pkhodade-NV · Sep 17, 2026 · Sep 18, 2026 · Sep 20, 2026 · Sep 21, 2026 · Sep 21, 2026
diff --git a/.agents/skills/build-openshell-mxc-windows/SKILL.md b/.agents/skills/build-openshell-mxc-windows/SKILL.md
diff --git a/.agents/skills/build-openshell-mxc-windows/reference.md b/.agents/skills/build-openshell-mxc-windows/reference.md
@@ -9,11 +9,18 @@ maintaining the existing build-only Windows MSVC lane.
 |---|---|
 | `tasks/windows.toml` | Mise task definitions for `windows:*`. |
 | `tasks/scripts/windows-msvc.ps1` | Visual Studio environment discovery, rustup target setup, Cargo invocation, logs, artifact report. |
-| `.github/workflows/windows-msvc.yml` | PR/merge-queue lint and test plus main/manual cache seeding and dependent binary builds on native x64 and ARM64 runners. |
-| `architecture/windows-msvc-build.md` | Human-readable design contract. |
+| `.github/workflows/windows-msvc.yml` | Opt-in PR lint and test plus advisory main/manual cache seeding and dependent binary builds on native x64 and ARM64 runners. |
+| `CONTRIBUTING.md` | Human-readable Windows build prerequisites and commands. |
+| `architecture/windows.md` | Stable Windows/MXC runtime and cross-architecture boundaries. |
 
 ## Commands
 
+Install the pinned test runner once before using test-bearing tasks:
+
+```powershell
+mise install --locked github:nextest-rs/nextest
+```
+
 Use `--skip-tools` for all Windows mise tasks:
 
 ```powershell
@@ -68,11 +75,11 @@ file.
 For ARM64, verify the Visual Studio instance contains the ARM64 MSVC tools,
 ARM64 Spectre-mitigated libraries, Clang tools, CMake tools, and a Windows SDK.
 Clang supplies host-native `libclang.dll` for `bindgen` and `clang-cl.exe` for
-ARM64 crypto dependencies such as `aws-lc-sys`. Native builds use the normal
-bundled-Z3 CMake path. An x64-to-ARM64 check/build discovers and adds
-host-native Ninja to `PATH`, builds bundled Z3 with native MSVC `cl.exe` and
-the Visual Studio generator, and lets the crypto crates select `clang-cl`. Use
-a short `CARGO_TARGET_DIR` if Windows path-length limits are reached.
+ARM64 crypto dependencies such as `aws-lc-sys`. Native and x64-to-ARM64 builds
+use the official prebuilt Z3 4.16.0 static library for the target architecture.
+An x64-to-ARM64 check/build discovers and adds host-native Ninja to `PATH`,
+while the crypto crates select `clang-cl`. Use a short `CARGO_TARGET_DIR` if
+Windows path-length limits are reached.
 
 ## Unsupported Driver Rules
 

@@ -56,6 +56,7 @@ jobs:
             rust_target: aarch64-pc-windows-msvc
     runs-on: ${{ matrix.runner }}
     env:
+      READ_ONLY_GITHUB_TOKEN: ${{ github.token }}
       SCCACHE_GHA_ENABLED: "true"
       SCCACHE_GHA_VERSION: windows-msvc-${{ matrix.arch }}
       SCCACHE_CLIENT_SIDE: "1"
@@ -97,6 +98,25 @@ jobs:
         run: mise run --skip-tools windows:lint:${{ matrix.arch }}
       - name: Test
         run: mise run --skip-tools windows:test:${{ matrix.arch }}
+      - name: Probe MXC host capabilities
+        run: mise run --skip-tools windows:e2e:mxc:host-probe
+      - name: Build MXC example E2E binaries
+        id: mxc_build
+        run: mise run --skip-tools windows:build:${{ matrix.arch }}
+      - name: Run shipped MXC provider-credential example in mock mode
+        run: mise run --skip-tools windows:e2e:mxc:provider-mock
+      - name: Run shipped MXC OCSF audit example in mock mode
+        run: mise run --skip-tools windows:e2e:mxc:ocsf-mock
+      - name: Run shipped aggregate MXC scenarios in mock mode
+        run: mise run --skip-tools windows:e2e:mxc:aggregate-mock
+      - name: Run shipped MXC inference examples with mock API
+        run: mise run --skip-tools windows:e2e:mxc:inference-mock:${{ matrix.arch }}
+      - name: Run MXC WebSocket agent example in mock mode
+        if: ${{ !cancelled() && steps.mxc_build.outcome == 'success' }}
+        run: mise run --skip-tools windows:e2e:mxc:ws-agent-mock
+      - name: Run MXC OpenClaw forward example in mock mode
+        if: ${{ !cancelled() && steps.mxc_build.outcome == 'success' }}
+        run: mise run --skip-tools windows:e2e:mxc:openclaw-forward-mock
       - name: sccache stats
         if: always()
         run: sccache --show-stats
@@ -121,6 +141,7 @@ jobs:
             rust_target: aarch64-pc-windows-msvc
     runs-on: ${{ matrix.runner }}
     env:
+      READ_ONLY_GITHUB_TOKEN: ${{ github.token }}
       SCCACHE_GHA_ENABLED: "true"
       SCCACHE_GHA_VERSION: windows-msvc-${{ matrix.arch }}
       SCCACHE_CLIENT_SIDE: "1"
@@ -178,6 +199,7 @@ jobs:
             rust_target: aarch64-pc-windows-msvc
     runs-on: ${{ matrix.runner }}
     env:
+      READ_ONLY_GITHUB_TOKEN: ${{ github.token }}
       SCCACHE_GHA_ENABLED: "true"
       SCCACHE_GHA_VERSION: windows-msvc-${{ matrix.arch }}
       SCCACHE_CLIENT_SIDE: "1"
@@ -206,8 +228,25 @@ jobs:
           cache-targets: "true"
           cache-on-failure: "true"
           cache-bin: "false"
+      - name: Probe MXC host capabilities
+        run: mise run --skip-tools windows:e2e:mxc:host-probe
       - name: Build release binaries
+        id: mxc_build
         run: mise run --skip-tools windows:build:${{ matrix.arch }}
+      - name: Run shipped MXC provider-credential example in mock mode
+        run: mise run --skip-tools windows:e2e:mxc:provider-mock
+      - name: Run shipped MXC OCSF audit example in mock mode
+        run: mise run --skip-tools windows:e2e:mxc:ocsf-mock
+      - name: Run shipped aggregate MXC scenarios in mock mode
+        run: mise run --skip-tools windows:e2e:mxc:aggregate-mock
+      - name: Run shipped MXC inference examples with mock API
+        run: mise run --skip-tools windows:e2e:mxc:inference-mock:${{ matrix.arch }}
+      - name: Run MXC WebSocket agent example in mock mode
+        if: ${{ !cancelled() && steps.mxc_build.outcome == 'success' }}
+        run: mise run --skip-tools windows:e2e:mxc:ws-agent-mock
+      - name: Run MXC OpenClaw forward example in mock mode
+        if: ${{ !cancelled() && steps.mxc_build.outcome == 'success' }}
+        run: mise run --skip-tools windows:e2e:mxc:openclaw-forward-mock
       - name: sccache stats
         if: always()
         run: sccache --show-stats
diff --git a/AGENTS.md b/AGENTS.md
@@ -59,6 +59,7 @@ These pipelines connect skills into end-to-end workflows. Individual skill files
 | `crates/openshell-driver-podman/` | Podman compute driver | In-process `ComputeDriver` backend for local Podman sandbox containers |
 | `crates/openshell-driver-vm/` | VM compute driver | Standalone libkrun-backed `ComputeDriver` subprocess (embeds its own rootfs + runtime) |
 | `crates/openshell-driver-mxc/` | Microsoft MXC compute driver | In-process Windows AppContainer and isolation-session compute backend |
+| `crates/openshell-supervisor-relay/` | MXC supervisor relay | **Windows-only** standalone binary the MXC driver spawns inside a ProcessContainer/isolation session in place of `agent_command`; launches the real target process, exposes a JSON control channel (launch/shutdown/forward) over its own inherited stdin/stdout, and bridges dynamic TCP forwards (`openshell forward service`) to it |
 | `crates/openshell-prover/` | Policy prover | Policy verification and proof generation |
 | `crates/openshell-server-macros/` | Server macros | Compile-time helpers for gateway RPC authorization |
 | `crates/openshell-supervisor-middleware/` | Middleware runtime | Generic middleware registry, remote service integration, and chain execution |

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -340,14 +340,19 @@ cargo build -p openshell-prover --features bundled-z3
 
 For x86-64 and ARM64 Windows MSVC builds, use one of these Z3 paths:
 
-- Bundled Z3 (the default for `windows:*` tasks): `z3-sys` builds Z3 from
-  source and links it into the OpenShell binaries. This keeps the release
-  executables independent of `libz3.dll` when they are copied to another host.
+- Prebuilt Z3 (the default for `windows:*` tasks): `z3-sys` downloads the
+  pinned Z3 4.16.0 GitHub release for the target architecture on the first
+  build. Cargo reuses the extracted archive from its target directory. Windows
+  CI authenticates the GitHub API request with `READ_ONLY_GITHUB_TOKEN` and
+  preserves the archive in the architecture-specific Cargo target cache. For
+  cold local builds, you may set `READ_ONLY_GITHUB_TOKEN` to avoid anonymous
+  GitHub API rate limits.
 - System Z3: point `Z3_LIBRARY_PATH_OVERRIDE` at the directory containing the
-  target-compatible MSVC Z3 library and `Z3_SYS_Z3_HEADER` at the full path to
-  `z3.h`. The `windows:*` tasks use this path automatically when
-  `Z3_LIBRARY_PATH_OVERRIDE` is set. Deploy the matching `libz3.dll` with any
-  binaries built against a dynamic system Z3.
+  target-compatible MSVC Z3 library and `Z3_SYS_Z3_HEADER` at the full path to `z3.h`.
+  The `windows:*` tasks use this path automatically when `Z3_LIBRARY_PATH_OVERRIDE`
+  is set.
+- Bundled Z3: for direct Cargo builds, pass `--features bundled-z3` so `z3-sys`
+  builds Z3 from source.
 
 `openshell-prover` itself has no `bindgen`/`libclang` dependency, so building
 just this crate does not require `LIBCLANG_PATH`:
@@ -356,21 +361,57 @@ just this crate does not require `LIBCLANG_PATH`:
 cargo build -p openshell-prover --target x86_64-pc-windows-msvc --features bundled-z3
 ```
 
