Make Windows 11 first-class, add security policy

Update project to emphasize Windows 11 support and add a security policy, plus small runtime and packaging fixes.

Changes:
- README: simplify Windows badge and update requirements to Windows 11 (Build 22000+).
- Installer (setup.iss): set MinVersion=10.0.22000.
- app.manifest: remove legacy Windows supportedOS IDs and keep PerMonitorV2 DPI setting.
- docs/TROUBLESHOOTING.md: remove Windows 10-specific startup troubleshooting (Windows 11-first messaging).
- Add SECURITY.md pointing to docs/SECURITY.md for the full policy and disclosure process.
- .gitignore: ignore FINAL_RELEASE_PLAN.md and RELEASE_PLAN.md.
- Services/SecurityService.cs: introduce MaxLogTokenLength constant and replace hard-coded 200 when truncating log tokens.
- App.xaml.cs: await settingsService.LoadSettingsAsync() with ConfigureAwait(false) and adjust service activations.

Author: PrimeBuild-pc

.gitignore

@@ -35,6 +35,8 @@ coverage*.info
 *.coverage
 *.coveragexml
 *.trx
+FINAL_RELEASE_PLAN.md
+RELEASE_PLAN.md
 
 # .NET / NuGet
 *.deps.json

App.xaml.cs

@@ -283,9 +283,7 @@ private async Task<int> RunSmokeTestAsync(ILogger logger)
                 logger.LogInformation("Starting ThreadPilot smoke test");
 
                 var settingsService = this.ServiceProvider.GetRequiredService<IApplicationSettingsService>();
-                await settingsService.LoadSettingsAsync();
-
-                _ = this.ServiceProvider.GetRequiredService<MainWindow>();
+                await settingsService.LoadSettingsAsync().ConfigureAwait(false);
                 _ = this.ServiceProvider.GetRequiredService<ProcessViewModel>();
                 _ = this.ServiceProvider.GetRequiredService<PowerPlanViewModel>();
 

Installer/setup.iss

@@ -40,6 +40,7 @@ SolidCompression=yes
 WizardStyle={#MyWizardStyle}
 ArchitecturesInstallIn64BitMode=x64compatible
 ArchitecturesAllowed=x64compatible
+MinVersion=10.0.22000
 UninstallDisplayIcon={app}\{#MyAppExeName}
 
 [Languages]

README.md

@@ -4,7 +4,7 @@
 [![Release](https://img.shields.io/github/v/release/PrimeBuild-pc/ThreadPilot?sort=semver)](https://github.com/PrimeBuild-pc/ThreadPilot/releases)
 [![Coverage](https://codecov.io/gh/PrimeBuild-pc/ThreadPilot/branch/main/graph/badge.svg)](https://codecov.io/gh/PrimeBuild-pc/ThreadPilot)
 [![winget](https://img.shields.io/winget/v/PrimeBuild.ThreadPilot)](https://github.com/microsoft/winget-pkgs)
-[![Windows](https://img.shields.io/badge/Windows-11%20official%20%7C%2010%20best--effort-blue?logo=windows)](https://www.microsoft.com/windows)
+[![Windows](https://img.shields.io/badge/Windows-11-blue?logo=windows)](https://www.microsoft.com/windows)
 [![.NET](https://img.shields.io/badge/.NET-8.0-512BD4?logo=dotnet&logoColor=white)](https://dotnet.microsoft.com/)
 [![License](https://img.shields.io/badge/License-AGPLv3-blue.svg)](LICENSE)
 
@@ -21,15 +21,15 @@ The project targets users who need Process Lasso style capabilities in a modern
 - I/O and scheduling related tuning utilities.
 - Rule-driven power plan switching based on process start/stop events.
 - Conditional profiles, system tray controls, and runtime monitoring.
-- Windows 11 first-class support; Windows 10 support is best effort.
+- Windows 11 first-class support.
 
 ## Screenshots
 
 <img width="2470" height="1696" alt="Gemini_Generated_Image_xzgtdpxzgtdpxzgt" src="https://github.com/user-attachments/assets/e535e496-8b7d-4d38-883b-e0c7f68a610f" />
 
 ## ⚙️ Requirements
 
-- Windows 11 (official support), Windows 10 22H2+ (best effort).
+- Windows 11 (Build 22000+).
 - .NET 8 SDK for source builds.
 - Administrator privileges are required only for advanced process and power operations.
 

SECURITY.md

@@ -0,0 +1,3 @@
+# Security Policy
+
+See [docs/SECURITY.md](docs/SECURITY.md) for the full security policy, supported versions, and vulnerability disclosure process.

Services/SecurityService.cs

@@ -70,6 +70,7 @@ public class SecurityService : ISecurityService
 
         private const uint ProcessQueryLimitedInformation = 0x1000;
         private const int ProcessProtectionInformationClass = 61;
+        private const int MaxLogTokenLength = 200;
 
         [StructLayout(LayoutKind.Sequential)]
         private struct ProcessProtectionInformation
@@ -294,8 +295,8 @@ private static string SanitizeForLog(string value)
                 .Replace('\t', ' ')
                 .Trim();
 
-            return sanitized.Length > 200
-                ? sanitized[..200]
+            return sanitized.Length > MaxLogTokenLength
+                ? sanitized[..MaxLogTokenLength]
                 : sanitized;
         }
     }

app.manifest

@@ -15,19 +15,12 @@
     <application>
       <!-- Windows 10 and 11 -->
       <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
-      <!-- Windows 8.1 -->
-      <supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
-      <!-- Windows 8 -->
-      <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
-      <!-- Windows 7 -->
-      <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
     </application>
   </compatibility>
 
   <!-- DPI awareness -->
   <application xmlns="urn:schemas-microsoft-com:asm.v3">
     <windowsSettings>
-      <dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
       <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness>
     </windowsSettings>
   </application>

docs/TROUBLESHOOTING.md

@@ -32,14 +32,6 @@ What to do:
 - Ensure Performance Logs and Alerts services are healthy.
 - Validate that perflib counters are enabled on the machine.
 
-## App Does Not Start on Windows 10
-ThreadPilot officially targets Windows 11; Windows 10 support is best effort.
-
-What to do:
-- Install latest Windows 10 updates (22H2+ recommended).
-- Install .NET 8 runtime/SDK if running from source.
-- Check %TEMP%\ThreadPilot_Debug.log for startup diagnostics.
-
 ## Smoke Test Command
 For CI or local validation: