Path $temp $entry.pdf) -Algorithm SHA256).Hash
+        if ($markdownSha -ne $entry.sourceSha256 -or $pdfSha -ne $entry.pdfSha256) {
+            throw "Manual source/PDF hash mismatch for $markdownName."
+        }
+    }
+
+    if (Test-Path (Join-Path $temp "LICENSE-APACHE-2.0")) {
+        throw "Package verification failed. Historical Apache license is presented as a current package license."
+    }
+
+    $license = Get-Content (Join-Path $temp "LICENSE.txt") -Raw
+    if ($license -notmatch 'GNU GENERAL PUBLIC LICENSE' -or $license -notmatch 'Version 3, 29 June 2007') {
+        throw "Package verification failed. LICENSE.txt is not GNU GPL version 3."
+    }
+    if ($license -match 'Apache License') {
+        throw "Package verification failed. LICENSE.txt contains stale Apache wording."
+    }
+
+    $commercial = Get-Content (Join-Path $temp "COMMERCIAL-LICENSE.md") -Raw
+    if ($commercial -notmatch 'not itself a commercial license' -or $commercial -notmatch 'grants no additional rights') {
+        throw "Package verification failed. Commercial notice does not state its non-grant boundary."
+    }
+
+    $licensing = Get-Content (Join-Path $temp "Licensing.md") -Raw
+    foreach ($marker in @('GPL-3.0-or-later', '85d43a0fe58a5888a9e8008c168ab76d2333ea87', 'archive/apache-2.0-final')) {
+        if ($licensing -notmatch [regex]::Escape($marker)) {
+            throw "Package verification failed. Licensing.md is missing: $marker"
+        }
+    }
+
+    $batFiles = Get-ChildItem -Path $temp -Recurse -File -Filter "*.bat"
+    if ($batFiles.Count -gt 0) {
+        $names = ($batFiles | ForEach-Object { $_.FullName.Substring($temp.Length + 1) }) -join ', '
+        throw "Package verification failed. Batch files are not allowed: $names"
+    }
+
+    $exeFiles = Get-ChildItem -Path $temp -File -Filter "*.exe"
+    if ($exeFiles.Count -ne 1 -or $exeFiles[0].Name -ne "$AppName.exe") {
+        $names = ($exeFiles | Select-Object -ExpandProperty Name) -join ', '
+        throw "Package verification failed. Expected exactly one root EXE: $AppName.exe. Found: $names"
+    }
+
+    # The GUI remains the only ROOT executable. A separate, self-contained
+    # read-only inspector is required so field users can screen their actual
+    # PCAP+SCL evidence without installing the developer SDK.
+    $interopExe = Join-Path $temp "Bench/ProcessBus.InteropCli.exe"
+    if ((Get-Item $interopExe).Length -lt 1024) {
+        throw "Package verification failed. The interop CLI executable is too small."
+    }
+    $interopHelp = & $interopExe --help 2>&1 | Out-String
+    if ($LASTEXITCODE -ne 0 -or $interopHelp -notmatch 'offline interop screening') {
+        throw "Package verification failed. Bundled offline interop CLI cannot run --help."
+    }
+    $benchGuide = Get-Content (Join-Path $temp "Bench/START_HERE.md") -Raw
+    foreach ($marker in @('ProcessBus.InteropCli.exe', '60-minute', 'TAP/SPAN', 'AR_DIAG_SV1')) {
+        if ($benchGuide -notmatch [regex]::Escape($marker)) {
+            throw "Package verification failed. Physical bench quickstart is missing: $marker"
+        }
+    }
+
+    $size = (Get-Item (Join-Path $temp "$AppName.exe")).Length
+    if ($size -lt 1024) { throw "Package verification failed. Executable looks too small: $size bytes" }
+
+    foreach ($pdfName in @("Quick Start.pdf", "User Manual.pdf")) {
+        if ((Get-Item (Join-Path $temp $pdfName)).Length -lt 2048) {
+            throw "Package verification failed. PDF document looks too small: $pdfName"
+        }
+    }
+
+    Write-Host "Package verification passed: $PackageZip"
+    Write-Host "Community license: GPL-3.0-or-later"
+}
+finally {
+    Remove-Item -LiteralPath $temp -Recurse -Force -ErrorAction SilentlyContinue
+}
+ -or
+        $build.version -notmatch '^1\\.4\\.1(?:-[A-Za-z0-9.]+)?
+    # shipped in the installed package. Prevent an obsolete portable-only
+    # PDF from passing release verification after setup guidance changes.
+    $manualManifest = Get-Content (Join-Path $temp "ManualSources.json") -Raw | ConvertFrom-Json
+    if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") {
+        throw "Manual verification failed: missing provenance format."
+    }
+    if (@($manualManifest.files).Count -ne 2) {
+        throw "Manual verification failed: two synchronized PDF editions expected."
+    }
+    foreach ($entry in $manualManifest.files) {
+        $markdownName = switch ($entry.source) {
+            "QUICK_START.md" { "Quick Start.md" }
+            "USER_MANUAL.md" { "User Manual.md" }
+            default { throw "Unexpected PDF manual source: $($entry.source)" }
+        }
+        if ($entry.pdf -notin @("Quick Start.pdf", "User Manual.pdf")) {
+            throw "Unexpected generated PDF filename: $($entry.pdf)"
+        }
+        $markdownSha = (Get-FileHash (Join-Path $temp $markdownName) -Algorithm SHA256).Hash
+        $pdfSha = (Get-FileHash (Join-Path $temp $entry.pdf) -Algorithm SHA256).Hash
+        if ($markdownSha -ne $entry.sourceSha256 -or $pdfSha -ne $entry.pdfSha256) {
+            throw "Manual source/PDF hash mismatch for $markdownName."
+        }
+    }
+
+    if (Test-Path (Join-Path $temp "LICENSE-APACHE-2.0")) {
+        throw "Package verification failed. Historical Apache license is presented as a current package license."
+    }
+
+    $license = Get-Content (Join-Path $temp "LICENSE.txt") -Raw
+    if ($license -notmatch 'GNU GENERAL PUBLIC LICENSE' -or $license -notmatch 'Version 3, 29 June 2007') {
+        throw "Package verification failed. LICENSE.txt is not GNU GPL version 3."
+    }
+    if ($license -match 'Apache License') {
+        throw "Package verification failed. LICENSE.txt contains stale Apache wording."
+    }
+
+    $commercial = Get-Content (Join-Path $temp "COMMERCIAL-LICENSE.md") -Raw
+    if ($commercial -notmatch 'not itself a commercial license' -or $commercial -notmatch 'grants no additional rights') {
+        throw "Package verification failed. Commercial notice does not state its non-grant boundary."
+    }
+
+    $licensing = Get-Content (Join-Path $temp "Licensing.md") -Raw
+    foreach ($marker in @('GPL-3.0-or-later', '85d43a0fe58a5888a9e8008c168ab76d2333ea87', 'archive/apache-2.0-final')) {
+        if ($licensing -notmatch [regex]::Escape($marker)) {
+            throw "Package verification failed. Licensing.md is missing: $marker"
+        }
+    }
+
+    $batFiles = Get-ChildItem -Path $temp -Recurse -File -Filter "*.bat"
+    if ($batFiles.Count -gt 0) {
+        $names = ($batFiles | ForEach-Object { $_.FullName.Substring($temp.Length + 1) }) -join ', '
+        throw "Package verification failed. Batch files are not allowed: $names"
+    }
+
+    $exeFiles = Get-ChildItem -Path $temp -File -Filter "*.exe"
+    if ($exeFiles.Count -ne 1 -or $exeFiles[0].Name -ne "$AppName.exe") {
+        $names = ($exeFiles | Select-Object -ExpandProperty Name) -join ', '
+        throw "Package verification failed. Expected exactly one root EXE: $AppName.exe. Found: $names"
+    }
+
+    # The GUI remains the only ROOT executable. A separate, self-contained
+    # read-only inspector is required so field users can screen their actual
+    # PCAP+SCL evidence without installing the developer SDK.
+    $interopExe = Join-Path $temp "Bench/ProcessBus.InteropCli.exe"
+    if ((Get-Item $interopExe).Length -lt 1024) {
+        throw "Package verification failed. The interop CLI executable is too small."
+    }
+    $interopHelp = & $interopExe --help 2>&1 | Out-String
+    if ($LASTEXITCODE -ne 0 -or $interopHelp -notmatch 'offline interop screening') {
+        throw "Package verification failed. Bundled offline interop CLI cannot run --help."
+    }
+    $benchGuide = Get-Content (Join-Path $temp "Bench/START_HERE.md") -Raw
+    foreach ($marker in @('ProcessBus.InteropCli.exe', '60-minute', 'TAP/SPAN', 'AR_DIAG_SV1')) {
+        if ($benchGuide -notmatch [regex]::Escape($marker)) {
+            throw "Package verification failed. Physical bench quickstart is missing: $marker"
+        }
+    }
+
+    $size = (Get-Item (Join-Path $temp "$AppName.exe")).Length
+    if ($size -lt 1024) { throw "Package verification failed. Executable looks too small: $size bytes" }
+
+    foreach ($pdfName in @("Quick Start.pdf", "User Manual.pdf")) {
+        if ((Get-Item (Join-Path $temp $pdfName)).Length -lt 2048) {
+            throw "Package verification failed. PDF document looks too small: $pdfName"
+        }
+    }
+
+    Write-Host "Package verification passed: $PackageZip"
+    Write-Host "Community license: GPL-3.0-or-later"
+}
+finally {
+    Remove-Item -LiteralPath $temp -Recurse -Force -ErrorAction SilentlyContinue
+}
+) {
+        throw "Missing or invalid candidate source provenance."
+    }
+    $exeHash = (Get-FileHash (Join-Path $temp "$AppName.exe") -Algorithm SHA256).Hash.ToLowerInvariant()
+    if ($exeHash -cne $build.executableSha256) {
+        throw "Packaged EXE hash differs from BuildInfo.json; refuse ambiguous version."
+    }
+
     # The PDFs must be generated from exactly the Markdown editions also
     # shipped in the installed package. Prevent an obsolete portable-only
     # PDF from passing release verification after setup guidance changes.

From 6b8a77315945b1cd0297b9081b5a53090910449e Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 14:56:10 +0700
Subject: [PATCH 119/148] Refuse installer/ZIP with mismatched build
 provenance; verify EXE hash after install and repair

---
 scripts/verify-windows-installer.ps1 | 29 +++++++++++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/scripts/verify-windows-installer.ps1 b/scripts/verify-windows-installer.ps1
index 6f24ec3c..960dcd42 100644
--- a/scripts/verify-windows-installer.ps1
+++ b/scripts/verify-windows-installer.ps1
@@ -50,6 +50,7 @@ try {
             'User Manual.pdf',
             'Quick Start.md',
             'User Manual.md',
+            'BuildInfo.json', 
             'Install and Update.md',
             'LICENSE.txt',
             'README.txt',
@@ -62,7 +63,7 @@ try {
             }
         }
         if (-not [string]::IsNullOrWhiteSpace($StageDir)) {
-            foreach ($relative in @('ProcessBusInsight.exe', 'User Manual.pdf', 'Quick Start.pdf')) {
+            foreach ($relative in @('ProcessBusInsight.exe', 'BuildInfo.json', 'User Manual.pdf', 'Quick Start.pdf')) {
                 $source = Join-Path $StageDir $relative
                 if (-not (Test-Path -LiteralPath $source)) {
                     throw "Smoke test source missing: $source"
@@ -72,6 +73,32 @@ try {
                 if ($sourceHash -ne $destHash) { throw "Installed $relative does not match verified stage." }
             }
         }
+        $build = Get-Content (Join-Path $installDir 'BuildInfo.json') -Raw | ConvertFrom-Json
+        if ($build.schema -ne 'processbus-build-v1' -or $build.commit -cnotmatch '^[0-9a-f]{40}
+    }
+
+    $uninstallArguments = @('/VERYSILENT', '/SUPPRESSMSGBOXES', '/NORESTART',
+        ('/LOG="' + (Join-Path $logDir 'uninstall.log') + '"'))
+    $process = Start-Process -FilePath $uninstallPath -ArgumentList $uninstallArguments -PassThru -Wait
+    if ($process.ExitCode -ne 0) { throw "Silent uninstall failed: exit $($process.ExitCode)." }
+    if (Test-Path -LiteralPath (Join-Path $installDir 'ProcessBusInsight.exe')) {
+        throw 'Uninstaller left the installed main executable behind.'
+    }
+    Write-Host 'Installer verification passed: install, same-version repair, offline PDFs, uninstall.'
+}
+finally {
+    # Only the uniquely generated ephemeral smoke path is removed.
+    if (Test-Path -LiteralPath $root) {
+        Remove-Item -LiteralPath $root -Recurse -Force -ErrorAction SilentlyContinue
+    }
+}
+) {
+            throw 'Installed build provenance invalid.'
+        }
+        $exeHash = (Get-FileHash -LiteralPath (Join-Path $installDir 'ProcessBusInsight.exe') -Algorithm SHA256).Hash.ToLowerInvariant()
+        if ($exeHash -cne $build.executableSha256) {
+            throw 'Installed executable hash does not match the build provenance.'
+        }
         Write-Host "Installed payload and offline manuals verified (run $attempt / 2)."
     }
 

From 30f01c4bca7c6d6a29d4f1eb455cc07bf88a4565 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 14:58:06 +0700
Subject: [PATCH 120/148] Repair source-provenance validation syntax and verify
 packaged EXE hash

---
 scripts/verify-release-package.ps1 | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/scripts/verify-release-package.ps1 b/scripts/verify-release-package.ps1
index f5d3e613..ae664dcb 100644
--- a/scripts/verify-release-package.ps1
+++ b/scripts/verify-release-package.ps1
@@ -41,11 +41,20 @@ try {
         }
     }
 
+    # Current source commit must be tied to the exact shipped EXE.
     $build = Get-Content (Join-Path $temp "BuildInfo.json") -Raw | ConvertFrom-Json
     if ($build.schema -ne "processbus-build-v1" -or
-        $build.commit -cnotmatch '^[0-9a-f]{40}
-    # shipped in the installed package. Prevent an obsolete portable-only
-    # PDF from passing release verification after setup guidance changes.
+        [string]$build.commit -cnotmatch "^[0-9a-f]{40}" -or
+        ([string]$build.commit).Length -ne 40 -or
+        [string]$build.version -notmatch "^\d+\.\d+\.\d+") {
+        throw "Missing or invalid candidate source provenance."
+    }
+    $exeHash = (Get-FileHash (Join-Path $temp "$AppName.exe") -Algorithm SHA256).Hash.ToLowerInvariant()
+    if ($exeHash -cne $build.executableSha256) {
+        throw "Packaged EXE hash differs from BuildInfo.json; refuse ambiguous version."
+    }
+
+    # PDFs must match the exact Markdown editions staged with this build.
     $manualManifest = Get-Content (Join-Path $temp "ManualSources.json") -Raw | ConvertFrom-Json
     if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") {
         throw "Manual verification failed: missing provenance format."

