v6.33.0

New Tweaks (5 modules, 50 tweaks)

• PolicyWindowsDefenderATP (atp-) — 10 Windows Defender ATP onboarding/telemetry/protection policy tweaks
• PolicyWindowsInstaller (msipol-) — 10 Windows Installer (MSI) elevation/logging/patching policy tweaks
• PolicyCryptography (crypto-) — 10 cryptography, TLS/SSL protocol enforcement, and FIPS policy tweaks
• PolicyFVE (fve-) — 10 BitLocker Full Volume Encryption policy tweaks
• PolicyWindowsUpdateAU (wuau-) — 10 Windows Update Automatic Updates scheduling/notification policy tweaks

Stats: Tweaks: 7,718 · Categories: 158 · Modules: 195 · Tests: 3,296 (0 failures)

---

v6.32.0

New Tweaks (5 modules, 50 tweaks)

• PolicyBITS (bits-) — 10 BITS transfer bandwidth/job/peer-caching policy tweaks
• PolicyPersonalization (person-) — 10 lock screen & personalization policy tweaks
• PolicyTabletPC (tablet-) — 10 tablet/pen/touch input policy tweaks
• PolicyWindowsBackup (wbackup-) — 10 Windows Backup (client/server) policy tweaks
• PolicyGameDVR (gdvr-) — 10 Game DVR & Game Bar policy tweaks

Fixed

• RegistrySession.Backup() now short-circuits in DryRun mode, preventing 1,480+ unnecessary file writes during tests
• All 3,296 tests pass with 0 failures

Stats: Tweaks: 7,668 · Categories: 153 · Modules: 190 · Tests: 3,296 (0 failures)

---

v6.31.0

New Tweaks (5 modules, 50 tweaks)

• PolicyWindowsFeedback (fbk-) — 10 Windows User Feedback policy tweaks
• PolicySettingSync (syncp-) — 10 Windows Settings Sync policy tweaks
• PolicyWindowsRAHardening (ra-/sidebar-) — 10 Windows Remote Assistance & Sidebar hardening tweaks
• PolicyWindowsSecCenter (wsc-) — 10 Windows Security Center policy tweaks
• PolicyDeliveryOpt (delopt-) — 10 Windows Delivery Optimization policy tweaks

Fixed

• Resolved 3 duplicate tweak ID conflicts across PolicyWindowsFeedback, PolicySettingSync, PolicyWindowsRAHardening
• All 3,296 tests pass with 0 failures

Stats: Tweaks: 7,618 · Categories: 148 · Modules: 185 · Tests: 3,296 (0 failures)

---

v6.30.0

Added — Phase 7.4 (PowerShell Module Expansion)

11 New PowerShell Cmdlets

Expanded RegiLattice.psm1 from 11 to 22 public cmdlets (+11) and 8 to 16 aliases (+8):

Cmdlet	Alias	Description
Get-RLCategory	grc	List all tweak categories
Get-RLTag	grtg	List all tweak tags
Compare-RLSnapshot	crs	Diff two snapshot files
Export-RLJson	erj	Export all tweaks to JSON
Export-RLReg	—	Export applied tweaks to .REG
Import-RLJson	—	Import tweak selection from JSON
Invoke-RLValidate	irv	Run tweak integrity validation
Get-RLStats	grst	Print registry tweak statistics
Invoke-RLDoctor	ird	Run system health check
Get-RLHwInfo	—	Display hardware information
Get-RLDependency	grdp	Show dependency chain for a tweak

• All cmdlets include --no-color on internal CLI calls to prevent ANSI sequences in pipeline output.
• Import-RLJson implements SupportsShouldProcess + ConfirmImpact = 'Medium' for -WhatIf/-Confirm safety.
• Get-RLDependency supports ValueFromPipelineByPropertyName for pipeline usage: Get-RLTweak perf-* | Get-RLDependency.
• powershell/RegiLattice.psd1 updated: FunctionsToExport, AliasesToExport, ReleaseNotes, ModuleVersion all in sync.

