Skip to content

fix(author): port Windows baseline enforcement repairs - #120

Merged
Amir Bredy (ABMFST) merged 2 commits into
mac-author-buildfrom
port/mac-baseline-enforcement-v03103
Aug 10, 2026
Merged

fix(author): port Windows baseline enforcement repairs#120
Amir Bredy (ABMFST) merged 2 commits into
mac-author-buildfrom
port/mac-baseline-enforcement-v03103

Conversation

@ABMFST

@ABMFST Amir Bredy (ABMFST) commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Summary

  • cherry-pick the validated Windows Server 2016/2019 safe Test-wrapper conversions
  • port the Windows Server 2022 effective firewall default assertions
  • port the role-managed Windows Server 2025 NTP informational checks
  • preserve the macOS Author capability boundary and 0.3.101-author.1 version stream

Validation

  • source commits shipped in Windows/Linux v0.3.103
  • full native Azure matrix passed all 12 Windows Server role baselines with exact-count Audit, zero unread entries, and fully Compliant ApplyAndAutoCorrect on Microsoft.OSConfig 1.4.3
  • macOS package, desktop, and lockfile versions remain 0.3.101-author.1
  • local npm/build was not run per corporate IT policy; hosted PR checks are authoritative

Amir Bredy added 2 commits August 9, 2026 20:59
Amir Bredy
fix(baselines): make Windows profiles enforceable
ae91a50 
Use safe Test wrappers for legacy account-policy and value-less controls, accept effective firewall defaults, and treat role-managed NTP state as informational. The full 12-baseline Azure Machine Configuration matrix passes Audit and ApplyAndAutoCorrect with OSConfig 1.4.3.

Co-authored-by: Copilot <[email protected]>

Copilot-Session: 48993ee6-f068-4c4a-b317-2cd940fab804
Amir Bredy
fix(baselines): preserve firewall effective defaults
ccb5c16 
Keep the deterministic WS2022 repair generator aligned with the validated domain firewall expressions so hosted tests do not regenerate strict assertions for unset DefaultInboundAction values.

Co-authored-by: Copilot <[email protected]>

Copilot-Session: 48993ee6-f068-4c4a-b317-2cd940fab804
@ABMFST
Amir Bredy (ABMFST) merged commit a50f744 into mac-author-build Aug 10, 2026
8 checks passed
@ABMFST
Amir Bredy (ABMFST) deleted the port/mac-baseline-enforcement-v03103 branch August 10, 2026 04:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ABMFST