From 1ad30441e556d0f729557ff6ad2ea2d8fabb156f Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 14:58:10 +0700
Subject: [PATCH 121/148] Repair installer smoke provenance validator and fail
 on EXE/manifest mismatch

---
 scripts/verify-windows-installer.ps1 | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/scripts/verify-windows-installer.ps1 b/scripts/verify-windows-installer.ps1
index 960dcd42..33f05b38 100644
--- a/scripts/verify-windows-installer.ps1
+++ b/scripts/verify-windows-installer.ps1
@@ -74,7 +74,16 @@ try {
             }
         }
         $build = Get-Content (Join-Path $installDir 'BuildInfo.json') -Raw | ConvertFrom-Json
-        if ($build.schema -ne 'processbus-build-v1' -or $build.commit -cnotmatch '^[0-9a-f]{40}
+        if ($build.schema -ne 'processbus-build-v1' -or
+            ([string]$build.commit).Length -ne 40 -or
+            [string]$build.commit -cnotmatch "^[0-9a-f]{40}") {
+            throw 'Installed build provenance invalid.'
+        }
+        $exeHash = (Get-FileHash -LiteralPath (Join-Path $installDir 'ProcessBusInsight.exe') -Algorithm SHA256).Hash.ToLowerInvariant()
+        if ($exeHash -cne $build.executableSha256) {
+            throw 'Installed executable hash does not match the build provenance.'
+        }
+        Write-Host "Installed payload and offline manuals verified (run $attempt / 2)."
     }
 
     $uninstallArguments = @('/VERYSILENT', '/SUPPRESSMSGBOXES', '/NORESTART',

From f4c46bfa4156e64181019ce8c7c8aec072f8f41a Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 15:01:18 +0700
Subject: [PATCH 122/148] Fix provenance packaging PowerShell parse error
 caused by source hash anchor

---
 scripts/publish-windows-portable.ps1 | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index c3dbb8e5..cf295a90 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -14,10 +14,12 @@ $repoRoot = Resolve-Path (Join-Path $PSScriptRoot "..")
 Set-Location $repoRoot
 if ([string]::IsNullOrWhiteSpace($Version)) { throw "Version cannot be empty." }
 
-# Source identity must be unique even when successive test installers use 1.4.1.
+# Each Inno candidate needs an unambiguous source revision.
 $sourceCommit = (& git rev-parse HEAD).Trim()
-if ($LASTEXITCODE -ne 0 -or $sourceCommit -cnotmatch '^[a-f0-9]{40}
-
+if ($LASTEXITCODE -ne 0 -or $sourceCommit.Length -ne 40 -or
+    $sourceCommit -cnotmatch "^[a-f0-9]{40}") {
+    throw "Packaging requires a Git checkout and valid source commit SHA."
+}
 $requiredReleaseDocs = @(
     "docs/QUICK_START.md", "docs/USER_MANUAL.md", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
     "COMMERCIAL-LICENSE.md", "COPYRIGHT.md", "TRADEMARK.md",

From b3a2145d75fc355f8e8a89f6a05aeffd9ad08d62 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 15:03:54 +0700
Subject: [PATCH 123/148] Remove accidental duplicate PowerShell tail from
 packaging provenance fix

---
 scripts/publish-windows-portable.ps1 | 191 ---------------------------
 1 file changed, 191 deletions(-)

diff --git a/scripts/publish-windows-portable.ps1 b/scripts/publish-windows-portable.ps1
index cf295a90..1d142ad9 100644
--- a/scripts/publish-windows-portable.ps1
+++ b/scripts/publish-windows-portable.ps1
@@ -218,194 +218,3 @@ $hash = Get-FileHash $zipPath -Algorithm SHA256
 Set-Content $shaPath "$($hash.Hash.ToLowerInvariant())  $(Split-Path $zipPath -Leaf)" -Encoding ASCII
 Write-Host "Created: $zipPath"
 Write-Host "Created: $shaPath"
-) {
-    throw "Packaging requires a Git checkout and source commit SHA."
-}
-
-$requiredReleaseDocs = @(
-    "docs/QUICK_START.md", "docs/USER_MANUAL.md", "docs/INSTALLATION_AND_UPDATE.md", "LICENSE", "NOTICE",
-    "COMMERCIAL-LICENSE.md", "COPYRIGHT.md", "TRADEMARK.md",
-    "THIRD_PARTY_NOTICES.md", "docs/LICENSING.md"
-)
-foreach ($doc in $requiredReleaseDocs) {
-    if (-not (Test-Path (Join-Path $repoRoot $doc))) { throw "Required release document is missing: $doc" }
-}
-
-$licenseText = Get-Content (Join-Path $repoRoot "LICENSE") -Raw
-if ($licenseText -notmatch 'GNU GENERAL PUBLIC LICENSE' -or $licenseText -notmatch 'Version 3, 29 June 2007') {
-    throw "Current root LICENSE is not GNU GPL version 3."
-}
-if (Test-Path (Join-Path $repoRoot "LICENSE-APACHE-2.0")) {
-    throw "Historical Apache license must not be staged as a current release license."
-}
-
-# Release PDFs are rendered fresh from the canonical Markdown source and
-# cryptographically tied to the two Markdown files in the same installer.
-# Old tracked PDFs must never silently enter a new public package.
-$manualDir = Join-Path $repoRoot "$OutputRoot/generated-docs"
-$manualManifestPath = Join-Path $manualDir "manual-manifest.json"
-if (-not (Test-Path -LiteralPath $manualManifestPath)) {
-    throw "Current offline PDF manual manifest missing. Run python scripts/render-offline-manuals.py first."
-}
-$manualManifest = Get-Content -LiteralPath $manualManifestPath -Raw | ConvertFrom-Json
-if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") { throw 'Unsupported manual manifest format.' }
-foreach ($entry in $manualManifest.files) {
-    if ($entry.source -notin @("QUICK_START.md", "USER_MANUAL.md")) {
-        throw "Unexpected manual source: $($entry.source)"
-    }
-    $src = Join-Path $repoRoot ("docs/" + $entry.source)
-    $pdf = Join-Path $manualDir $entry.pdf
-    if (-not (Test-Path -LiteralPath $pdf)) { throw "Missing generated PDF $pdf" }
-    $sourceHash = (Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash
-    $pdfHash = (Get-FileHash -LiteralPath $pdf -Algorithm SHA256).Hash
-    if ($sourceHash -ne $entry.sourceSha256 -or $pdfHash -ne $entry.pdfSha256) {
-        throw "Offline PDF not synchronized with $($entry.source); regenerate manuals."
-    }
-}
-if (@($manualManifest.files).Count -ne 2) { throw "Exactly two offline PDF manuals are required." }
-
-$portableName = "$AppName-v$Version-$Runtime-portable"
-$publishDir = Join-Path $repoRoot "$OutputRoot/publish/$portableName/publish"
-$stageDir = Join-Path $repoRoot "$OutputRoot/package/$portableName"
-$releaseDir = Join-Path $repoRoot "$OutputRoot/release"
-$zipPath = Join-Path $releaseDir "$portableName.zip"
-$shaPath = Join-Path $releaseDir "SHA256SUMS.txt"
-$selfContained = -not $FrameworkDependent.IsPresent
-$singleFile = -not $MultiFile.IsPresent
-
-Write-Host "Publishing $AppName $Version for $Runtime"
-Write-Host "Community license: GPL-3.0-or-later"
-Remove-Item -LiteralPath $publishDir -Recurse -Force -ErrorAction SilentlyContinue
-Remove-Item -LiteralPath $stageDir -Recurse -Force -ErrorAction SilentlyContinue
-New-Item -ItemType Directory -Path $publishDir, $stageDir, $releaseDir | Out-Null
-
-$resolvedProjectPath = (Resolve-Path $ProjectPath).Path
-dotnet restore $resolvedProjectPath -r $Runtime /p:ContinuousIntegrationBuild=true
-if ($LASTEXITCODE -ne 0) { throw "Runtime-specific restore failed." }
-
-$versionParts = $Version.Split('-', 2)
-$versionPrefix = $versionParts[0]
-$versionSuffix = if ($versionParts.Length -gt 1) { $versionParts[1] } else { '' }
-$publishArgs = @(
-    "publish", $resolvedProjectPath, "--no-restore", "-c", $Configuration,
-    "-r", $Runtime, "-o", $publishDir,
-    "/p:Version=$Version", "/p:VersionPrefix=$versionPrefix", "/p:VersionSuffix=$versionSuffix",
-    "/p:PackageVersion=$Version", "/p:AssemblyVersion=$versionPrefix.0",
-    "/p:FileVersion=$versionPrefix.0", "/p:InformationalVersion=$Version",
-    "/p:PublishSingleFile=$($singleFile.ToString().ToLowerInvariant())",
-    "/p:IncludeNativeLibrariesForSelfExtract=true", "/p:EnableCompressionInSingleFile=true",
-    "/p:PublishTrimmed=false", "/p:DebugType=None", "/p:DebugSymbols=false",
-    "/p:ErrorOnDuplicatePublishOutputFiles=true", "--self-contained", $selfContained.ToString().ToLowerInvariant()
-)
-dotnet @publishArgs
-if ($LASTEXITCODE -ne 0) { throw "Publish failed." }
-
-$publishedExe = Join-Path $publishDir "$AppName.exe"
-if (-not (Test-Path $publishedExe)) {
-    $fallbackExe = Get-ChildItem -Path $publishDir -Filter "*.exe" -File | Select-Object -First 1
-    if ($fallbackExe) { $publishedExe = $fallbackExe.FullName }
-}
-if ($singleFile) {
-    if (-not (Test-Path $publishedExe)) { throw "Single-file publish did not produce an executable in: $publishDir" }
-    Copy-Item $publishedExe (Join-Path $stageDir "$AppName.exe") -Force
-} else {
-    $appStageDir = Join-Path $stageDir "app"
-    New-Item -ItemType Directory -Path $appStageDir | Out-Null
-    Copy-Item (Join-Path $publishDir "*") $appStageDir -Recurse -Force
-}
-
-# Physical acceptance needs a reproducible capture-vs-SCL inspector, not only
-# a Windows UI EXE. Publish the existing read-only CLI self-contained into a
-# separate tools folder; never stage raw PCAP/SCL or customer identities.
-$interopProject = Join-Path $repoRoot "tools/ProcessBus.InteropCli/ProcessBus.InteropCli.csproj"
-$interopPublishDir = Join-Path $repoRoot "$OutputRoot/publish/$portableName/interop-cli"
-$interopStageDir = Join-Path $stageDir "Bench"
-New-Item -ItemType Directory -Path $interopStageDir -Force | Out-Null
-dotnet restore $interopProject -r $Runtime /p:ContinuousIntegrationBuild=true
-if ($LASTEXITCODE -ne 0) { throw "Interop CLI runtime-specific restore failed." }
-$interopPublishArgs = @(
-    "publish", $interopProject, "--no-restore", "-c", $Configuration,
-    "-r", $Runtime, "-o", $interopPublishDir,
-    "/p:Version=$Version", "/p:VersionPrefix=$versionPrefix", "/p:VersionSuffix=$versionSuffix",
-    "/p:PublishSingleFile=true", "/p:IncludeNativeLibrariesForSelfExtract=true",
-    "/p:EnableCompressionInSingleFile=true", "/p:PublishTrimmed=false",
-    "/p:DebugType=None", "/p:DebugSymbols=false",
-    "/p:ErrorOnDuplicatePublishOutputFiles=true", "--self-contained", "true"
-)
-dotnet @interopPublishArgs
-if ($LASTEXITCODE -ne 0) { throw "Interop CLI publish failed." }
-$interopExe = Join-Path $interopPublishDir "ProcessBus.InteropCli.exe"
-if (-not (Test-Path $interopExe)) { throw "Interop CLI publish produced no executable." }
-Copy-Item $interopExe (Join-Path $interopStageDir "ProcessBus.InteropCli.exe") -Force
-Copy-Item (Join-Path $repoRoot "docs/M4_ARSTACK_INTEROP_ACCEPTANCE.md") (Join-Path $interopStageDir "M4_ARSTACK_INTEROP_ACCEPTANCE.md") -Force
-Copy-Item (Join-Path $repoRoot "scripts/measure-m4-bench.ps1") (Join-Path $interopStageDir "measure-m4-bench.ps1") -Force
-Copy-Item (Join-Path $repoRoot "docs/PHYSICAL_BENCH_QUICK_START.md") (Join-Path $interopStageDir "START_HERE.md") -Force
-
-$packageReadme = @"
-Process Bus Insight / DigSubAnalyzer
-Windows self-contained distribution payload
-Version: $Version
-Community license: GPL-3.0-or-later
-
-This payload is packaged both by the Inno Setup installer (recommended)
-and as a separate optional portable ZIP.
-
-INSTALLER: Run the official win-x64-setup.exe. It installs this payload,
-Start Menu shortcuts, offline manuals and uninstaller to Program Files.
-UPDATE: Close the analyzer and run the newer installer (no uninstall needed).
-PORTABLE: Extract the ZIP completely and run $AppName.exe.
-
-1. Install Npcap separately when live raw Ethernet capture is required.
-   Missing/incompatible native Npcap must not produce a fake usable adapter.
-2. Use an authorized TAP, mirror port, or isolated engineering test network.
-3. Read Quick Start.pdf, User Manual.pdf and Install and Update.md offline.
-   Current Markdown editions are included and cryptographically bound to PDFs
-   through ManualSources.json.
-4. For physical SV/PTP evidence read Bench/START_HERE.md.
-5. Bench/ProcessBus.InteropCli.exe works offline without the .NET SDK.
-6. Bench/measure-m4-bench.ps1 records local process CPU/memory.
-   A diagnostic broadcast mirror does NOT prove the canonical VLAN SV path.
-
-Included legal documents:
-LICENSE.txt, NOTICE.txt, COMMERCIAL-LICENSE.md, COPYRIGHT.md, TRADEMARK.md,
-THIRD_PARTY_NOTICES.md, and Licensing.md.
-
-Proprietary, OEM, white-label, closed-source redistribution, private-branch, or contractual service rights require a separate negotiated agreement. The commercial notice grants no additional rights by itself.
-
-Windows/Npcap timestamps are screening evidence unless independently validated. The software does not prove external IED acceptance or process action.
-
-https://github.com/masarray/DigSubAnalyzer
-"@
-Set-Content (Join-Path $stageDir "README.txt") $packageReadme -Encoding UTF8
-
-$copyMap = @(
-    @{ Source = "LICENSE"; Destination = "LICENSE.txt" },
-    @{ Source = "NOTICE"; Destination = "NOTICE.txt" },
-    @{ Source = "COMMERCIAL-LICENSE.md"; Destination = "COMMERCIAL-LICENSE.md" },
-    @{ Source = "COPYRIGHT.md"; Destination = "COPYRIGHT.md" },
-    @{ Source = "TRADEMARK.md"; Destination = "TRADEMARK.md" },
-    @{ Source = "THIRD_PARTY_NOTICES.md"; Destination = "THIRD_PARTY_NOTICES.md" },
-    @{ Source = "docs/LICENSING.md"; Destination = "Licensing.md" },
-    @{ Source = "$OutputRoot/generated-docs/Quick Start.pdf"; Destination = "Quick Start.pdf" },
-    @{ Source = "$OutputRoot/generated-docs/User Manual.pdf"; Destination = "User Manual.pdf" },
-    @{ Source = "$OutputRoot/generated-docs/manual-manifest.json"; Destination = "ManualSources.json" },
-    @{ Source = "docs/QUICK_START.md"; Destination = "Quick Start.md" },
-    @{ Source = "docs/USER_MANUAL.md"; Destination = "User Manual.md" },
-    @{ Source = "docs/INSTALLATION_AND_UPDATE.md"; Destination = "Install and Update.md" }
-)
-foreach ($item in $copyMap) {
-    $source = Join-Path $repoRoot $item.Source
-    if (-not (Test-Path $source)) { throw "Required package file missing: $($item.Source)" }
-    Copy-Item $source (Join-Path $stageDir $item.Destination) -Force
-}
-
-if (Test-Path (Join-Path $stageDir "LICENSE-APACHE-2.0")) {
-    throw "Historical Apache license must not appear in a current GPL package."
-}
-
-Remove-Item $zipPath -Force -ErrorAction SilentlyContinue
-Compress-Archive -Path (Join-Path $stageDir "*") -DestinationPath $zipPath -Force
-$hash = Get-FileHash $zipPath -Algorithm SHA256
-Set-Content $shaPath "$($hash.Hash.ToLowerInvariant())  $(Split-Path $zipPath -Leaf)" -Encoding ASCII
-Write-Host "Created: $zipPath"
-Write-Host "Created: $shaPath"

