# Recovery 3001 0.4.0 Beta 1 Dev 10 R15

R15 adds safe NAS and Windows network-share workspaces to the guided USB
recovery flow. It keeps the source USB read-only and retains every local
same-disk protection from R14.

## What changed

- Detects mapped Windows network drives and well-formed UNC share paths.
- Automatically considers a mapped NAS drive when choosing a workspace with
  enough capacity for the full USB image.
- Labels NAS workspaces plainly in the guided interface.
- Allows image and recovered-file output on a verified network share without
  pretending it is a local physical disk.
- Continues to resolve and compare physical disk numbers for every local
  destination.
- Rejects device namespaces, volume GUID paths, relative paths, drive-relative
  paths, and incomplete UNC paths before creating output.
- Explains that a safe alternative can be another local drive or a NAS folder.
- Extends the physical-USB preflight with network capacity detection and an
  optional 1 MiB write/read/remove workspace probe.

## Safety behavior

- The source USB is never opened for writing.
- Windows system disks remain hidden and blocked.
- Local destinations on the source USB remain blocked by physical disk number.
- A network destination is accepted only as a valid UNC share or when Windows
  classifies the mapped drive as remote.
- Capacity is checked before creating the USB image or recovered files.
- Existing recovery output is not overwritten.

## Verification

- Windows application tests: 59 passed.
- Warnings-denied Clippy: passed.
- Real SanDisk accessible-content digest before/after: exact match.
- Real NAS workspace: network classification passed.
- NAS capacity: sufficient for the 61.5 GB source USB.
- NAS 1 MiB write/read probe: exact round trip and temporary file removed.
- Source-USB write operations requested by the preflight: zero.

## Scope and open commercial gates

R15 changes destination selection and workspace support, not filesystem
recovery algorithms. The retained R4 FAT32/exFAT 1,000-file exact
size/SHA-256 evidence is unchanged and is not represented as an R15 engine
rerun.

The real NAS preflight is non-destructive. A full raw image still requires
Windows administrator approval. Windows 10 target evidence, a production
code-signing certificate, a four-of-five unassisted user study, and an
authorized destructive recovery regression on a separately provisioned test
USB remain open gates.