PASS: Eleven choices with three browsers first and Discord fourth
PASS: Only Brave/Discord default on; Epic Preview explicitly opt-in
PASS: Steam/Afterburner use real vendor bootstrapper architecture
PASS: Selecting none installs no optional apps
PASS: Multiple choices round-trip exactly
PASS: Unknown app cannot become an elevated command
PASS: Duplicate app choice rejected
PASS: Another account cannot supply app selections
PASS: Orange is the first-run default
PASS: Green preference persists
PASS: Blue preference persists
PASS: Purple preference persists
PASS: Orange preference persists
PASS: Theme names are allowlisted
PASS: Damaged appearance file safely falls back to Orange
PASS: Appearance preferences are account-bound
PASS: Theme palettes have distinct accents
PASS: Official NVIDIA host accepted
PASS: Untrusted URL refused: http://www.nvidia.com/setup.exe
PASS: Untrusted URL refused: https://www.nvidia.com.evil.example/setup.exe
PASS: Untrusted URL refused: https://user@www.nvidia.com/setup.exe
PASS: Untrusted URL refused: https://www.nvidia.com:444/setup.exe
PASS: Epic uses the preview endpoint, not the old stable WinGet package
PASS: NVIDIA resolver selects newer versions numerically
PASS: ExitLag resolver avoids older embedded download links
PASS: Riot uses the current official game bootstrapper for Riot Client
PASS: Changed vendor page stops cleanly instead of running an arbitrary link
PASS: Expected trusted publisher accepted
PASS: Valid signature from wrong publisher is rejected
PASS: Untrusted signature rejected
PASS: Original PC name is durably saved before the rename
PASS: Upgrade does not overwrite original name or repeat pending rename
PASS: Recovery explains the required restart before restoring a pending rename
PASS: Original PC name can be requested after restart
PASS: Domain-managed device is not renamed automatically
PASS: Existing pending rename is preserved
PASS: Rename failure cannot report success
PASS: Rename failure retains original without marking it applied
PASS: Recovery preserves a subsequent user rename
All 39 LeCore release checks passed (Windows and vendor APIs mocked).