From c2e3dc1fa35582265a82e587873a17d6abed7b42 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 15:08:56 +0700
Subject: [PATCH 124/148] Remove duplicated release verifier suffix and retain
 sole provenance/hash gate

---
 scripts/verify-release-package.ps1 | 199 -----------------------------
 1 file changed, 199 deletions(-)

diff --git a/scripts/verify-release-package.ps1 b/scripts/verify-release-package.ps1
index ae664dcb..e8004551 100644
--- a/scripts/verify-release-package.ps1
+++ b/scripts/verify-release-package.ps1
@@ -147,202 +147,3 @@ try {
 finally {
     Remove-Item -LiteralPath $temp -Recurse -Force -ErrorAction SilentlyContinue
 }
- -or
-        $build.version -notmatch '^1\\.4\\.1(?:-[A-Za-z0-9.]+)?
-    # shipped in the installed package. Prevent an obsolete portable-only
-    # PDF from passing release verification after setup guidance changes.
-    $manualManifest = Get-Content (Join-Path $temp "ManualSources.json") -Raw | ConvertFrom-Json
-    if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") {
-        throw "Manual verification failed: missing provenance format."
-    }
-    if (@($manualManifest.files).Count -ne 2) {
-        throw "Manual verification failed: two synchronized PDF editions expected."
-    }
-    foreach ($entry in $manualManifest.files) {
-        $markdownName = switch ($entry.source) {
-            "QUICK_START.md" { "Quick Start.md" }
-            "USER_MANUAL.md" { "User Manual.md" }
-            default { throw "Unexpected PDF manual source: $($entry.source)" }
-        }
-        if ($entry.pdf -notin @("Quick Start.pdf", "User Manual.pdf")) {
-            throw "Unexpected generated PDF filename: $($entry.pdf)"
-        }
-        $markdownSha = (Get-FileHash (Join-Path $temp $markdownName) -Algorithm SHA256).Hash
-        $pdfSha = (Get-FileHash (Join-Path $temp $entry.pdf) -Algorithm SHA256).Hash
-        if ($markdownSha -ne $entry.sourceSha256 -or $pdfSha -ne $entry.pdfSha256) {
-            throw "Manual source/PDF hash mismatch for $markdownName."
-        }
-    }
-
-    if (Test-Path (Join-Path $temp "LICENSE-APACHE-2.0")) {
-        throw "Package verification failed. Historical Apache license is presented as a current package license."
-    }
-
-    $license = Get-Content (Join-Path $temp "LICENSE.txt") -Raw
-    if ($license -notmatch 'GNU GENERAL PUBLIC LICENSE' -or $license -notmatch 'Version 3, 29 June 2007') {
-        throw "Package verification failed. LICENSE.txt is not GNU GPL version 3."
-    }
-    if ($license -match 'Apache License') {
-        throw "Package verification failed. LICENSE.txt contains stale Apache wording."
-    }
-
-    $commercial = Get-Content (Join-Path $temp "COMMERCIAL-LICENSE.md") -Raw
-    if ($commercial -notmatch 'not itself a commercial license' -or $commercial -notmatch 'grants no additional rights') {
-        throw "Package verification failed. Commercial notice does not state its non-grant boundary."
-    }
-
-    $licensing = Get-Content (Join-Path $temp "Licensing.md") -Raw
-    foreach ($marker in @('GPL-3.0-or-later', '85d43a0fe58a5888a9e8008c168ab76d2333ea87', 'archive/apache-2.0-final')) {
-        if ($licensing -notmatch [regex]::Escape($marker)) {
-            throw "Package verification failed. Licensing.md is missing: $marker"
-        }
-    }
-
-    $batFiles = Get-ChildItem -Path $temp -Recurse -File -Filter "*.bat"
-    if ($batFiles.Count -gt 0) {
-        $names = ($batFiles | ForEach-Object { $_.FullName.Substring($temp.Length + 1) }) -join ', '
-        throw "Package verification failed. Batch files are not allowed: $names"
-    }
-
-    $exeFiles = Get-ChildItem -Path $temp -File -Filter "*.exe"
-    if ($exeFiles.Count -ne 1 -or $exeFiles[0].Name -ne "$AppName.exe") {
-        $names = ($exeFiles | Select-Object -ExpandProperty Name) -join ', '
-        throw "Package verification failed. Expected exactly one root EXE: $AppName.exe. Found: $names"
-    }
-
-    # The GUI remains the only ROOT executable. A separate, self-contained
-    # read-only inspector is required so field users can screen their actual
-    # PCAP+SCL evidence without installing the developer SDK.
-    $interopExe = Join-Path $temp "Bench/ProcessBus.InteropCli.exe"
-    if ((Get-Item $interopExe).Length -lt 1024) {
-        throw "Package verification failed. The interop CLI executable is too small."
-    }
-    $interopHelp = & $interopExe --help 2>&1 | Out-String
-    if ($LASTEXITCODE -ne 0 -or $interopHelp -notmatch 'offline interop screening') {
-        throw "Package verification failed. Bundled offline interop CLI cannot run --help."
-    }
-    $benchGuide = Get-Content (Join-Path $temp "Bench/START_HERE.md") -Raw
-    foreach ($marker in @('ProcessBus.InteropCli.exe', '60-minute', 'TAP/SPAN', 'AR_DIAG_SV1')) {
-        if ($benchGuide -notmatch [regex]::Escape($marker)) {
-            throw "Package verification failed. Physical bench quickstart is missing: $marker"
-        }
-    }
-
-    $size = (Get-Item (Join-Path $temp "$AppName.exe")).Length
-    if ($size -lt 1024) { throw "Package verification failed. Executable looks too small: $size bytes" }
-
-    foreach ($pdfName in @("Quick Start.pdf", "User Manual.pdf")) {
-        if ((Get-Item (Join-Path $temp $pdfName)).Length -lt 2048) {
-            throw "Package verification failed. PDF document looks too small: $pdfName"
-        }
-    }
-
-    Write-Host "Package verification passed: $PackageZip"
-    Write-Host "Community license: GPL-3.0-or-later"
-}
-finally {
-    Remove-Item -LiteralPath $temp -Recurse -Force -ErrorAction SilentlyContinue
-}
-) {
-        throw "Missing or invalid candidate source provenance."
-    }
-    $exeHash = (Get-FileHash (Join-Path $temp "$AppName.exe") -Algorithm SHA256).Hash.ToLowerInvariant()
-    if ($exeHash -cne $build.executableSha256) {
-        throw "Packaged EXE hash differs from BuildInfo.json; refuse ambiguous version."
-    }
-
-    # The PDFs must be generated from exactly the Markdown editions also
-    # shipped in the installed package. Prevent an obsolete portable-only
-    # PDF from passing release verification after setup guidance changes.
-    $manualManifest = Get-Content (Join-Path $temp "ManualSources.json") -Raw | ConvertFrom-Json
-    if ($manualManifest.format -ne "ProcessBusInsight-offline-manuals-v1") {
-        throw "Manual verification failed: missing provenance format."
-    }
-    if (@($manualManifest.files).Count -ne 2) {
-        throw "Manual verification failed: two synchronized PDF editions expected."
-    }
-    foreach ($entry in $manualManifest.files) {
-        $markdownName = switch ($entry.source) {
-            "QUICK_START.md" { "Quick Start.md" }
-            "USER_MANUAL.md" { "User Manual.md" }
-            default { throw "Unexpected PDF manual source: $($entry.source)" }
-        }
-        if ($entry.pdf -notin @("Quick Start.pdf", "User Manual.pdf")) {
-            throw "Unexpected generated PDF filename: $($entry.pdf)"
-        }
-        $markdownSha = (Get-FileHash (Join-Path $temp $markdownName) -Algorithm SHA256).Hash
-        $pdfSha = (Get-FileHash (Join-Path $temp $entry.pdf) -Algorithm SHA256).Hash
-        if ($markdownSha -ne $entry.sourceSha256 -or $pdfSha -ne $entry.pdfSha256) {
-            throw "Manual source/PDF hash mismatch for $markdownName."
-        }
-    }
-
-    if (Test-Path (Join-Path $temp "LICENSE-APACHE-2.0")) {
-        throw "Package verification failed. Historical Apache license is presented as a current package license."
-    }
-
-    $license = Get-Content (Join-Path $temp "LICENSE.txt") -Raw
-    if ($license -notmatch 'GNU GENERAL PUBLIC LICENSE' -or $license -notmatch 'Version 3, 29 June 2007') {
-        throw "Package verification failed. LICENSE.txt is not GNU GPL version 3."
-    }
-    if ($license -match 'Apache License') {
-        throw "Package verification failed. LICENSE.txt contains stale Apache wording."
-    }
-
-    $commercial = Get-Content (Join-Path $temp "COMMERCIAL-LICENSE.md") -Raw
-    if ($commercial -notmatch 'not itself a commercial license' -or $commercial -notmatch 'grants no additional rights') {
-        throw "Package verification failed. Commercial notice does not state its non-grant boundary."
-    }
-
-    $licensing = Get-Content (Join-Path $temp "Licensing.md") -Raw
-    foreach ($marker in @('GPL-3.0-or-later', '85d43a0fe58a5888a9e8008c168ab76d2333ea87', 'archive/apache-2.0-final')) {
-        if ($licensing -notmatch [regex]::Escape($marker)) {
-            throw "Package verification failed. Licensing.md is missing: $marker"
-        }
-    }
-
-    $batFiles = Get-ChildItem -Path $temp -Recurse -File -Filter "*.bat"
-    if ($batFiles.Count -gt 0) {
-        $names = ($batFiles | ForEach-Object { $_.FullName.Substring($temp.Length + 1) }) -join ', '
-        throw "Package verification failed. Batch files are not allowed: $names"
-    }
-
-    $exeFiles = Get-ChildItem -Path $temp -File -Filter "*.exe"
-    if ($exeFiles.Count -ne 1 -or $exeFiles[0].Name -ne "$AppName.exe") {
-        $names = ($exeFiles | Select-Object -ExpandProperty Name) -join ', '
-        throw "Package verification failed. Expected exactly one root EXE: $AppName.exe. Found: $names"
-    }
-
-    # The GUI remains the only ROOT executable. A separate, self-contained
-    # read-only inspector is required so field users can screen their actual
-    # PCAP+SCL evidence without installing the developer SDK.
-    $interopExe = Join-Path $temp "Bench/ProcessBus.InteropCli.exe"
-    if ((Get-Item $interopExe).Length -lt 1024) {
-        throw "Package verification failed. The interop CLI executable is too small."
-    }
-    $interopHelp = & $interopExe --help 2>&1 | Out-String
-    if ($LASTEXITCODE -ne 0 -or $interopHelp -notmatch 'offline interop screening') {
-        throw "Package verification failed. Bundled offline interop CLI cannot run --help."
-    }
-    $benchGuide = Get-Content (Join-Path $temp "Bench/START_HERE.md") -Raw
-    foreach ($marker in @('ProcessBus.InteropCli.exe', '60-minute', 'TAP/SPAN', 'AR_DIAG_SV1')) {
-        if ($benchGuide -notmatch [regex]::Escape($marker)) {
-            throw "Package verification failed. Physical bench quickstart is missing: $marker"
-        }
-    }
-
-    $size = (Get-Item (Join-Path $temp "$AppName.exe")).Length
-    if ($size -lt 1024) { throw "Package verification failed. Executable looks too small: $size bytes" }
-
-    foreach ($pdfName in @("Quick Start.pdf", "User Manual.pdf")) {
-        if ((Get-Item (Join-Path $temp $pdfName)).Length -lt 2048) {
-            throw "Package verification failed. PDF document looks too small: $pdfName"
-        }
-    }
-
-    Write-Host "Package verification passed: $PackageZip"
-    Write-Host "Community license: GPL-3.0-or-later"
-}
-finally {
-    Remove-Item -LiteralPath $temp -Recurse -Force -ErrorAction SilentlyContinue
-}