Phase 7.5 — Pack Validation CI Workflow

• Added .github/workflows/pack-validation.yml — runs on packs/** changes.
• Validates packs/index.json structure and all .rlpack.json files via shell step + xUnit OfficialPack filter.
• Triggers on push, pull_request, and workflow_dispatch.

Lessons-Learned Additions

Three new lessons appended to .github/instructions/lessons-learned.instructions.md:

• [CallerFilePath] for pack load tests (never use AppDomain.BaseDirectory)
• PowerShell module co-maintenance rule (psm1 + psd1 must be updated atomically)
• Official pack ecosystem — packs/index.json structure and constraints

Stats

• Tweaks: 7,568 · Categories: 127 · Modules: 180 · Tests: 3,296 (0 failures)
• PS Module: 22 cmdlets · 16 aliases

---

v6.28.0

Added — Phase 6.4 + 6.5: Scheduling & Migration

6.4 Scheduled Tweak Service (ScheduledTweakService)

• New ScheduledTweakService in RegiLattice.Core.Services schedules tweaks to be applied or removed at a specified future DateTimeOffset.
• API: ScheduleApply(string tweakId, DateTimeOffset when), ScheduleRemove(...), Pending (IReadOnlyList), Cancel(string tweakId), ExecuteDue(TweakEngine) — applies/removes all due entries and removes them from the pending queue.
• Persists schedule to scheduledTweaks.json in AppConfig.ConfigDir via Flush() / Load().
• 430-line xUnit test suite (ScheduledTweakServiceTests.cs) — schedule/cancel/execute-due/persistence round-trips.

6.5 Tweak Migration Service (TweakMigrationService)

• New TweakMigrationService and TweakMigration record in RegiLattice.Core.Services map obsolete tweak IDs to current replacement IDs.
• New TweakEngine.Migrations property (IReadOnlyList) registers migrations; TweakEngine.ResolveMigration(string oldId) returns the current TweakDef for a retired ID.
• SnapshotManager.RestoreSnapshot() now auto-migrates: obsolete IDs in a snapshot are resolved to their replacements before the restore operation, with a warning logged for each migrated entry.
• 210-line xUnit test suite (TweakMigrationServiceTests.cs) — 18 tests covering registration, resolution, no-op for current IDs, null for unknown IDs, snapshot auto-migration.

5 New Office Policy Modules (+50 tweaks)

• PolicyOfficePowerPoint.cs — 10 security policy tweaks for Office PowerPoint (HKCU\...\PowerPoint\Security, ProtectedView, FileBlock): offppt-pol-*
• PolicyOfficeAccess.cs — 10 security policy tweaks for Office Access (HKCU\...\Access\Security, ProtectedView, FileBlock), includes offacc-pol-sandbox-mode (SandboxMode=3): offacc-pol-*
• PolicyOfficePublisher.cs — 10 security policy tweaks for Office Publisher (HKCU\...\Publisher\Security, ProtectedView, FileBlock): offpub-pol-*
• PolicyOfficeVisio.cs — 10 security policy tweaks for Office Visio (HKCU\...\Visio\Security, ProtectedView, FileBlock): offvis-pol-*
• PolicyOfficeProject.cs — 10 security policy tweaks for MS Project (HKCU\...\MS Project\Security, ProtectedView, FileBlock): offprj-pol-*

All 5 modules: NeedsAdmin = false, CorpSafe = true, ImpactScore/SafetyRating set explicitly per tweak, auto-discovered by TweakEngine.RegisterBuiltins() via reflection.

