# Recovery 3001 0.4.0 Beta 1 Dev 10 R5

Dev 10 R5 is a visual-polish revision of the USB-first guided flow. The
recovery engine and the R4 resumed-work safety boundary are unchanged. It is an
unsigned Windows development build, not a commercial GA release.

## What changed

- A calm blue, white, and slate visual system replaces the default grey
  development appearance.
- The product header now keeps the read-only USB guarantee visible as a safety
  badge throughout the workflow.
- The six-step rail has a stronger current-step state and clearer completed
  states.
- The welcome screen separates the three simple recovery actions from the
  important “do not write to the USB” warning.
- Source confirmation and safe-read preparation use distinct information and
  success cards.
- Primary actions now have consistent size, color, contrast, and hierarchy.
- The completion screen leads with recovered, verified, and failed counts and a
  clear action to open the recovered folder.
- Typography, spacing, borders, input fields, hover states, warnings, and error
  guidance are consistent across the nine audited states.

## Preserved Dev 10 gates

- Guided discovery shows only confirmed non-system FAT32/exFAT USB storage.
- Exactly one eligible USB is selected automatically.
- Deleted-file scanning begins within two user selections.
- Work and recovered files cannot be written to the source USB.
- R4 source-device binding and fail-closed same-USB recovery remain unchanged.
- Capacity, disconnect, cancellation, resume, and verification guidance remain
  visible and honest.
- Internal paths and hashes remain in collapsed expert records.
- Distribution remains one installer EXE with install, Start menu launch, and
  uninstall verification.

## Evidence scope

R5 must pass the automated Rust suite, Clippy, the Windows 11 150% native
nine-screen UI audit, and installer lifecycle verification before publication.
The recovery engine is unchanged, so the already published R4 FAT32 and exFAT
1,000-file exact regressions remain the core-engine evidence and are not
relabeled as R5 reruns.

## Remaining external gates

- Actual Windows 10 x64 execution.
- A new destructive copy-delete-recover test on a separately provisioned USB
  through the exact current product flow.
- Four of five real non-expert users complete the workflow without help.
- Additional physical USB vendors, capacities, and a physical exFAT device.
- Long physical disconnect and read-error endurance testing.
- Windows code-signing certificate, signed binaries, and SmartScreen trust.

Android remains deferred and is not included.