lib/Core/AdNoctem.Substrate.Policies.xml

<?xml version="1.0"?>
<doc>
    <assembly>
        <name>AdNoctem.Substrate.Policies</name>
    </assembly>
    <members>
        <member name="T:AdNoctem.Substrate.Policies.LgpoSource">
            <summary>Reviewed vendor download pins. A download must still be verified against its pin before extraction or execution.</summary>
        </member>
        <member name="P:AdNoctem.Substrate.Policies.LgpoSource.TrustedSha256">
            <summary>SHA-256 of the complete ZIP, not its contained executable.</summary>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoSource.#ctor(System.String,System.Uri,System.String,System.String,System.String,System.Version,System.DateTime)">
            <remarks>Custom pins must be obtained independently of the download being verified. This constructor does not establish trust.</remarks>
        </member>
        <member name="T:AdNoctem.Substrate.Policies.LgpoSourceAvailability">
            <summary>Reachability evidence for an LGPO source, independent of archive or executable integrity.</summary>
        </member>
        <member name="T:AdNoctem.Substrate.Policies.LgpoTool">
            <summary>Explicit download, installation and policy execution operations. Applying policy never installs a tool or elevates.</summary>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.#ctor(System.Net.Http.HttpClient)">
            <remarks>The optional HTTP client is borrowed and required only for network operations. The caller owns transport configuration and disposal.</remarks>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.InstallAsync(AdNoctem.Substrate.IO.FileSystemPath,System.TimeSpan,System.Boolean,AdNoctem.Substrate.Policies.LgpoSource,System.Threading.CancellationToken)">
            <summary>Downloads the pinned archive and publishes only its verified executable. Never runs LGPO or changes policy.</summary>
            <remarks>The caller chooses the destination and overwrite policy. OS filesystem permissions decide access; no administrator check or elevation is implicit.
            Timeout applies to the complete download/extraction operation. An existing destination is replaced only after both hashes match.</remarks>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.Install(AdNoctem.Substrate.IO.FileSystemPath,System.TimeSpan,System.Boolean,AdNoctem.Substrate.Policies.LgpoSource,System.Threading.CancellationToken)">
            <summary>Downloads and installs a digest-verified LGPO executable without applying policy.</summary>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.CheckSource(System.TimeSpan,AdNoctem.Substrate.Policies.LgpoSource,System.Threading.CancellationToken)">
            <summary>Checks source reachability; success does not authenticate downloaded content.</summary>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.CheckSourceAsync(System.TimeSpan,AdNoctem.Substrate.Policies.LgpoSource,System.Threading.CancellationToken)">
            <summary>Checks reachability only. A successful HEAD response makes no claim about content integrity.</summary>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.IsInstalled(AdNoctem.Substrate.IO.FileSystemPath)">
            <summary>Checks file existence only. The caller must establish executable trust before execution.</summary>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.GetApplyMode(AdNoctem.Substrate.IO.FileSystemPath)">
            <summary>Selects GPO backup mode for a directory and text mode for a file.</summary>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.CreateApplyRequest(AdNoctem.Substrate.IO.FileSystemPath,AdNoctem.Substrate.IO.FileSystemPath,System.TimeSpan,AdNoctem.Substrate.Diagnostics.ProcessStopBehavior)">
            <summary>Prepares the executable, arguments, timeout, and stop policy for an explicit policy application.</summary>
            <remarks>Preparing a request validates paths but makes no policy changes. Paths can change before execution; preparation is not authorization.
            The executable must already be trusted by the caller. Timeout and interruption policy must be chosen explicitly: stopping LGPO may leave partial policy changes.</remarks>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.ApplyAsync(AdNoctem.Substrate.IO.FileSystemPath,AdNoctem.Substrate.IO.FileSystemPath,System.TimeSpan,AdNoctem.Substrate.Diagnostics.ProcessStopBehavior,System.Threading.CancellationToken)">
            <summary>Runs the prepared LGPO operation and returns native execution evidence without interpreting a nonzero exit as success.</summary>
            <remarks>Only an explicit apply call changes policy. Nonzero exit codes, cancellation and timeouts are returned as process evidence.
            With WaitForExit, cancellation after launch does not terminate the policy operation; it may wait indefinitely.</remarks>
        </member>
        <member name="M:AdNoctem.Substrate.Policies.LgpoTool.Apply(AdNoctem.Substrate.IO.FileSystemPath,AdNoctem.Substrate.IO.FileSystemPath,System.TimeSpan,AdNoctem.Substrate.Diagnostics.ProcessStopBehavior,System.Threading.CancellationToken)">
            <summary>Synchronously applies local policy with the caller-selected interruption policy.</summary>
        </member>
    </members>
</doc>