Stats

• Tweaks: 7,568 (+50 from previous release)
• Categories: 127 (unchanged)
• Modules: 180 (+5)
• Tests: 3,291 (+32 from Phase 6.4 + 6.5 test suites)

---

v6.27.0

Added — Phase 6.1–6.3: Services & Intelligence

6.1 Enterprise Audit Logging (TweakHistory)

• HistoryEntry now captures Username, MachineName, and SessionId (8-char hex per-process GUID) for every recorded tweak operation.
• New TweakHistory.ExportCsv(string filePath) method exports a SIEM-compatible 7-column CSV: Timestamp,TweakId,Action,Result,Username,MachineName,SessionId.
• Backward-compatible: old history.json files from v6.26.0 and earlier deserialise cleanly — new fields use [JsonIgnore(Condition = WhenWritingDefault)].

6.2 Per-Category Health Score Breakdown (HealthScoreService)

• New HealthScoreService.CategoryHealthScores(IReadOnlyDictionary<string, TweakResult> statusMap) returns IReadOnlyList<CategoryHealthScore> — one entry per category, score 0–100, applied/total counts, and an actionable recommendation string.
• New CategoryHealthScore sealed record (sibling type in RegiLattice.Core.Services namespace).

6.3 Enhanced Conflict Detection (ConflictDetector)

• New ConflictDetector.DetectRegistryConflicts(IEnumerable<TweakDef> tweaks) dynamically scans all RegOp.SetValue operations to find tweaks writing to the same registry path+name with different values.
• New ConflictSeverity enum: Info (same value, redundant), Warning (different values, order-dependent), Critical (opposing 0/1 binary values — tweaks cancel each other out).
• New RegistryConflict readonly record struct with TweakIdA/B, RegistryPath, ValueName, ValueA/B, Severity.

Fixed

• tests/.runsettings: removed HangTimeout="30000" attribute from CollectDumpOnTestSessionHang — was producing two non-fatal Data collector 'Blame' message: …HangTimeout is not valid warnings on every dotnet test invocation with .NET SDK 10.0.201+. Primary hang-protection is now solely TestSessionTimeout (2000 s).

Tests

• +20 new tests covering all Phase 6 additions: audit fields (Username/MachineName/SessionId), session ID format/stability, CSV export, category health scores (6 variants), and registry conflict detection (7 variants).

Stats

• Tweaks: 7,518 (unchanged) across 127 categories
• Modules: 175 files (unchanged)
• Tests: 3,259 (+20 Phase 6 tests over v6.26.0's 3,239), 0 failures, 0 warnings

v6.26.0

Added — Sprint 688: Office GP Security + Windows Search hardening (+39 tweaks, +3 modules)

• PolicyWindowsSearch.cs — expanded 1 → 10 tweaks: Windows Search GP hardening (block remote query, disable web search, safe-search, prevent email/attachment/Outlook indexing, diacritics, language detection) (wsepol-*)
• PolicyOfficeWord.cs — 10 new tweaks: MS Word GP security hardening (VBA block, ActiveX disable, extension hardening, network macro exec block, OM access denial, Protected View controls, file block for Word 97) (offword-pol-*)
• PolicyOfficeExcel.cs — 10 new tweaks: MS Excel GP security hardening (VBA block, ActiveX disable, extension hardening, workbook link warnings, Protected View, file block for XL4 macros) (offxls-pol-*)
• PolicyOfficeOutlook.cs — 10 new tweaks: MS Outlook GP security hardening (security level, OM guard, min encryption bits, VBA warnings, invalid signature warn, add-in customization block, external content block, OOM address/send-mail prompts) (offolt-pol-*)

Removed

• PolicyAppPrivacy.cs, PolicyEventLogAudit.cs, PolicySyncSettings.cs — empty stub modules (0 tweaks), replaced by dedicated implementations in earlier sprints

Stats

• Tweaks: 7,518 (+39) across 127 categories
• Modules: 175 files (net unchanged — 3 stubs deleted + 3 new)
• Tests: 3,239 (2,442 Core + 434 CLI + 363 GUI), 0 failures

v6.25.0

Added — Phase 5.4: Energy & Battery Management (+50 tweaks, +5 modules)