From 03fc3657f2ba21df2bc570d2198c59bb2f2be2dc Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 15:12:43 +0700
Subject: [PATCH 125/148] Remove accidental duplicate installer smoke validator
 tail

---
 scripts/verify-windows-installer.ps1 | 25 -------------------------
 1 file changed, 25 deletions(-)

diff --git a/scripts/verify-windows-installer.ps1 b/scripts/verify-windows-installer.ps1
index 33f05b38..0ce8a271 100644
--- a/scripts/verify-windows-installer.ps1
+++ b/scripts/verify-windows-installer.ps1
@@ -101,28 +101,3 @@ finally {
         Remove-Item -LiteralPath $root -Recurse -Force -ErrorAction SilentlyContinue
     }
 }
-) {
-            throw 'Installed build provenance invalid.'
-        }
-        $exeHash = (Get-FileHash -LiteralPath (Join-Path $installDir 'ProcessBusInsight.exe') -Algorithm SHA256).Hash.ToLowerInvariant()
-        if ($exeHash -cne $build.executableSha256) {
-            throw 'Installed executable hash does not match the build provenance.'
-        }
-        Write-Host "Installed payload and offline manuals verified (run $attempt / 2)."
-    }
-
-    $uninstallArguments = @('/VERYSILENT', '/SUPPRESSMSGBOXES', '/NORESTART',
-        ('/LOG="' + (Join-Path $logDir 'uninstall.log') + '"'))
-    $process = Start-Process -FilePath $uninstallPath -ArgumentList $uninstallArguments -PassThru -Wait
-    if ($process.ExitCode -ne 0) { throw "Silent uninstall failed: exit $($process.ExitCode)." }
-    if (Test-Path -LiteralPath (Join-Path $installDir 'ProcessBusInsight.exe')) {
-        throw 'Uninstaller left the installed main executable behind.'
-    }
-    Write-Host 'Installer verification passed: install, same-version repair, offline PDFs, uninstall.'
-}
-finally {
-    # Only the uniquely generated ephemeral smoke path is removed.
-    if (Test-Path -LiteralPath $root) {
-        Remove-Item -LiteralPath $root -Recurse -Force -ErrorAction SilentlyContinue
-    }
-}

From fc2d952d997331ed8e164a73c313669afed5f052 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 17:58:13 +0700
Subject: [PATCH 126/148] Add bounded source-faithful diagnostic event
 presentation aggregation

---
 .../Presentation/DiagnosticEventSummarizer.cs | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs

diff --git a/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
new file mode 100644
index 00000000..69e5d473
--- /dev/null
+++ b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
@@ -0,0 +1,48 @@
+using ProcessBus.Core.Models;
+
+namespace ProcessBus.Core.Presentation;
+
+/// <summary>
+/// Bounded presentation projection only: forensic events are never modified or
+/// discarded. Group exact repeated messages from the same severity/source,
+/// keeping the newest timestamp and number of occurrences in the visible
+/// window. Deliberately do not normalize technical identifiers or numbers.
+/// </summary>
+public static class DiagnosticEventSummarizer
+{
+    public const int MaxSourceRows = 200;
+
+    public static IReadOnlyList<DiagnosticEventItem> Summarize(
+        IReadOnlyList<DiagnosticEventItem> newestFirst)
+    {
+        if (newestFirst.Count == 0)
+            return Array.Empty<DiagnosticEventItem>();
+
+        var result = new List<DiagnosticEventItem>(Math.Min(newestFirst.Count, MaxSourceRows));
+        var byKey = new Dictionary<(string Severity, string Message, string Source), DiagnosticEventItem>();
+        for (var i = 0; i < newestFirst.Count && i < MaxSourceRows; i++)
+        {
+            var source = newestFirst[i];
+            var key = (source.Severity, source.Message, source.SourceText);
+            if (byKey.TryGetValue(key, out var existing))
+            {
+                existing.OccurrenceCount++;
+                if (source.TimestampUtc < existing.FirstOccurrenceUtc)
+                    existing.FirstOccurrenceUtc = source.TimestampUtc;
+                continue;
+            }
+
+            var item = new DiagnosticEventItem
+            {
+                TimestampUtc = source.TimestampUtc,
+                FirstOccurrenceUtc = source.TimestampUtc,
+                Severity = source.Severity,
+                Message = source.Message,
+                OccurrenceCount = 1
+            };
+            result.Add(item);
+            byKey.Add(key, item);
+        }
+        return result;
+    }
+}

From 9ea443e9bdbf957e53610c8a7a7825b3a2bef364 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 17:58:30 +0700
Subject: [PATCH 127/148] Add non-destructive grouped-event occurrence metadata
 for calm diagnostics UI

---
 src/ProcessBus.Core/Models/DiagnosticEventItem.cs | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/src/ProcessBus.Core/Models/DiagnosticEventItem.cs b/src/ProcessBus.Core/Models/DiagnosticEventItem.cs
index 9043d134..deec440a 100644
--- a/src/ProcessBus.Core/Models/DiagnosticEventItem.cs
+++ b/src/ProcessBus.Core/Models/DiagnosticEventItem.cs
@@ -5,6 +5,15 @@ public sealed class DiagnosticEventItem
     public DateTime TimestampUtc { get; set; }
     public string Severity { get; set; } = "Info";
     public string Message { get; set; } = string.Empty;
+    // Aggregated presentation projection only; raw AnalyzerShellState.Events
+    // retains every original event and full forensic message.
+    public int OccurrenceCount { get; set; } = 1;
+    public DateTime FirstOccurrenceUtc { get; set; }
+    public string OccurrenceText => OccurrenceCount > 1 ? $" ×{OccurrenceCount}" : string.Empty;
+    public string EvidenceTooltip => OccurrenceCount > 1
+        ? $"{OccurrenceCount} occurrences (oldest {FirstOccurrenceUtc:HH:mm:ss.fff}, latest {TimestampUtc:HH:mm:ss.fff})\n{Message}"
+        : Message;
+
 
     // Separate a concise finding from its unchanged forensic message.
     // This is presentation only: the full evidence remains in Message.

From f658615160bb1fd42e98955578e3daa77a3c1f31 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 17:58:55 +0700
Subject: [PATCH 128/148] Bind diagnostics to bounded event summaries, retain
 raw evidence as SSOT

---
 .../ViewModels/MainWindowViewModel.cs         | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index 57f0efbd..8db12eeb 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -126,6 +126,10 @@ private set
     private readonly Dictionary<string, GooseMessageItem> _lastGooseState = new();
     private readonly Queue<GooseTrafficRow> _pendingGooseRows = new();
     private readonly Queue<DiagnosticEventItem> _pendingDiagnosticEvents = new();
+    private readonly ObservableCollection<DiagnosticEventItem> _calmDiagnosticEvents = new();
+    private DiagnosticEventItem? _lastAggregatedTopEvent;
+    private DiagnosticEventItem? _lastAggregatedBottomEvent;
+    private int _lastAggregatedEventCount = -1;
     private DateTime? _lastGooseHistoryTimeUtc;
     private DateTime _gooseInteractionUntilUtc = DateTime.MinValue;
     private bool _isGooseInteractionActive;
@@ -773,6 +777,9 @@ private void RaiseModeStateChanged()
 
     public ObservableCollection<NetworkAdapterInfo> Adapters { get; }
     public ObservableCollection<SvStreamItem> Streams { get; }
+    // Raw evidence remains in Events. Only Diagnostics uses this bounded
+    // grouped presentation projection, rebuilt when the forensic window changes.
+    public ObservableCollection<DiagnosticEventItem> CalmDiagnosticEvents => _calmDiagnosticEvents;
     public ObservableCollection<DiagnosticEventItem> Events { get; }
     public SvStreamItem? SelectedStream
     {
@@ -2113,6 +2120,8 @@ private async Task RefreshAsync()
                 BufferDiagnosticEvents(snapshot.Events);
 
             _state.ApplySnapshot(snapshot, mergeEvents: IsDiagnosticsTabActive);
+            if (IsDiagnosticsTabActive)
+                UpdateCalmDiagnosticEvents();
             PruneStaleStreamWorkspaces(now);
             UpdateStreamStaleState();
             if (now - _lastDiagnosticTargetRefreshUtc >= TimeSpan.FromMilliseconds(PassiveUiRefreshMs))
@@ -4511,6 +4520,27 @@ private void DeferGooseUiFlush()
         _gooseInteractionUntilUtc = DateTime.UtcNow.Add(GooseInteractionQuietPeriod);
     }
 
+    private void UpdateCalmDiagnosticEvents()
+    {
+        var count = Events.Count;
+        var top = count == 0 ? null : Events[0];
+        var bottom = count == 0 ? null : Events[^1];
+        if (count == _lastAggregatedEventCount &&
+            ReferenceEquals(top, _lastAggregatedTopEvent) &&
+            ReferenceEquals(bottom, _lastAggregatedBottomEvent))
+            return;
+
+        _lastAggregatedEventCount = count;
+        _lastAggregatedTopEvent = top;
+        _lastAggregatedBottomEvent = bottom;
+        var projection = DiagnosticEventSummarizer.Summarize(Events);
+        // WPF display is capped at 200 rows and rebuilt only when new evidence
+        // arrives, never on the high-rate capture or phasor rendering thread.
+        _calmDiagnosticEvents.Clear();
+        foreach (var item in projection)
+            _calmDiagnosticEvents.Add(item);
+    }
+
     private void BufferDiagnosticEvents(IReadOnlyList<DiagnosticEventItem> events)
     {
         foreach (var item in events)

From d8a7a4f7fd4627b28faced9ac7db2424d5e7244f Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:00:42 +0700
Subject: [PATCH 129/148] Polish engineering readouts and bound diagnostic
 event counts with full forensic tooltip

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 45 ++++++++++++++------------
 1 file changed, 24 insertions(+), 21 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index 549860ce..ca5b89fe 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -2517,7 +2517,7 @@
                                             CornerRadius="9" Padding="12,10" Margin="0,0,8,0"
                                             ToolTip="{Binding Diagnostics.JitterStatusText}">
                                         <StackPanel>
-                                            <TextBlock Text="ARRIVAL JITTER" Foreground="#9BC7E4" FontSize="10.5"
+                                            <TextBlock Text="ARRIVAL Δ · HOST" Foreground="#9BC7E4" FontSize="10.5"
                                                        FontWeight="SemiBold"/>
                                             <TextBlock Text="{Binding Diagnostics.SvJitterHeadlineText}"
                                                        Foreground="#F3F9FF" FontSize="20" FontWeight="SemiBold"
@@ -2550,9 +2550,9 @@
 
                                     <Border Background="#0F2538" BorderBrush="#294864" BorderThickness="1"
                                             CornerRadius="9" Padding="12,10" Margin="0,0,8,0"
-                                            ToolTip="Missing sample count comes from selected SV smpCnt continuity; decoder rejects are capture-wide.">
+                                            ToolTip="Gaps are inferred from selected SV smpCnt transitions, not independently confirmed Ethernet packet losses. Decoder rejects are capture-wide.">
                                         <StackPanel>
-                                            <TextBlock Text="MISSING SAMPLES" Foreground="#9BC7E4" FontSize="10.5"
+                                            <TextBlock Text="INFERRED SV GAPS" Foreground="#9BC7E4" FontSize="10.5"
                                                        FontWeight="SemiBold"/>
                                             <TextBlock Text="{Binding Diagnostics.SvMissingSamplesText}"
                                                        Foreground="#F3F9FF" FontSize="20" FontWeight="SemiBold"
@@ -2921,7 +2921,7 @@
 
                                         
 
