AppDock v0.1.2: Windows external-path remediation

[eWOOD29]

Summary

Completes the AppDock v0.1.2 Windows external-path remediation by correcting the final AppManager.discover() consumer contract identified by Work Package 15.

Work Package 16 scope

• persists explicit imported-registration path-flavor provenance through migration, rollback, re-import, and recovery
• keeps canonical Windows directory and cwd values lexical during discovery instead of reinterpreting them with the executing host's pathlib
• converts to native runtime paths only at the supported-host launch boundary
• fails closed on unsupported hosts before subprocess, source-filesystem, or application operations
• adds focused final-consumer regression coverage and deterministic cross-host discovery.json evidence

Frozen identities

• Required base: 35397892914e305bf38a02406df7a50f68ec8e7b
• Failed reviewed head retained in history: 78f972783d32c9d26af247f72bc4ccc78918f246
• New exact candidate: 8b1c28329ed4cdcf5e6e902e01e43d8259e62222
• Branch: work/appdock-0.1.2-windows-path-remediation
• Ancestry: 28 commits ahead and 0 behind the required base; all 19 reviewed commits remain exact and ordered

Validation

Exact-head CI run 30214351654 is green across Windows and Ubuntu with Python 3.11 and 3.13. The Windows and Ubuntu public package bytes match exactly. Synthetic Windows-flavor preview, discovery evidence, migration digest, and private fixture bytes also match exactly across hosts. AppManager discovery preserves all eight canonical directory/cwd pairs, while hidden-app filtering remains intact.

The canonical corrected protected package and the prior rejected package were freshly downloaded and privately reverified as unchanged, owner-only, and unshared. Protected-package preview, disposable import, AppManager discovery, rollback, re-import, and recovery checks completed without operating any registered application or source directory.

Safety

PR #2 remains open, draft, and unmerged. The published v0.1.1 release remains unchanged. No installation, live migration, application start/stop/restart, Startup, Tailscale, DNS, certificate, firewall, port, protected-package, preserved-evidence, or Project Hub change was performed.

Fresh review entry point

A fresh independent Work Package 17 reviewer should review only candidate 8b1c28329ed4cdcf5e6e902e01e43d8259e62222, required base 35397892914e305bf38a02406df7a50f68ec8e7b, failed reviewed head 78f972783d32c9d26af247f72bc4ccc78918f246, draft PR #2, exact-head CI run 30214351654, the retained public artifacts, and the unchanged canonical protected packages.