-### Windows full build
+### Windows build and validation
 
-To build the full set of Windows binaries, including `openshell-gateway.exe`
-and `openshell.exe`, use the `windows:build:x64` mise task instead of a
-single-crate `cargo build`. It builds Z3 from source (bundled) by default. A full
-build also compiles crates that use `bindgen` (e.g. the MXC driver on Windows),
-so it requires `libclang.dll`; if LLVM is not on the default search path, set
-`LIBCLANG_PATH` to the directory containing `libclang.dll`:
+Use the platform-native `windows:*` mise tasks for Windows MSVC development.
+The lane supports x64 and ARM64 and builds `openshell-gateway.exe`,
+`openshell.exe`, `openshell-supervisor-relay.exe`, and
+`openshell-mxc-peer.exe`. It does not enable Docker, Kubernetes, Podman, or
+VM-backed execution on Windows.
+
+Install Visual Studio C++ Build Tools, a compatible Windows SDK, Rust through
+rustup, mise, and the Visual Studio LLVM tools used by `bindgen`. Test-bearing
+tasks also require the pinned `cargo-nextest` tool. Install it once through
+mise:
+
+```powershell
+mise install --locked github:nextest-rs/nextest
+```
+
+Run every task with `--skip-tools`; mise orchestrates the commands but does not
+install the Windows compiler toolchain.
+
+| Task | Purpose |
+|---|---|
+| `windows:lint:<x64\|arm64>` | Run Clippy for the Windows-supported workspace on the selected target architecture. |
+| `windows:build:<x64\|arm64>` | Build the four Windows release executables. |
+| `windows:test:<x64\|arm64>` | Run the workspace suite natively; the target must match the host architecture. |
+| `windows:test:unsupported:<x64\|arm64>` | Run the focused unsupported-driver contracts. |
+| `windows:test:mxc-real:<x64\|arm64>` | Run the probe-gated real-`wxc-exec` integration suite on the matching host. |
+| `windows:artifacts` | Report sizes and SHA256 hashes for release artifacts. |
+| `windows:ci` | Run the aggregate x64-host check, build, test, contract, and artifact workflow. |
+
+The task definitions in [`tasks/windows.toml`](tasks/windows.toml), the
+PowerShell implementation in
+[`tasks/scripts/windows-msvc.ps1`](tasks/scripts/windows-msvc.ps1), and the
+hosted workflow in
+[`.github/workflows/windows-msvc.yml`](.github/workflows/windows-msvc.yml) are
+the executable sources of truth. See
+[`architecture/windows.md`](architecture/windows.md) for the stable Windows/MXC
+runtime and enforcement boundaries.
+
+To build x64 locally, use `windows:build:x64` instead of a single-crate Cargo
+build. It downloads the pinned prebuilt Z3 release by default. A full build also
+compiles crates that use `bindgen`, including the MXC driver, so it requires
+`libclang.dll`. If LLVM is not on the default search path, set `LIBCLANG_PATH`
+to the directory containing `libclang.dll`:
 
 ```powershell
 $env:LIBCLANG_PATH='C:\Program Files\Microsoft Visual Studio\2022\<Edition>\VC\Tools\Llvm\x64\bin'
 mise run --skip-tools windows:build:x64
 ```
 
-To use a local x64 Z3 release instead of the bundled build, set
+To use a local x64 Z3 release instead of the prebuilt download, set
 `Z3_LIBRARY_PATH_OVERRIDE` and `Z3_SYS_Z3_HEADER` before running the task:
 
 ```powershell

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -56,8 +56,8 @@ terminal-colorsaurus = "1.0"
 miette = { version = "7", features = ["fancy"] }
 thiserror = "2"
 
-# Windows platform APIs (ETW/TDH audit consumer in openshell-driver-mxc; Windows-only)
-windows = { version = "0.62", features = ["Wdk_System_Threading", "Win32_Foundation", "Win32_System_Diagnostics_Etw", "Win32_System_Time"] }
+# Windows platform APIs (MXC audit, host-proxy process identity, ACL enforcement; Windows-only)
+windows = { version = "0.62", features = ["Wdk_System_Threading", "Win32_Foundation", "Win32_NetworkManagement_IpHelper", "Win32_Networking_WinSock", "Win32_Security", "Win32_Security_Authorization", "Win32_Security_Isolation", "Win32_Storage_FileSystem", "Win32_System_Diagnostics_Etw", "Win32_System_Memory", "Win32_System_SystemServices", "Win32_System_Threading", "Win32_System_Time"] }
 anyhow = "1"
 
 # Logging/Tracing