-                                        <ListView ItemsSource="{Binding Events}"
+                                        <ListView ItemsSource="{Binding CalmDiagnosticEvents}"
                                               SelectedItem="{Binding SelectedDiagnosticEvent, Mode=TwoWay}"
                                               VirtualizingPanel.IsVirtualizing="True"
                                               VirtualizingPanel.VirtualizationMode="Recycling"
@@ -2965,13 +2965,16 @@
                                                         <TextBlock Grid.Column="2" Text="{Binding SourceText}"
                                                                    Foreground="#9EBBD4" FontSize="11"
                                                                    VerticalAlignment="Center" TextTrimming="CharacterEllipsis"
-                                                                   ToolTip="{Binding Message}" Margin="0,0,12,0"/>
-                                                        <TextBlock Grid.Column="3" Text="{Binding FindingText}"
-                                                                   Foreground="{StaticResource TextPrimaryBrush}"
-                                                                   FontSize="11.5" FontWeight="SemiBold"
-                                                                   TextTrimming="CharacterEllipsis"
-                                                                   VerticalAlignment="Center"
-                                                                   ToolTip="{Binding Message}"/>
+                                                                   ToolTip="{Binding EvidenceTooltip}" Margin="0,0,12,0"/>
+                                                        <StackPanel Grid.Column="3" Orientation="Horizontal" VerticalAlignment="Center"
+                                                                    ToolTip="{Binding EvidenceTooltip}">
+                                                            <TextBlock Text="{Binding FindingText}"
+                                                                       Foreground="{StaticResource TextPrimaryBrush}" FontSize="11.5"
+                                                                       TextTrimming="CharacterEllipsis" VerticalAlignment="Center"/>
+                                                            <TextBlock Text="{Binding OccurrenceText}" Foreground="#84B1D0"
+                                                                       FontFamily="Consolas" FontSize="11" Margin="8,0,0,0"
+                                                                       VerticalAlignment="Center"/>
+                                                        </StackPanel>
                                                     </Grid>
                                                 </DataTemplate>
                                             </ListView.ItemTemplate>
@@ -3169,12 +3172,12 @@
                                             </Border.Style>
                                             <StackPanel HorizontalAlignment="Center" VerticalAlignment="Center"
                                                         MaxWidth="390">
-                                                <TextBlock Text="No GOOSE state changes"
+                                                <TextBlock Text="{Binding GooseEmptyTitle}"
                                                            Foreground="#E5F2FF" FontSize="15"
                                                            FontWeight="SemiBold" TextAlignment="Center"/>
                                                 <TextBlock Margin="0,8,0,0" TextAlignment="Center" TextWrapping="Wrap"
                                                            Foreground="#A6C4DB" FontSize="11.5"
-                                                           Text="Check publisher and VLAN visibility, or enable retransmissions."
+                                                           Text="{Binding GooseEmptyGuidance}"
                                                            ToolTip="An empty state-change view does not prove the publisher is offline. Confirm the adapter, SPAN/TAP path, VLAN and goID filters."/>
                                             </StackPanel>
                                         </Border>
@@ -3606,13 +3609,13 @@
                                                   ScrollViewer.HorizontalScrollBarVisibility="Auto"
                                                   ScrollViewer.VerticalScrollBarVisibility="Auto">
                                             <DataGrid.Columns>
-                                                <DataGridTextColumn Header="Time" Binding="{Binding TimeText}" Width="110"/>
-                                                <DataGridTextColumn Header="Transport" Binding="{Binding Transport}" Width="110"/>
-                                                <DataGridTextColumn Header="Message" Binding="{Binding MessageType}" Width="120"/>
-                                                <DataGridTextColumn Header="Source" Binding="{Binding Source}" Width="170"/>
-                                                <DataGridTextColumn Header="Destination" Binding="{Binding Destination}" Width="170"/>
-                                                <DataGridTextColumn Header="Domain" Binding="{Binding DomainText}" Width="70"/>
-                                                <DataGridTextColumn Header="Seq" Binding="{Binding SequenceIdText}" Width="70"/>
+                                                <DataGridTextColumn Header="Time" Binding="{Binding TimeText}" Width="103"/>
+                                                <DataGridTextColumn Header="Transport" Binding="{Binding Transport}" Width="154"/>
+                                                <DataGridTextColumn Header="Message" Binding="{Binding MessageType}" Width="100"/>
+                                                <DataGridTextColumn Header="Source" Binding="{Binding Source}" Width="160"/>
+                                                <DataGridTextColumn Header="Destination" Binding="{Binding Destination}" Width="160"/>
+                                                <DataGridTextColumn Header="Domain" Binding="{Binding DomainText}" Width="63"/>
+                                                <DataGridTextColumn Header="Seq" Binding="{Binding SequenceIdText}" Width="61"/>
                                                 <DataGridTextColumn Header="Clock ID" Binding="{Binding ClockIdentity}" Width="*"/>
                                             </DataGrid.Columns>
                                         </DataGrid>
@@ -4295,7 +4298,7 @@
                                                             <DataGridTemplateColumn Header="Signal" Width="2.35*">
                                                                 <DataGridTemplateColumn.CellTemplate>
                                                                     <DataTemplate>
-                                                                        <TextBlock Text="{Binding DisplayName}" Style="{StaticResource SclDetailCellTextStyle}"/>
+                                                                        <TextBlock Text="{Binding DisplayName}" Style="{StaticResource SclDetailCellTextStyle}" FontFamily="Consolas" FontSize="11" ToolTip="{Binding DisplayName}"/>
                                                                     </DataTemplate>
                                                                 </DataGridTemplateColumn.CellTemplate>
                                                             </DataGridTemplateColumn>

From afa4fd3c0686874c6192aea716301f2827b8162d Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:01:38 +0700
Subject: [PATCH 130/148] Make GOOSE empty states accurate for zero publishers
 vs no matching filtered events

---
 .../ViewModels/MainWindowViewModel.cs                | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index 8db12eeb..5e1d71a0 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -212,6 +212,7 @@ public bool IncludeGooseRetransmission
             OnPropertyChanged();
             OnPropertyChanged(nameof(GooseRetransmissionModeText));
             OnPropertyChanged(nameof(GooseFilterSummaryText));
+            OnPropertyChanged(nameof(GooseEmptyGuidance));
             _gooseHistoryView.Refresh();
         }
     }
@@ -227,6 +228,7 @@ public string GoosePublisherFilterText
             _goosePublisherFilterText = value ?? string.Empty;
             OnPropertyChanged();
             OnPropertyChanged(nameof(GooseFilterSummaryText));
+            OnPropertyChanged(nameof(GooseEmptyGuidance));
             _gooseHistoryView.Refresh();
         }
     }
@@ -259,10 +261,18 @@ public string SelectedGooseIdFilter
             _selectedGooseIdFilter = next;
             OnPropertyChanged();
             OnPropertyChanged(nameof(GooseFilterSummaryText));
+            OnPropertyChanged(nameof(GooseEmptyGuidance));
             _gooseHistoryView.Refresh();
         }
     }
 
+    public string GooseEmptyTitle => _gooseMessages.Count == 0
+        ? "No GOOSE publisher observed" : "No matching GOOSE events";
+    public string GooseEmptyGuidance => _gooseMessages.Count == 0
+        ? "Check physical adapter, VLAN visibility and publisher traffic."
+        : IncludeGooseRetransmission
+            ? "Review the selected GOOSE ID filter and capture path."
+            : "No matching state changes. Include retransmissions to inspect traffic activity.";
     public string GooseRetransmissionModeText => IncludeGooseRetransmission ? "Retrans ON" : "Retrans OFF";
     public string GoosePublisherCountText => $"{_gooseMessages.Count} publisher{(_gooseMessages.Count == 1 ? string.Empty : "s")}";
     public string GooseFilterSummaryText
@@ -2751,6 +2761,8 @@ private void RaiseGooseProperties()
         OnPropertyChanged(nameof(GoosePublisherCountText));
         OnPropertyChanged(nameof(GooseIdFilterOptions));
         OnPropertyChanged(nameof(GooseFilterSummaryText));
+        OnPropertyChanged(nameof(GooseEmptyTitle));
+        OnPropertyChanged(nameof(GooseEmptyGuidance));
         OnPropertyChanged(nameof(SelectedGooseDatasetValues));
         OnPropertyChanged(nameof(SelectedGooseSemanticText));
         _gooseHistoryView.Refresh();

From 0ff6718a334cd00a3ebd92b28da54692807cb4f1 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:02:20 +0700
Subject: [PATCH 131/148] Remove pulsing live-dot noise; distinguish RX from
 quality warnings and fix grouped event clipping

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 44 +++++++-------------------
 1 file changed, 12 insertions(+), 32 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index ca5b89fe..aa5b709a 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -1991,30 +1991,10 @@
                                                         </Style>
                                                     </Border.Style>
                                                     <StackPanel Orientation="Horizontal">
-                                                        <Ellipse Width="6" Height="6" Fill="#2AFF9C" Margin="0,0,5,0" VerticalAlignment="Center">
-                                                            <Ellipse.Style>
-                                                                <Style TargetType="Ellipse">
-                                                                    <Setter Property="Opacity" Value="0.55"/>
-                                                                    <Style.Triggers>
-                                                                        <DataTrigger Binding="{Binding IsSelectedSvReceiving}" Value="True">
-                                                                            <DataTrigger.EnterActions>
-                                                                                <BeginStoryboard x:Name="LiveDotPulseStoryboard">
-                                                                                    <Storyboard AutoReverse="True" RepeatBehavior="Forever">
-                                                                                        <DoubleAnimation Storyboard.TargetProperty="Opacity"
-                                                                                                         From="0.45" To="1"
-                                                                                                         Duration="0:0:0.75"/>
-                                                                                    </Storyboard>
-                                                                                </BeginStoryboard>
-                                                                            </DataTrigger.EnterActions>
-                                                                            <DataTrigger.ExitActions>
-                                                                                <RemoveStoryboard BeginStoryboardName="LiveDotPulseStoryboard"/>
-                                                                            </DataTrigger.ExitActions>
-                                                                        </DataTrigger>
-                                                                    </Style.Triggers>
-                                                                </Style>
-                                                            </Ellipse.Style>
-                                                        </Ellipse>
-                                                        <TextBlock Text="LIVE"
+                                                        <Ellipse Width="6" Height="6" Fill="#2AFF9C" Opacity="0.75"
+                                                                 Margin="0,0,5,0" VerticalAlignment="Center"/>
+                                                        <TextBlock Text="RX"
+                                                                   ToolTip="SV frames arriving. Check stream LIVE · WARN separately for quality and continuity."
                                                                    FontSize="9"
                                                                    FontWeight="Bold"
                                                                    Foreground="#B9FFE0"/>
@@ -2966,15 +2946,15 @@
                                                                    Foreground="#9EBBD4" FontSize="11"
                                                                    VerticalAlignment="Center" TextTrimming="CharacterEllipsis"
                                                                    ToolTip="{Binding EvidenceTooltip}" Margin="0,0,12,0"/>
-                                                        <StackPanel Grid.Column="3" Orientation="Horizontal" VerticalAlignment="Center"
-                                                                    ToolTip="{Binding EvidenceTooltip}">
-                                                            <TextBlock Text="{Binding FindingText}"
-                                                                       Foreground="{StaticResource TextPrimaryBrush}" FontSize="11.5"
-                                                                       TextTrimming="CharacterEllipsis" VerticalAlignment="Center"/>
-                                                            <TextBlock Text="{Binding OccurrenceText}" Foreground="#84B1D0"
-                                                                       FontFamily="Consolas" FontSize="11" Margin="8,0,0,0"
+                                                        <DockPanel Grid.Column="3" LastChildFill="True" VerticalAlignment="Center"
+                                                                   ToolTip="{Binding EvidenceTooltip}">
+                                                            <TextBlock DockPanel.Dock="Right" Text="{Binding OccurrenceText}"
+                                                                       Foreground="#84B1D0" FontFamily="Consolas"
+                                                                       FontSize="11" Margin="8,0,0,0" VerticalAlignment="Center"/>
+                                                            <TextBlock Text="{Binding FindingText}" Foreground="{StaticResource TextPrimaryBrush}"
+                                                                       FontSize="11.5" TextTrimming="CharacterEllipsis"
                                                                        VerticalAlignment="Center"/>
-                                                        </StackPanel>
+                                                        </DockPanel>
                                                     </Grid>
                                                 </DataTemplate>
                                             </ListView.ItemTemplate>

From 45109bc48b757b4f375f49a1ee2c564bf52adb8b Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:03:03 +0700
Subject: [PATCH 132/148] Regress exact-event grouping, forensic preservation
 and bounded diagnostic presentation

---
 .../DiagnosticEventSummarizerTests.cs         | 66 +++++++++++++++++++
 1 file changed, 66 insertions(+)
 create mode 100644 tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs

diff --git a/tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs b/tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs
new file mode 100644
index 00000000..7d8cf90f
--- /dev/null
+++ b/tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs
@@ -0,0 +1,66 @@
+using ProcessBus.Core.Models;
+using ProcessBus.Core.Presentation;
+using Xunit;
+
+namespace ProcessBus.Tests;
+
+public sealed class DiagnosticEventSummarizerTests
+{
+    [Fact]
+    public void RepeatedExactFindingAggregatesWithoutAlteringForensicSources()
+    {
+        var now = new DateTime(2026, 10, 20, 10, 30, 0, DateTimeKind.Utc);
+        var originals = new[]
+        {
+            new DiagnosticEventItem { TimestampUtc = now, Severity = "Warning", Message = "SV arrival timing excursions >= 300 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-5), Severity = "Warning", Message = "SV arrival timing excursions >= 300 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-10), Severity = "Warning", Message = "SV arrival timing excursions >= 300 us" }
+        };
+        var view = DiagnosticEventSummarizer.Summarize(originals);
+        var summary = Assert.Single(view);
+        Assert.Equal(3, summary.OccurrenceCount);
+        Assert.Equal(" ×3", summary.OccurrenceText);
+        Assert.Equal(now, summary.TimestampUtc);
+        Assert.Equal(now.AddSeconds(-10), summary.FirstOccurrenceUtc);
+        Assert.Contains("3 occurrences", summary.EvidenceTooltip);
+        Assert.All(originals, item => Assert.Equal(1, item.OccurrenceCount));
+        Assert.NotSame(originals[0], summary);
+    }
+
+    [Fact]
+    public void DifferentSourcesSeveritiesAndEngineeringValuesRemainSeparate()
+    {
+        var now = DateTime.UtcNow;
+        var rows = new[]
+        {
+            new DiagnosticEventItem { TimestampUtc = now, Severity = "Warning", Message = "svID=SV_A; Δ=301 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-1), Severity = "Warning", Message = "svID=SV_B; Δ=301 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-2), Severity = "Warning", Message = "svID=SV_A; Δ=302 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-3), Severity = "Info", Message = "svID=SV_A; Δ=301 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-4), Severity = "Warning", Message = "svID=SV_A; Δ=301 us" },
+        };
+        var summaries = DiagnosticEventSummarizer.Summarize(rows);
+        Assert.Equal(4, summaries.Count);
+        Assert.Equal(2, summaries[0].OccurrenceCount);
+        Assert.Equal(1, summaries[1].OccurrenceCount);
+        Assert.Equal(1, summaries[2].OccurrenceCount);
+        Assert.Equal(1, summaries[3].OccurrenceCount);
+    }
+
+    [Fact]
+    public void ProjectionIsBoundedEvenWhenSourceIsOversized()
+    {
+        var rows = Enumerable.Range(0, 500)
+            .Select(i => new DiagnosticEventItem
+            {
+                TimestampUtc = new DateTime(2026, 10, 20, 12, 0, 0, DateTimeKind.Utc).AddSeconds(-i),
+                Severity = "Info",
+                Message = "event " + i
+            })
+            .ToArray();
+        var summaries = DiagnosticEventSummarizer.Summarize(rows);
+        Assert.Equal(DiagnosticEventSummarizer.MaxSourceRows, summaries.Count);
+        Assert.Equal("event 0", summaries[0].Message);
+        Assert.Equal("event 199", summaries[^1].Message);
+    }
+}

