[Change] Native Windows x86-64 Code Review capsule with project-driven preparation #495

Extend Code Review to native Windows x86-64 using the project configuration and preparation contract delivered by #460. This is a deferred follow-up, not part of the current Linux x86-64/macOS ARM64 delivery.

Parent: Feature #163, “Validation Evidence And Governance Runtime Follow-Ups” (Epic #162). OpenSpec: code-review-windows-native-platform-execution.

Scope:

• Preserve ProjectPlan discovery, explicit configuration precedence, runtime inspect/prepare, automatic runtime acquisition and project-driven preparation without publisher entries for customer projects.
• Run authentic pinned pip, Hatch, uv and Poetry on disposable snapshots. Separate sealed analyzers, acquisition, build hooks, project imports/plugins/tests and compatible native extensions.
• Prove a Windows execution boundary before admission: startup ownership, managed children, denied unauthorized filesystem/network/descriptor access, enforced resources, five-second cleanup and 100 repetitions of lifecycle races. Assess native Windows mechanisms against the shared contract; do not declare a mechanism sufficient merely because it exists.
• Deliver verified Windows/ABI artifacts, PE dependency inventory, atomic locally built project caches and verified offline reuse. Preserve report/evidence compatibility and project-origin-v1 pytest restrictions.
• Require all ten analyzers and the full four-manager corpus on matching-architecture Windows VMs or physical machines, under an ordinary user with normal protections. Default hosted Windows administrator/UAC-disabled settings alone do not establish that installation acceptance.
• Optional UTM x86-64 guests on Apple Silicon support debugging; emulation is supplemental. ARM64 Windows running translated x86-64 applications, WSL and Docker do not establish native Windows x86-64 acceptance.
• Publisher/module signing keys stay in CI/CD. No paid publisher membership, Docker, hypervisor, administrator account or customer SDK is a runtime prerequisite. Verify the actual download/installation route before promising that behavior.

Dependency direction: #460 blocks this follow-up. This follow-up does not block #460 or existing Linux/macOS delivery. Windows ARM64 remains a separate future artifact and acceptance target.

Acceptance evidence records exact OS/kernel build, CPU architecture, Python ABI, artifact digest, capabilities and VM/emulation configuration. VM status must not cause rejection or weakened isolation. Rollback withdraws only the Windows artifact. No automatic merge or publication.

References (checked 2026-10-05 Europe/Berlin): GitHub runner reference, UTM architecture settings, Microsoft x86/x64 emulation.