• BatterySaver.cs — 10 Battery saver threshold, auto-dim, hibernate, wake-on-pattern tweaks (batt-*)
• ChargingOptimization.cs — 10 Expose battery level/action settings in Power Options UI (chrg-*)
• StandbyStates.cs — 10 Connected Standby, hybrid sleep, wake timers, S1/S2 states (standby-*)
• CPUPowerStates.cs — 10 CPU min/max state, boost mode, EPP, core parking, perf policies (cpupwr-*)
• DisplayPower.cs — 10 Display timeout, adaptive dimming/brightness, display-required policy (dispwr-*)

Stats

• Tweaks: 7,479 (+50) across 127 categories
• Modules: 175 files (+5)
• Tests: 3,230 (2,434 Core + 434 CLI + 362 GUI), 0 failures

v6.24.0

Added — Phase 5.3 Accessibility (remaining) + Phase 5.5 Developer Modules (+80 tweaks, +8 modules)

• MagnifierAdvanced.cs — 10 Screen Magnifier advanced configuration tweaks (magnif-*)
• LiveCaptions.cs — 10 Windows 11 Live Captions feature tweaks (lcap-*, MinBuild=22621)
• EyeControlSettings.cs — 10 Eye Control / gaze input tweaks (eyectrl-*)
• VoiceAccessControl.cs — 10 Windows 11 Voice Access tweaks (voiacc-*, MinBuild=22621)
• WinDbgSettings.cs — 10 Windows Debugger / crash dump / WER tweaks (windbg-*)
• WSLAdvanced.cs — 10 WSL 2 advanced registry tweaks (wsladv-*)
• GitCredManager.cs — 10 Git Credential Manager registry tweaks (gitcm-*)
• ContainerRuntime.cs — 10 Windows Container / Sandbox policy tweaks (cntr-*)

Stats

• Tweaks: 7,429 (+80) across 122 categories
• Modules: 170 files (+8)
• Tests: 3,230 (2,434 Core + 434 CLI + 362 GUI), 0 failures

v6.23.0

Added — Phase 5.2 Gaming Performance + Phase 5.3 Accessibility (+80 tweaks, +8 modules)

• GamingDirectStorage.cs — 10 DirectStorage/NVMe latency tweaks (dxstore-*)
• GamingVariableRefreshRate.cs — 10 VRR/adaptive-sync tweaks (vrr-*)
• GamingLatencyTuning.cs — 10 ultra-low-latency gaming tweaks (glatency-*)
• GamingGPUPower.cs — 10 GPU power management and TDR tweaks (gpupwr-*)
• GamingNetworkOpt.cs — 10 gaming network optimisation tweaks (gamenet-*)
• GamingAudioOpt.cs — 10 MMCSS/audio gaming latency tweaks (gamaudio-*)
• AccessibilityMotor.cs — 10 motor/input accessibility tweaks (accmotor-*)
• AccessibilityVisual.cs — 10 visual/display accessibility tweaks (accvisual-*)

Changed — CI Workflow Optimisation

• ci.yml: mutation testing moved from every-push-to-main to weekly schedule + manual only (biggest cost saving)
• ci.yml: removed redundant coverage artifact upload (Codecov is the single source of truth)
• ci.yml: Stryker report artifact only uploaded on failure
• ci.yml: paths-ignore added to push/PR triggers (skip docs-only changes)
• release.yml: --no-build added to all 3 test steps (already built in prior step)
• smoke.yml: download pattern fixed from RegiLatticeCLI.exe → *CLI*-win-x64.exe (was silently failing)
• smoke.yml: 6 separate smoke steps consolidated to 1 PowerShell loop

Stats

• Tweaks: 7,349 (+80) across 122 categories
• Modules: 162 files (+8)
• Tests: 3,230 (2,434 Core + 434 CLI + 362 GUI), 0 failures