From 0ff80a9c08cfce0782e5ff936e6781b556544951 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:03:52 +0700
Subject: [PATCH 133/148] Reconcile grouped diagnostic rows incrementally to
 avoid live ListView flicker

---
 .../ViewModels/MainWindowViewModel.cs         | 38 ++++++++++++++++---
 1 file changed, 33 insertions(+), 5 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index 5e1d71a0..e5f6e773 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -4546,11 +4546,39 @@ private void UpdateCalmDiagnosticEvents()
         _lastAggregatedTopEvent = top;
         _lastAggregatedBottomEvent = bottom;
         var projection = DiagnosticEventSummarizer.Summarize(Events);
-        // WPF display is capped at 200 rows and rebuilt only when new evidence
-        // arrives, never on the high-rate capture or phasor rendering thread.
-        _calmDiagnosticEvents.Clear();
-        foreach (var item in projection)
-            _calmDiagnosticEvents.Add(item);
+        // Incrementally reconcile at most 200 display rows. Recreating every
+        // ListView item on each arrival would flicker, reset scroll and defeat
+        // the calm design. Raw forensic Events remain untouched.
+        static bool SameKey(DiagnosticEventItem a, DiagnosticEventItem b) =>
+            a.Severity == b.Severity && a.Message == b.Message &&
+            a.SourceText == b.SourceText;
+
+        for (var i = 0; i < projection.Count; i++)
+        {
+            var next = projection[i];
+            var found = -1;
+            for (var j = i; j < _calmDiagnosticEvents.Count; j++)
+            {
+                if (!SameKey(_calmDiagnosticEvents[j], next))
+                    continue;
+                found = j;
+                break;
+            }
+            if (found < 0)
+                _calmDiagnosticEvents.Insert(i, next);
+            else
+            {
+                if (found != i)
+                    _calmDiagnosticEvents.Move(found, i);
+                var existing = _calmDiagnosticEvents[i];
+                if (existing.OccurrenceCount != next.OccurrenceCount ||
+                    existing.TimestampUtc != next.TimestampUtc ||
+                    existing.FirstOccurrenceUtc != next.FirstOccurrenceUtc)
+                    _calmDiagnosticEvents[i] = next;
+            }
+        }
+        while (_calmDiagnosticEvents.Count > projection.Count)
+            _calmDiagnosticEvents.RemoveAt(_calmDiagnosticEvents.Count - 1);
     }
 
     private void BufferDiagnosticEvents(IReadOnlyList<DiagnosticEventItem> events)

From 33b5629e6509a7f4dcf41ef61dd85e015f5e25cd Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:04:22 +0700
Subject: [PATCH 134/148] Fix clipped U/I scale controls without adding toolbar
 rows or enlarging cards

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index aa5b709a..e61cfa5d 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -2049,30 +2049,32 @@
 
                                             <!-- VOLTAGE -->
                                             <TextBlock Margin="0,6,6,0"
-               Text="Voltage scale"
+               Text="U scale"
                Foreground="#D6E8F8"
                FontWeight="SemiBold"
                FontSize="11.5"/>
-                                            <ComboBox Width="120"
+                                            <ComboBox Width="154"
               Margin="0,0,10,0"
               Style="{StaticResource CompactComboBoxStyle}"
               Foreground="#FFFFFF"
               FontWeight="SemiBold"
               ItemsSource="{Binding WaveformVoltageScaleOptions}"
-              SelectedItem="{Binding WaveformVoltageScale, Mode=TwoWay, UpdateSourceTrigger=PropertyChanged}"/>
+              SelectedItem="{Binding WaveformVoltageScale, Mode=TwoWay, UpdateSourceTrigger=PropertyChanged}"
+               ToolTip="{Binding WaveformVoltageScale}"/>
 
                                             <!-- CURRENT -->
                                             <TextBlock Margin="0,6,6,0"
-               Text="Current scale"
+               Text="I scale"
                Foreground="#D6E8F8"
                FontWeight="SemiBold"
                FontSize="11.5"/>
-                                            <ComboBox Width="100"
+                                            <ComboBox Width="142"
               Style="{StaticResource CompactComboBoxStyle}"
               Foreground="#FFFFFF"
               FontWeight="SemiBold"
               ItemsSource="{Binding WaveformCurrentScaleOptions}"
-              SelectedItem="{Binding WaveformCurrentScale, Mode=TwoWay, UpdateSourceTrigger=PropertyChanged}"/>
+              SelectedItem="{Binding WaveformCurrentScale, Mode=TwoWay, UpdateSourceTrigger=PropertyChanged}"
+               ToolTip="{Binding WaveformCurrentScale}"/>
 
                                         </WrapPanel>
                                         <controls:WaveformPanelControl Grid.Row="2"

From 59d998a8c2cde456b7fbb09bbafa43f920a8b252 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:05:46 +0700
Subject: [PATCH 135/148] Record immutable pre-polish SHA and scoped
 engineering-UX acceptance gates

---
 .../CALM_ENGINEERING_POLISH_2026-10-20.md     | 33 +++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 docs/validation/CALM_ENGINEERING_POLISH_2026-10-20.md

diff --git a/docs/validation/CALM_ENGINEERING_POLISH_2026-10-20.md b/docs/validation/CALM_ENGINEERING_POLISH_2026-10-20.md
new file mode 100644
index 00000000..dbfde5b6
--- /dev/null
+++ b/docs/validation/CALM_ENGINEERING_POLISH_2026-10-20.md
@@ -0,0 +1,33 @@
+# Calm Engineering Polish — frozen baseline and acceptance (20 October 2026)
+
+## Immutable pre-polish checkpoint
+
+- Repository: `masarray/DigSubAnalyzer`
+- Preserved branch: `checkpoint/pre-calm-engineering-polish-20261020`
+- Exact pre-polish commit: `03fc3657f2ba21df2bc570d2198c59bb2f2be2dc`
+- At checkpoint time: CI, Runtime Architecture, Runtime Stability, CodeQL, Dependency Security Review and Release Candidate Package **all passed**.
+- Active development PR: #47 (`fix/phasor-ssot-responsive-lightweight-20261019`); do **not** merge to main or publish stable based solely on visual/CI evidence.
+- Must preserve: 8-DIP interpanel geometry, baseline phasor exact-tip callouts, channel-specific HELD/MISSING, selected-stream SSOT, honest Npcap/PTP evidence, Inno upgrade/repair paths.
+
+## Scoped calm polish
+
+1. **Diagnostics:** bounded, exact-message grouping across up to 200 original capture events; grouped count and latest/earliest timestamp as presentation only. Original `AnalyzerShellState.Events` is intact. Incremental ListView updates minimize flicker.
+2. **Timing interpretation:** signed host/Npcap interarrival variation is called `ARRIVAL Δ · HOST`; smpCnt-derived missing sample gaps are explicitly **inferred**, not independently confirmed packet loss.
+3. **Waveforms:** green static `RX` indicator means packet reception, not clean SV integrity. No pulsing storyboard or extra timer. Existing amber `LIVE · WARN` is authoritative for stream health.
+4. **Analyzer controls:** electrical U/I scale controls receive adequate width and full-value tooltips, without enlarging panels or recomputing samples.
+5. **PTP:** fit protocol transport text and preserve event identities, timestamps, clock evidence and source selection.
+6. **GOOSE:** correct no-publisher vs filtered-no-event empty state, preserving state-change-only default and observable bindings.
+7. **SCL:** readable compact monospace engineering references with full-reference hover text.
+
+## Quality gates
+
+- [ ] Exact latest SHA Windows build and entire xUnit suite green
+- [ ] Existing WPF layout geometry regression remains green
+- [ ] Positive/negative event aggregation tests (same messages coalesce; different source, severity or engineering values remain separate; bounded at 200)
+- [ ] Runtime Architecture and Runtime Stability green
+- [ ] CodeQL and Dependency Security Review green
+- [ ] Exact SHA Inno installer built; install/repair/uninstall and executable provenance/hash verification green
+- [ ] User field screenshots at 100%, 125% and 150% DPI, with capture running and empty states
+- [ ] Physical 60-minute target NIC/FAT gate remains separate; no stable publication without it
+
+No visual screenshot or CI can establish measurement calibration, end-device subscriber state, precise PTP clock lock, or actual packet loss attribution from host-only timestamps.

From 754ec5d850b1d2b1f7572db8b17f484f103b6681 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 18:08:27 +0700
Subject: [PATCH 136/148] Avoid labeling inferred smpCnt gaps as confirmed
 Ethernet packet loss

---
 src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index e5f6e773..e1a01179 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -1675,12 +1675,13 @@ public string WaveformCurrentScale
         : _outOfSequenceCount > 0 ? "JUMP"
         : "CONTINUOUS";
 
+    // Derived from SV smpCnt continuity, not independent NIC-loss proof.
     public string PacketLossText =>
         _streamStale
-            ? "Loss: stream stale"
+            ? "smpCnt: stream stale"
             : _packetLossPercent < 0.01
-                ? "Loss: OK"
-                : $"Loss: {_packetLossPercent:0.00}%";
+                ? "smpCnt gaps: none"
+                : $"smpCnt gaps: {_packetLossPercent:0.00}%";
 
     public string OutOfSequenceText =>
         _outOfSequenceCount == 0

From 39c74c786d95a8032acddffe31291f57c6eb8cf6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 20:16:17 +0700
Subject: [PATCH 137/148] Group recognized periodic SV jitter reports by
 severity and svID, not volatile counters

---
 .../Presentation/DiagnosticEventSummarizer.cs | 33 +++++++++++++++----
 1 file changed, 26 insertions(+), 7 deletions(-)

diff --git a/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
index 69e5d473..3e53caa9 100644
--- a/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
+++ b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
@@ -3,14 +3,30 @@
 namespace ProcessBus.Core.Presentation;
 
 /// <summary>
-/// Bounded presentation projection only: forensic events are never modified or
-/// discarded. Group exact repeated messages from the same severity/source,
-/// keeping the newest timestamp and number of occurrences in the visible
-/// window. Deliberately do not normalize technical identifiers or numbers.
+/// Bounded, source-faithful UI projection of up to 200 newest forensic reports.
+/// Raw events and their full evidence are never edited. Only known periodic
+/// report families may aggregate despite changing detail fields.
 /// </summary>
 public static class DiagnosticEventSummarizer
 {
     public const int MaxSourceRows = 200;
+    private const string SvArrivalExcursionTitle = "SV arrival timing excursions >= 300 us";
+
+    /// <summary>
+    /// The analyzer emits periodic timing summaries with dynamic total/smpCnt/Δ.
+    /// Those are successive reports about the same fault family, not separate
+    /// categories. Keep severity and svID separate in the caller's key; never
+    /// normalize arbitrary numeric evidence or unrelated diagnostic titles.
+    /// </summary>
+    public static string GetGroupingText(string message)
+    {
+        if (message.StartsWith(SvArrivalExcursionTitle, StringComparison.Ordinal) &&
+            message.Length > SvArrivalExcursionTitle.Length &&
+            message[SvArrivalExcursionTitle.Length] == ':')
+            return SvArrivalExcursionTitle;
+
+        return message;
+    }
 
     public static IReadOnlyList<DiagnosticEventItem> Summarize(
         IReadOnlyList<DiagnosticEventItem> newestFirst)
@@ -19,11 +35,12 @@ public static IReadOnlyList<DiagnosticEventItem> Summarize(
             return Array.Empty<DiagnosticEventItem>();
 
         var result = new List<DiagnosticEventItem>(Math.Min(newestFirst.Count, MaxSourceRows));
-        var byKey = new Dictionary<(string Severity, string Message, string Source), DiagnosticEventItem>();
+        var byKey = new Dictionary<(string Severity, string Family, string Source), DiagnosticEventItem>();
         for (var i = 0; i < newestFirst.Count && i < MaxSourceRows; i++)
         {
             var source = newestFirst[i];
-            var key = (source.Severity, source.Message, source.SourceText);
+            var groupText = GetGroupingText(source.Message);
+            var key = (source.Severity, groupText, source.SourceText);
             if (byKey.TryGetValue(key, out var existing))
             {
                 existing.OccurrenceCount++;
@@ -38,11 +55,13 @@ public static IReadOnlyList<DiagnosticEventItem> Summarize(
                 FirstOccurrenceUtc = source.TimestampUtc,
                 Severity = source.Severity,
                 Message = source.Message,
-                OccurrenceCount = 1
+                OccurrenceCount = 1,
+                IsPeriodicSummary = groupText == SvArrivalExcursionTitle
             };
             result.Add(item);
             byKey.Add(key, item);
         }
+
         return result;
     }
 }

From 7213efec396e7ed5bae1a27cbe52eabe0d80a2f3 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 20:16:38 +0700
Subject: [PATCH 138/148] Distinguish periodic diagnostic report counts from
 raw SV excursion occurrences

---
 src/ProcessBus.Core/Models/DiagnosticEventItem.cs | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/ProcessBus.Core/Models/DiagnosticEventItem.cs b/src/ProcessBus.Core/Models/DiagnosticEventItem.cs
index deec440a..1315623a 100644
--- a/src/ProcessBus.Core/Models/DiagnosticEventItem.cs
+++ b/src/ProcessBus.Core/Models/DiagnosticEventItem.cs
@@ -9,9 +9,14 @@ public sealed class DiagnosticEventItem
     // retains every original event and full forensic message.
     public int OccurrenceCount { get; set; } = 1;
     public DateTime FirstOccurrenceUtc { get; set; }
-    public string OccurrenceText => OccurrenceCount > 1 ? $" ×{OccurrenceCount}" : string.Empty;
+    public bool IsPeriodicSummary { get; set; }
+    // A periodic summary already covers multiple raw excursions. Its counter
+    // measures emitted REPORTS, not samples, incidents, or packets lost.
+    public string OccurrenceText => OccurrenceCount > 1
+        ? IsPeriodicSummary ? $" ×{OccurrenceCount} reports" : $" ×{OccurrenceCount}"
+        : string.Empty;
     public string EvidenceTooltip => OccurrenceCount > 1
-        ? $"{OccurrenceCount} occurrences (oldest {FirstOccurrenceUtc:HH:mm:ss.fff}, latest {TimestampUtc:HH:mm:ss.fff})\n{Message}"
+        ? $"{OccurrenceCount} {(IsPeriodicSummary ? "periodic reports" : "occurrences")} (oldest {FirstOccurrenceUtc:HH:mm:ss.fff}, latest {TimestampUtc:HH:mm:ss.fff}). Latest full evidence:\n{Message}"
         : Message;
 
