From 07671cd5544368b61773f3b8f31b5c000f4b80d8 Mon Sep 17 00:00:00 2001
From: fadwen <110697945+fadwen@users.noreply.github.com>
Date: Thu, 15 Oct 2026 10:32:28 -0700
Subject: [PATCH] test(inbox): allow the Defender platform's two modules to be
 absent on the host

ConfigDefender and ConfigDefenderPerformance are put under System32 by
the Defender platform update, not the Windows image, so a host whose
platform is still at the image's baseline lacks them. Two hosted ARM64
runners on the same image differed on this within ten minutes, failing
the inbox-module test on one. The test treats them like the edition-only
modules: listed, and allowed to be missing from the host.
---
 Tests/Unit/Private/Get-IslInboxModule.Tests.ps1 | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/Tests/Unit/Private/Get-IslInboxModule.Tests.ps1 b/Tests/Unit/Private/Get-IslInboxModule.Tests.ps1
index 47b8eda..adf5dee 100644
--- a/Tests/Unit/Private/Get-IslInboxModule.Tests.ps1
+++ b/Tests/Unit/Private/Get-IslInboxModule.Tests.ps1
@@ -26,6 +26,11 @@ BeforeAll {
     $script:EngineModule = 'Microsoft.PowerShell.Core'
     # Pro and Enterprise features a Home edition does not ship (Windows 11 Home 24H2, ARM64)
     $script:EditionOnly = 'AppLocker', 'AppvClient', 'AssignedAccess', 'BranchCache', 'ConfigCI', 'iSCSI', 'UEV'
+    # Put under System32 by the Defender platform update rather than the Windows image, so a host
+    # whose Defender platform is still at the image's baseline does not have them yet. Two hosted
+    # ARM64 runners on the same image (windows-11-vs2026-arm64 20261013.183.4) differed on this
+    # within ten minutes of each other; a device that has updated once has both
+    $script:PlatformUpdateModules = 'ConfigDefender', 'ConfigDefenderPerformance'
     # Windows features that put a module under System32 when they are turned on: Hyper-V and the
     # container and host-guardian family. HostNetworkingService is there on a Windows 11 Home ARM64
     # host without the feature. None is on a plain device, so none is in the table
@@ -84,7 +89,7 @@ Describe 'Get-IslInboxModule' -Tag 'Unit', 'Private' {
             $script:HostModules.Count | Should-BeGreaterThan 50
             $missing = @($script:Table | Where-Object {
                     $_ -ne $script:EngineModule -and $_ -notin $script:EditionOnly -and
-                    $_ -notin $script:HostModules
+                    $_ -notin $script:PlatformUpdateModules -and $_ -notin $script:HostModules
                 })
             $missing | Should-BeCollection @()
         }