Added

Add an explicit Windows Deep Capture composite route that combines managed child proxy settings with signed final-client direct TCP and supported UDP routing. Guided calibration and ordinary sessions bind the exact route identity to compatibility facts and authorization, so earlier environment-only evidence cannot qualify the direct route. Controlled Windows integration and exact MSI and ZIP certification qualify the released route and its unrelated-traffic continuity.