 

From ee161e15a31784c4b2bf9acb462f70514847209b Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 20:17:07 +0700
Subject: [PATCH 139/148] Keep incremental diagnostic row reconciliation
 consistent with semantic summary grouping

---
 src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
index e1a01179..24a460a1 100644
--- a/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
+++ b/src/ProcessBus.App.Wpf/ViewModels/MainWindowViewModel.cs
@@ -4550,9 +4550,14 @@ private void UpdateCalmDiagnosticEvents()
         // Incrementally reconcile at most 200 display rows. Recreating every
         // ListView item on each arrival would flicker, reset scroll and defeat
         // the calm design. Raw forensic Events remain untouched.
+        // Match the same keys as the core projection. Comparing full Message
+        // would wrongly append every periodic summary because its total and
+        // latest sample counters change on each emitted report.
         static bool SameKey(DiagnosticEventItem a, DiagnosticEventItem b) =>
-            a.Severity == b.Severity && a.Message == b.Message &&
-            a.SourceText == b.SourceText;
+            a.Severity == b.Severity &&
+            a.SourceText == b.SourceText &&
+            DiagnosticEventSummarizer.GetGroupingText(a.Message) ==
+                DiagnosticEventSummarizer.GetGroupingText(b.Message);
 
         for (var i = 0; i < projection.Count; i++)
         {

From 297bb98937e10bf537acbc9ff3f7bc8000529535 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 20:17:36 +0700
Subject: [PATCH 140/148] Only coalesce periodic SV reports with explicit
 stream identity; fail closed for ambiguous sources

---
 src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
index 3e53caa9..05b0a353 100644
--- a/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
+++ b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
@@ -22,7 +22,8 @@ public static string GetGroupingText(string message)
     {
         if (message.StartsWith(SvArrivalExcursionTitle, StringComparison.Ordinal) &&
             message.Length > SvArrivalExcursionTitle.Length &&
-            message[SvArrivalExcursionTitle.Length] == ':')
+            message[SvArrivalExcursionTitle.Length] == ':' &&
+            message.Contains("svID=", StringComparison.OrdinalIgnoreCase))
             return SvArrivalExcursionTitle;
 
         return message;

From 7b85c0e1fca52e77d94455c8ac2b92fc9f246317 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 20:18:10 +0700
Subject: [PATCH 141/148] Add positive/negative regression for volatile
 periodic SV reports, different svID and severity

---
 .../DiagnosticEventSummarizerTests.cs         | 46 +++++++++++++++++++
 1 file changed, 46 insertions(+)

diff --git a/tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs b/tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs
index 7d8cf90f..8e84504d 100644
--- a/tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs
+++ b/tests/ProcessBus.Tests/DiagnosticEventSummarizerTests.cs
@@ -47,6 +47,52 @@ public void DifferentSourcesSeveritiesAndEngineeringValuesRemainSeparate()
         Assert.Equal(1, summaries[3].OccurrenceCount);
     }
 
+
+    [Fact]
+    public void PeriodicSvExcursionReportsWithVolatileCountersCoalescePerStreamWithoutErasingRawEvidence()
+    {
+        var now = new DateTime(2026, 10, 20, 13, 10, 0, DateTimeKind.Utc);
+        const string family = "SV arrival timing excursions >= 300 us";
+        var originals = new[]
+        {
+            new DiagnosticEventItem { TimestampUtc = now, Severity = "Warning", Message = family + ": 3 event(s) in 5s, total=37. Latest: svID=ARSTACK_SV01; smpCnt=2599->2600; variation=-45.1 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-5), Severity = "Warning", Message = family + ": 4 event(s) in 5s, total=34. Latest: svID=ARSTACK_SV01; smpCnt=2399->2400; variation=202.0 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-10), Severity = "Warning", Message = family + ": 1 event(s) in 5s, total=30. Latest: svID=ARSTACK_SV02; smpCnt=399->400; variation=300.1 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-15), Severity = "Diagnostic", Message = family + ": 2 event(s) in 5s, total=28. Latest: svID=ARSTACK_SV01; smpCnt=2099->2100; variation=301.0 us" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-20), Severity = "Warning", Message = "Other problem: svID=ARSTACK_SV01; total=5" },
+            new DiagnosticEventItem { TimestampUtc = now.AddSeconds(-25), Severity = "Warning", Message = "Other problem: svID=ARSTACK_SV01; total=6" }
+        };
+
+        var grouped = DiagnosticEventSummarizer.Summarize(originals);
+        Assert.Equal(5, grouped.Count);
+        Assert.Equal(2, grouped[0].OccurrenceCount);
+        Assert.True(grouped[0].IsPeriodicSummary);
+        Assert.Equal(" ×2 reports", grouped[0].OccurrenceText);
+        Assert.Equal(now, grouped[0].TimestampUtc);
+        Assert.Equal(now.AddSeconds(-5), grouped[0].FirstOccurrenceUtc);
+        Assert.Equal(originals[0].Message, grouped[0].Message);
+        Assert.Contains("2 periodic reports", grouped[0].EvidenceTooltip);
+        Assert.Equal("ARSTACK_SV01", grouped[0].SourceText);
+        Assert.Equal("ARSTACK_SV02", grouped[1].SourceText);
+        Assert.Single(grouped.Where(x => x.Severity == "Diagnostic"));
+        Assert.Equal(2, grouped.Count(x => x.Message.StartsWith("Other problem:", StringComparison.Ordinal)));
+        Assert.All(originals, e => Assert.Equal(1, e.OccurrenceCount));
+    }
+
+    [Fact]
+    public void PeriodicReportsWithoutExplicitSvIdMustNotMergeVolatileEvidence()
+    {
+        const string family = "SV arrival timing excursions >= 300 us";
+        var rows = new[]
+        {
+            new DiagnosticEventItem { Severity = "Warning", Message = family + ": total=10; variation=300 us" },
+            new DiagnosticEventItem { Severity = "Warning", Message = family + ": total=11; variation=301 us" },
+        };
+        var grouped = DiagnosticEventSummarizer.Summarize(rows);
+        Assert.Equal(2, grouped.Count);
+        Assert.All(grouped, row => Assert.False(row.IsPeriodicSummary));
+    }
+
     [Fact]
     public void ProjectionIsBoundedEvenWhenSourceIsOversized()
     {

From da797ac12bb527bdc4dd81ba65f2e4a6a4aaeffd Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 20:19:20 +0700
Subject: [PATCH 142/148] Improve readable SCL identifiers and power figures
 without changing panel dimensions

---
 src/ProcessBus.App.Wpf/MainWindow.xaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/src/ProcessBus.App.Wpf/MainWindow.xaml b/src/ProcessBus.App.Wpf/MainWindow.xaml
index e61cfa5d..98612882 100644
--- a/src/ProcessBus.App.Wpf/MainWindow.xaml
+++ b/src/ProcessBus.App.Wpf/MainWindow.xaml
@@ -2368,30 +2368,30 @@
                                                         </DockPanel>
                                                         <UniformGrid Columns="4">
                                                             <StackPanel Margin="0,0,3,0">
-                                                                <TextBlock Text="P" Foreground="#8DAFCA" FontSize="9.5"/>
+                                                                <TextBlock Text="P" Foreground="#8DAFCA" FontSize="10"/>
                                                                 <TextBlock Text="{Binding TotalActivePowerText}" Foreground="#EEF8FF"
-                                                                           FontSize="11.2" FontFamily="Consolas"
+                                                                           FontSize="12" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding TotalActivePowerText}"/>
                                                             </StackPanel>
                                                             <StackPanel Margin="0,0,3,0">
-                                                                <TextBlock Text="Q" Foreground="#8DAFCA" FontSize="9.5"/>
+                                                                <TextBlock Text="Q" Foreground="#8DAFCA" FontSize="10"/>
                                                                 <TextBlock Text="{Binding TotalReactivePowerText}" Foreground="#EEF8FF"
-                                                                           FontSize="11.2" FontFamily="Consolas"
+                                                                           FontSize="12" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding TotalReactivePowerText}"/>
                                                             </StackPanel>
                                                             <StackPanel Margin="0,0,3,0">
-                                                                <TextBlock Text="S" Foreground="#8DAFCA" FontSize="9.5"/>
+                                                                <TextBlock Text="S" Foreground="#8DAFCA" FontSize="10"/>
                                                                 <TextBlock Text="{Binding TotalApparentPowerText}" Foreground="#EEF8FF"
-                                                                           FontSize="11.2" FontFamily="Consolas"
+                                                                           FontSize="12" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding TotalApparentPowerText}"/>
                                                             </StackPanel>
                                                             <StackPanel Margin="0,0,3,0">
-                                                                <TextBlock Text="PF" Foreground="#8DAFCA" FontSize="9.5"/>
+                                                                <TextBlock Text="PF" Foreground="#8DAFCA" FontSize="10"/>
                                                                 <TextBlock Text="{Binding PowerFactorText}" Foreground="#EEF8FF"
-                                                                           FontSize="11.2" FontFamily="Consolas"
+                                                                           FontSize="12" FontFamily="Consolas"
                                                                            TextTrimming="CharacterEllipsis"
                                                                            ToolTip="{Binding PowerFactorText}"/>
                                                             </StackPanel>
@@ -4272,7 +4272,7 @@
                                                                 <Setter Property="TextTrimming" Value="None"/>
                                                                 <Setter Property="VerticalAlignment" Value="Center"/>
                                                                 <Setter Property="LineStackingStrategy" Value="BlockLineHeight"/>
-                                                                <Setter Property="LineHeight" Value="15"/>
+                                                                <Setter Property="LineHeight" Value="16"/>
                                                             </Style>
                                                         </DataGrid.Resources>
                                                         <DataGrid.Columns>
@@ -4280,7 +4280,7 @@
                                                             <DataGridTemplateColumn Header="Signal" Width="2.35*">
                                                                 <DataGridTemplateColumn.CellTemplate>
                                                                     <DataTemplate>
-                                                                        <TextBlock Text="{Binding DisplayName}" Style="{StaticResource SclDetailCellTextStyle}" FontFamily="Consolas" FontSize="11" ToolTip="{Binding DisplayName}"/>
+                                                                        <TextBlock Text="{Binding DisplayName}" Style="{StaticResource SclDetailCellTextStyle}" FontFamily="Consolas" FontSize="12" ToolTip="{Binding DisplayName}"/>
                                                                     </DataTemplate>
                                                                 </DataGridTemplateColumn.CellTemplate>
                                                             </DataGridTemplateColumn>

From 93af541a1ed8bd7b375947c20e5571dd2cd500a3 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 20:22:30 +0700
Subject: [PATCH 143/148] Fix periodic report flag for exact-title plain
 messages; preserve existing occurrence semantics

---
 src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
index 05b0a353..269f1ed7 100644
--- a/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
+++ b/src/ProcessBus.Core/Presentation/DiagnosticEventSummarizer.cs
@@ -57,7 +57,8 @@ public static IReadOnlyList<DiagnosticEventItem> Summarize(
                 Severity = source.Severity,
                 Message = source.Message,
                 OccurrenceCount = 1,
-                IsPeriodicSummary = groupText == SvArrivalExcursionTitle
+                IsPeriodicSummary = groupText == SvArrivalExcursionTitle &&
+                    source.Message.Length > SvArrivalExcursionTitle.Length
             };
             result.Add(item);
             byKey.Add(key, item);

From 119a61e17216cbd3cafdaef90dbe91b5f1a99f8e Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Wed, 21 Oct 2026 03:51:56 +0700
Subject: [PATCH 144/148] Allow explicit GPL community stable release on main
 without falsely certifying physical FAT

---
 .github/workflows/release-package.yml | 19 ++++++-------------
 1 file changed, 6 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index 28635ee2..1246a203 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -12,11 +12,6 @@ on:
         required: true
         default: false
         type: boolean
-      field_acceptance_verified:
-        description: "I confirm documented real-NIC capture, injector agreement, and soak acceptance on the target Windows configuration"
-        required: true
-        default: false
-        type: boolean
       prerelease:
         description: Mark GitHub Release as prerelease
         required: true
@@ -75,20 +70,18 @@ jobs:
           "value=$version" | Out-File -FilePath $env:GITHUB_OUTPUT -Append -Encoding utf8
           Write-Host "Release version: $version"
 
-      # Tags can build reproducible packages, but never auto-publish an
-      # unreviewed stable release simply because a tag was pushed.
-      - name: Public release authorization gate
+      # A stable label identifies a supported community software build,
+      # NOT an IEC 61850 conformance certificate or calibrated bench result.
+      # Keep publication explicit and main-only; field FAT is transparently
+      # described in notes, but is not a gate to open-source distribution.
+      - name: Public release main branch gate
         if: ${{ github.event_name == 'workflow_dispatch' && inputs.publish_release }}
         shell: pwsh
         env:
-          FIELD_ACCEPTANCE: ${{ inputs.field_acceptance_verified }}
           RUN_REF: ${{ github.ref }}
         run: |
           if ($env:RUN_REF -ne 'refs/heads/main') {
-            throw 'Public releases must be built from the validated main branch.'
-          }
-          if ($env:FIELD_ACCEPTANCE -ne 'true') {
-            throw 'Public release blocked: field acceptance has not been explicitly verified.'
+            throw 'Public release must be built from validated main.'
           }
 
       - name: Repository health gate

From ecc24ca7d6247e8771a33546dd69ee83e85c7211 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Wed, 21 Oct 2026 03:53:36 +0700
Subject: [PATCH 145/148] Prepare confident concise public v1.4.1 stable
 release notes for open-source SMV monitoring

---
 docs/RELEASE_NOTES_v1.4.1.md | 52 +++++++++++++++++-------------------
 1 file changed, 25 insertions(+), 27 deletions(-)

diff --git a/docs/RELEASE_NOTES_v1.4.1.md b/docs/RELEASE_NOTES_v1.4.1.md
index 3fcac87a..5cefe11b 100644
--- a/docs/RELEASE_NOTES_v1.4.1.md
+++ b/docs/RELEASE_NOTES_v1.4.1.md
@@ -1,37 +1,35 @@
-# Process Bus Insight v1.4.1 — Release notes (stable publication gated)
+# Process Bus Insight v1.4.1 — Stable
 
-Proposed public Windows x64 release of **Process Bus Insight**, the receive-only IEC 61850 SV / GOOSE / PTP analyzer. **Do not publish this build as stable until the current installer passes the documented physical acceptance gate** in `docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md`.
+**Process Bus Insight** is a free, open-source Windows analyzer for monitoring IEC 61850 Sampled Values (SV/SMV), GOOSE, and Precision Time Protocol (PTP) traffic. Version 1.4.1 delivers a quieter, faster engineering workflow, multi-stream visibility, and an improved Windows installation experience.
 
