Windows 11 Release Guard

Windows release policy guard for broad-fleet Windows 11 version checks.

Windows 11 Release Guard tells administrators whether an existing Windows 11 device is on the current fleet release and quality baseline, using a signed JSON feed, build-first local evidence, a static GitHub Pages dashboard/API, and a PyPI package for sysadmin/RMM automation. The repository, distribution package, installed console command, and Python import package use the same win11_release_guard name.

Quick Start

python -m pip install win11_release_guard
win11_release_guard --pretty
win11_release_guard --strict-production --json-pretty --no-wua

The last line is the usual production/RMM compliance job.

What It Checks

Detail: Architecture, Local Windows Detection, FAQ.

Public Feed And Dashboard

/api/v1 mirrors these as stable aliases, kept backward compatible, with signing-key overlap, for at least 24 months.

Detail: GitHub Pages Dashboard, dashboard docs.

Safety And Trust Model

• Runtime clients do not authenticate to GitHub and do not need GitHub tokens, private repository access, or a paid signing certificate. The private signing key lives only in a GitHub Actions secret.
• The production generator may use public Microsoft Release Health HTML, the public Microsoft servicing table-of-contents JSON, public Microsoft servicing support articles, and unauthenticated public MSRC CVRF data for source diagnostics and informational enrichment; it does not use Microsoft Graph or token-authenticated Microsoft APIs.
• Badges are signals, not proof. Dependency freshness is checked by a scheduled workflow. Dependency freshness is a scheduled direct-dependency check over direct dependency specifiers, not an always-current dependency guarantee. The Pylint badge reports the workflow for the current --fail-under=8.0 gate, not a permanent quality certificate.

Detail: Policy Feed and Trust Model, security automation.

Documentation

The generated Pages Wiki is the primary public, indexed documentation surface. The GitHub Wiki mirrors the same wiki/*.md source.

Deployment-affecting changes require the live Pages gate before merging. Use the full gate in AGENTS.md and Build, Test and Release when changing workflows, the policy generator, signing, Pages, manifest/API aliases, source URLs, or public-check CLI behavior.

Support The Project

If Windows 11 Release Guard saves you time or helps your fleet checks, please star the repository. Stars make the project easier for other Windows administrators to discover and help justify continued testing, documentation, release automation, and dashboard work.

Contribution, Support, License

Issues · Releases · MIT license, see LICENSE.txt

This project is independent open-source software and is not affiliated with Microsoft.