PublicVPNList Windows 0.2.0 beta.1 / 2026-10-16
Windows 11 x64 only; installer UI file version 0.2.0+20; sing-box 1.14.2.

This is a test release. Its Authenticode certificate is self-signed and not trusted by Windows. No verified publisher identity or trusted timestamp is claimed. Inner binaries are not Authenticode signed. Do not import a test root or disable security software. The publisher declined paid certificate issuance.

Observed native tests: Go runtime/service/WFP and Windows ABI checks; native Flutter/C++ build and 19 UI tests; actual local-user named-pipe authorization and fake-server rejection; protected runtime ACL and DPAPI wrong-identity isolation; installed core hashes; UAC cancellation and acceptance; tray hide/reopen; real VLESS REALITY system TUN, changed exit IP, Google204 and system DNS; core crash failover; service crash retained filtering/no automatic reconnect; explicit recovery and direct connection restoration; armed update/uninstall guards; unrelated firewall rule preservation; physical-interface packet captures during the exercised connected/crash/recovery intervals; rejection of an ordinary user's attempt to use the installed core to bypass active protection.

A fresh Windows 11 Enterprise LTSC 2024 Evaluation VM (26100.1742), Secure Boot and TPM enabled, was used for a personal installation test. The owner connected successfully. Google and TikTok video playback were observed through VLESS + REALITY. This does not establish every TikTok feature or every Windows configuration.

Other included protocol capabilities have not completed live Windows server acceptance. OpenVPN and IPv6 transport endpoints are not enabled. Filtering after BFE initialization is not protection during early Windows boot. Standby S3 is unavailable in this VM; physical-device sleep remains untested. Public servers can log, fail or slow down; no anonymity or universal access guarantee is made.

Final helper additionally fixes native WFP pointer lifetime across Go stack growth. Repeated real Connect/Disconnect and ten native Apply/GC/readback/Release cycles passed. The final installer rejects /DIR and /LOADINF redirection before writing files or altering ACLs; native sentinel and service-state tests passed.

An actual reboot retained armed protection and did not reconnect automatically. Connected hibernate/resume and a12-second virtual link interruption retained protection; the observed physical-interface interval contained only approved core/API transports and local DHCP. Standby S3 and other physical hardware remain untested. Clean removal exited0 and removed the service/core/application root. Additional lifecycle results are recorded in release-acceptance.json. This file describes only observed tests, not an independent security audit.