Fixed

Current documentation and frozen replay authority now identify the independently verified v0.10.9 files and all ten published crates. Relocated-library recovery, calibration evidence timing, managed shutdown, final proxy counters and clean Windows startup are described as shipped, while v0.10.8 limitations remain historical.

Deep Capture now releases exact managed owners despite separate unproven same-name process events and reports unresolved inherited routing and session-added trust as incomplete. Doctor retains the trust obligation until every observed plausible routed process has exited. Ordinary Deep Capture honors a requested observation up to five minutes, with its effective duration visible in the plan and terminal result; calibration retains its shorter limit.

Deep Capture now uses one machine-specific installation CA trusted in LocalMachine/Root for all Windows users, rather than adding and removing a root per session. First installation removes identified pre-S185 Fragcap state. MSI provisioning and explicit portable ca install verify the signer and exact root; startup, Doctor and Deep Capture report or refuse unhealthy installation trust. Session cleanup and ordinary uninstall retain the root until explicit exact-fingerprint removal.