# Recovery 3001 0.4.0 Beta 1 Dev 10 R3

Dev 10 R3 is a recovery-output safety revision of the USB-first guided flow.
It is an unsigned Windows development build, not a commercial GA release.

## What changed

- The selected files' expected byte total is calculated before choosing the
  recovery destination.
- The destination chooser starts at the already verified safe workspace.
- Recovery requires the selected payload plus a one-percent safety reserve,
  with a minimum reserve of 64 MiB.
- Insufficient destination capacity is blocked before the recovery worker
  creates any file.
- The default file-selection screen shows the selected count and expected
  recovery size.
- Long candidate names are constrained to a readable filename column with the
  full name available on hover, avoiding a horizontal table overflow at the
  supported 1024x720 working area.
- The native window now clears to an opaque product background so layered
  candidate rows and audit captures do not leave transparent or stale regions.
- The working state shows expected, required, and available capacity.
- Capacity failure continues to show a plain-language cause, impact, and next
  action without exposing storage-engine terms.

## Preserved Dev 10 gates

- Guided discovery shows only confirmed non-system FAT32/exFAT USB storage.
- Exactly one eligible USB is selected automatically.
- Deleted-file scanning begins within two user selections.
- Work and recovered files cannot be written to the source USB.
- Default storage-engine term exposure remains zero.
- UNC, volume-GUID, drive-relative, device-namespace, unresolved, and
  same-device destinations fail closed before file creation.
- Disconnect, cancellation, resume, read-error, completion-count,
  verification, and result-folder guidance remains visible and honest.
- FAT32 and exFAT real-data regression must remain 1,000/1,000 exact size and
  SHA-256 matches before publication.
- Distribution remains one installer EXE with install, Start menu launch, and
  uninstall verification.

## Remaining external gates

- Actual Windows 10 x64 execution.
- Four of five real non-expert users complete the workflow without help.
- Additional physical USB vendors and capacities.
- Long physical disconnect and read-error endurance testing.
- Windows code-signing certificate, signed binaries, and SmartScreen trust.

Android remains deferred and is not included.