Windows 11 Release Guard

Quick Start

Use this when you want to install the released package, run a human check, and verify the public policy feed quickly.


Install

python -m pip install win11_release_guard

Run

NeedCommand
Human console outputwin11_release_guard --pretty
JSON for RMM/scriptswin11_release_guard --json-pretty --no-wua
Production-style source gatingwin11_release_guard --strict-production --json-pretty --no-wua
Check signed policy sourcewin11_release_guard --check-policy-source
Check public Pages surfacewin11_release_guard --check-public-pages

Local Integrity

python -m compileall -q win11_release_guard tools
python -m win11_release_guard --self-test
python -m win11_release_guard --diagnose-config
pytest -q

What To Expect

StatusMeaning
COMPLIANTInstalled release/build meets the signed policy target and baseline.
FEATURE_UPDATE_REQUIREDExisting device is below the broad target release.
QUALITY_UPDATE_REQUIREDDevice is on target release but below required baseline.
CHECK_INCOMPLETEPolicy source/trust/freshness was not good enough to decide.
ABOVE_BROAD_TARGET_OR_SPECIAL_RELEASEDevice is on a release above or outside the broad target semantics.

Home | CLI and RMM Usage | Troubleshooting