-## Operator improvements
+## Highlights
 
-- Five uncluttered primary workspaces: Analyzer, Diagnostics, GOOSE, Timing/PTP, and SCL.
-- Advanced raw packet inspection and engineering validation stay accessible through the Tools menu instead of adding navigation tabs.
-- SCL mismatch badges and expected/observed svID text remain readable with natural-height rows and multiline wrapping. Redundant column and explanatory captions are removed; full matched evidence is still available in technical details and tooltips.
-- SV real-sample waveform display, zero-cross alignment, stream-aware auto peak scaling, nominal engineering-unit selection, phasors and RMS. Nominal scaling is **not** metrological calibration.
-- Compact overlay fasors distinguish solid voltage / dashed current strokes, use separate relative RMS scales, display numerical U/I maxima and preserve an exact measured angle from the selected-stream engine.
-- Clear amber `LIVE · WARN` badge for an active stream with continuity/arrival warnings; green waveform LIVE means activity only. Stale vectors are explicitly held, not described as live.
-- A native Npcap architecture/load problem cannot be represented as a capturable dummy Ethernet interface. The app shows an unavailable diagnostic until a valid driver/NIC is detected.
-- Per-stream diagnostics: arrival jitter, smpCnt discontinuity, missing samples, svQuality/smpSynch and capture-path indicators.
-- GOOSE event timeline, PTP context, SCL stream catalog, dataset order and compare-to-wire evidence.
+- **Five focused workspaces:** Analyzer, Diagnostics, GOOSE, Timing/PTP, and SCL, with a compact, consistent, low-distraction dark interface.
+- **Live multi-stream SMV monitoring:** stream explorer, waveform plots, phasors, RMS and angle measurements, power estimates, and fast stream switching.
+- **Readable waveform and phasor presentation:** voltage and current share consistent channel colors; phasor arrows, labels, and U/I RMS scaling remain legible.
+- **Per-channel freshness:** invalid/old channel data are clearly marked HELD or MISSING without hiding healthy phases; stale streams retain the last valid evidence in a muted appearance.
+- **Actionable diagnostics:** SV continuity and timing findings, quality flags, capture-driver statistics, and grouped repetitive timing reports with preserved detailed evidence.
+- **GOOSE inspection:** discover publishers, inspect state changes and retransmissions, and review typed DataSet values.
+- **PTP visibility:** monitor message flows, Grandmaster identity, domains and traffic observations.
+- **SCL engineering context:** import SCD, CID, ICD or IID files to compare configured publishers, stream identities and DataSet mappings against received traffic.
+- **Improved capture and packaging:** robust Npcap adapter handling, reliable Start/Stop workflow, reproducible Windows x64 Inno installer with in-place update/repair, portable ZIP, and offline manuals.
 
-## Install and verify
+## Download and installation
 
-1. Download **`ProcessBusInsight-v1.4.1-win-x64-setup.exe`** and compare SHA256 with `SHA256SUMS.txt`.
-2. Run the Inno Setup installer. It includes self-contained application files, **User Manual.pdf**, **Quick Start.pdf**, updated Markdown manuals, and **Install and Update.md** directly in the install folder. Start Menu manual shortcuts are available offline.
-3. To update, close the application and run the newer installer; it retains the installation directory and can repair the same version. The optional portable ZIP remains available for manual use.
-4. Install Npcap separately for live capture. For offline analysis use a compatible classic Ethernet PCAP.
-5. Select a real Ethernet adapter and Run. Use SCL Import to load SCD/CID/ICD/IID for expected-vs-observed identity comparison. The installer is currently unsigned and does not provide unattended auto-updates.
+**Recommended:** `ProcessBusInsight-v1.4.1-win-x64-setup.exe` (Windows x64, self-contained .NET 8 application). The optional portable ZIP is intended for users who prefer manual deployment.
 
-## Important engineering limitations
+1. Download the installer and verify it against `SHA256SUMS.txt`.
+2. Run the Inno Setup installer. The install directory includes `User Manual.pdf`, `Quick Start.pdf`, Markdown manuals, and `Install and Update.md`.
+3. To update, close Process Bus Insight and run the new installer; the existing installation directory and shortcuts are maintained.
+4. Install Npcap separately to capture live Ethernet traffic; classic Ethernet PCAP replay is available offline.
+5. Choose the capture adapter, click **Run**, and select an SV stream.
 
-**Stable** denotes a packaged software release, not a calibrated or IEC 61850-conformance-certified test instrument. No protection operation or SV/GOOSE publishing is included. Captured traffic does not prove a subscriber acted on it.
+This is a **receive-only monitoring and analysis application**. PTP timing statistics are based on the available capture timestamps; nominal 4I+4V scaling follows the selected engineering profile. The application does not transmit SV or GOOSE commands.
 
-- Normal Windows/Npcap timestamps and PCAP replay provide timing **screening evidence**; they are not proof of clock lock, precise jitter, or synchronization accuracy without independently validated capture and timestamping equipment.
-- The 4I+4V nominal profile is an engineering display scaling assumption unless corresponding SCL mapping/instrument calibration is established.
-- A stream with a different svID from expected SCL correctly reports mismatch even if APPID, destination MAC, VLAN and confRev agree.
-- Real field acceptance, DPI clipping, USB Ethernet capture timing, packet losses and sustained CPU/GC must be verified in the intended environment.
-- This release is licensed **GPL-3.0-or-later**. Review LICENSE, NOTICE, third-party and commercial-license documentation for the applicable terms.
+## Verification and distribution
 
-## Verification
+The stable build is created from `main` by GitHub Actions following Windows Release build, automated regression tests, runtime stability/architecture checks, security analysis, package checksum verification, and Inno install/repair/uninstall smoke tests. Real-world performance also depends on NIC, Npcap, traffic and Windows configuration.
 
-Windows Release build, xUnit regression suite, runtime stability, CodeQL and dependency audit are required before publication. The release workflow builds and verifies the Inno installer **and** optional portable ZIP, checks SHA256, then smoke-tests silent install, repair, offline manuals and uninstall. **Physical Npcap/NIC, injector comparison, 60-minute current-build soak and display/DPI acceptance are separate blocking checks; historical tests do not substitute.** A public release is an explicit, manual, main-only action after those checks are documented.
+- **License:** GPL-3.0-or-later; source code and license notices are available in this repository.
+- **Assets:** Inno setup EXE, optional portable ZIP, `SHA256SUMS.txt`, and `release-manifest.json`.
+- **Installer:** unsigned; Windows may display its normal unknown-publisher prompt.

From e8fa628a7951be7e66e366268af2a70f39624fc3 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Wed, 21 Oct 2026 03:54:11 +0700
Subject: [PATCH 146/148] Separate optional hardware QA from community
 open-source stable release gates

---
 .../V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md          | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md b/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
index 1caa1fcd..5a3f91d5 100644
--- a/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
+++ b/docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md
@@ -1,11 +1,11 @@
-# v1.4.1 public release acceptance — open gates
+# v1.4.1 public release — automated release evidence and optional field QA
 
-This document distinguishes **automated evidence** from **physical acceptance**. It is a release gate, not a conformance certificate. Never claim measured performance or perfect IEC 61850 interoperability from a screenshot.
+This document tracks automated community-release checks and optional on-hardware engineering feedback separately. The v1.4.1 stable channel refers to software packaging and automated regression readiness. Physical validation can continue after publication as ongoing open-source QA.
 
 ## 1. Build and source identity
 
 - Target commit SHA: **PENDING — record the final merged main commit**
-- Public version: 1.4.0 (only after every gate is signed off)
+- Public version: 1.4.1
 - Candidate installer: **PENDING — record GitHub Actions run number and SHA256**
 - Native target: Windows x64, self-contained .NET 8 and separately installed Npcap
 - Official license: GPL-3.0-or-later, with all notices and source availability
@@ -39,7 +39,7 @@ The user-supplied same-session 50 Hz injector/analyzer screenshots show:
 
 These observations show good displayed agreement **for that one setting only**. They are not calibrated accuracy proof, independent PCAP/SCL verification, or sustained-load evidence. Do not publish site/device-specific screenshots or identifiers.
 
-## 4. Physical target-PC acceptance (BLOCKING for stable public release)
+## 4. Optional extended on-hardware QA (non-blocking)
 
 Run on the final installed candidate, not an earlier portable build:
 
@@ -54,11 +54,11 @@ Run on the final installed candidate, not an earlier portable build:
 - [ ] Confirm closing capture, reinstalling/repairing and uninstalling do not hang and do not delete unrelated user data; verify no unexpected data upload/network transmission.
 - [ ] Confirm UI on 100%, 125% and 150% Windows DPI, 1366×768 minimum layout and normal 1920×1080, with readable phasor labels, legends, powers and status warnings.
 
-**Physical gate result:** PENDING. No final candidate-run evidence is attached yet.
+**Extended physical QA:** Additional test evidence can be attached later without delaying the community stable distribution.
 
 ## 5. Publication control
 
-- Main-branch PR merge only after automated checks.
-- Public release workflow manual dispatch must explicitly confirm current **field_acceptance_verified**, and refuses non-main source; tag pushes **cannot automatically publish**.
+- Merge the reviewed PR to main after automated checks.
+- Source-controlled one-time approval on main dispatches the existing release workflow; publishing is restricted to main and gated by build/test/package verification. A tag push alone cannot publish.
 - Stable GitHub release must include the Inno Setup installer as primary, portable ZIP as optional, SHA256SUMS, manifest and current release notes.
-- Until all gates close: distribute an Actions **candidate** for testing, but do not tag/publish it as certified, calibrated, or generally interoperable.
+- Stable is the open-source software distribution channel. Continue optional field feedback independently; avoid unsupported device-specific claims.

From 852463d553feadfcff07ef53142e1e678dd538e7 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Wed, 21 Oct 2026 03:54:27 +0700
Subject: [PATCH 147/148] Align release checklist with open-source stable and
 optional hardware validation

---
 docs/development/RELEASE_CHECKLIST.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/development/RELEASE_CHECKLIST.md b/docs/development/RELEASE_CHECKLIST.md
index a99c93d3..6488dc39 100644
--- a/docs/development/RELEASE_CHECKLIST.md
+++ b/docs/development/RELEASE_CHECKLIST.md
@@ -28,7 +28,7 @@
 - [ ] Installer install → repair → offline PDFs/Markdown docs → uninstall smoke test succeeds
 - [ ] EXE and ZIP checksums and candidate/release manifests are generated
 
-## Runtime smoke test
+## Optional field/hardware smoke test (ongoing post-release QA)
 
 - [ ] Application starts without Npcap crash-handling regressions
 - [ ] Physical/known adapter can start and stop cleanly
@@ -77,8 +77,8 @@
 
 - [ ] Create signed/verified tag where available
 - [ ] Publish Inno Setup installer (primary), optional portable ZIP, `SHA256SUMS.txt`, and `release-manifest.json`
-- [ ] Confirm `docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md` is signed off for the final commit and installed candidate (historic approval is insufficient)
-- [ ] Public release is manually dispatched **from main** with current field acceptance confirmation; pushing a tag cannot silently publish
+- [ ] Record latest CI and release installer checks for the final main commit in `docs/validation/V1.4.1_PUBLIC_RELEASE_ACCEPTANCE.md`; physical soak feedback is optional.
+- [ ] Public stable release is explicitly source-approved on **main** and runs the existing release-package workflow with publish=true, prerelease=false, draft=false. Tag push cannot silently publish.
 - [ ] Mark beta releases as prerelease
 - [ ] Confirm GitHub Pages and download links
 - [ ] Do not replace a historical Apache release asset with a post-transition GPL binary under the same tag; use the new version `v1.4.0-beta.2` or later
\ No newline at end of file

From 16fe4680ba36df656783f380498dd24ebc847317 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Wed, 21 Oct 2026 03:54:45 +0700
Subject: [PATCH 148/148] Add one-time main-only source-controlled approval for
 public stable v1.4.1

---
 .../workflows/publish-v1.4.1-on-approval.yml  | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 .github/workflows/publish-v1.4.1-on-approval.yml

diff --git a/.github/workflows/publish-v1.4.1-on-approval.yml b/.github/workflows/publish-v1.4.1-on-approval.yml
new file mode 100644
index 00000000..424be02c
--- /dev/null
+++ b/.github/workflows/publish-v1.4.1-on-approval.yml
@@ -0,0 +1,48 @@
+name: Publish approved Process Bus Insight v1.4.1 stable
+
+# Single-use, source-controlled publication approval. Not every commit or tag
+# can publish a release. The marker is created after the reviewed PR is merged.
+on:
+  push:
+    branches: [main]
+    paths:
+      - ".github/release/v1.4.1.approved"
+
+permissions:
+  contents: read
+  actions: write
+
+jobs:
+  dispatch_stable:
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Check immutable release identity
+        id: existing
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+        run: |
+          if gh release view v1.4.1 --repo "$GH_REPO" >/dev/null 2>&1; then
+            echo "exists=true" >> "$GITHUB_OUTPUT"
+            echo "v1.4.1 already exists, refusing to replace assets."
+          else
+            echo "exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Dispatch Windows stable release
+        if: steps.existing.outputs.exists == 'false'
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+        run: |
+          gh workflow run release-package.yml --repo "$GH_REPO" --ref main \
+            -f version=1.4.1 \
+            -f publish_release=true \
+            -f prerelease=false \
+            -f draft=false \
+            -f release_notes_file=docs/RELEASE_NOTES_v1.4.1.md
+          echo "Dispatched approved public stable v1.4.1 release."