# Recovery 3001 0.4.0 Beta 1 Dev 10 R7

Dev 10 R7 turns a mid-read USB disconnect from a manual retry into a guided,
fail-closed automatic resume flow. It remains an unsigned Windows development
build, not a commercial GA release.

## What changed

- When the selected USB disconnects or its live identity changes during the
  safe read, the current read stops immediately and the completed prefix stays
  in the separate work location.
- Recovery 3001 checks connected USB devices every two seconds while waiting.
  The user only needs to reconnect the original USB; there is no refresh or
  retry button requirement in the normal reconnect path.
- Automatic resume requires the same stable device fingerprint, capacity, and
  logical read unit. A different USB is never selected automatically.
- Windows may assign a different drive letter or physical disk number after
  reconnection without preventing a valid fingerprint match.
- Before any new source bytes are read, the existing source-bound checkpoint,
  completed-prefix SHA-256, device capacity, and logical read unit are validated
  by the existing recovery core.
- The progress bar starts at the already preserved byte count instead of
  visually returning to zero.
- After three repeated automatic resume failures, automatic retries stop and
  the user is directed to a stable USB port. Preserved data is retained and no
  result is claimed complete.
- The default disconnect screen explains cause, impact, and next action without
  exposing image, checkpoint, sector, session, or PhysicalDrive terminology.

## Preserved safety and recovery behavior

- Guided discovery still exposes only confirmed non-system FAT32/exFAT USB
  storage.
- The source USB is read only and is never used as the work or recovery
  destination.
- System disks remain hidden and same-physical-disk work or recovery
  destinations fail closed.
- Automatic safe-workspace selection, capacity preflight, scan validation,
  preview, categorized selection, output verification, and non-overwriting
  reports are unchanged.
- Distribution remains one installer EXE with Start menu, desktop shortcut,
  and Windows uninstall registration.

## Evidence scope

R7 must pass the full Rust workspace, Clippy with warnings denied, the three
logical layout profiles, nine native Windows 11 states at 150%, release build,
and installer lifecycle verification before publication. The disconnect state
must visibly show automatic waiting and safe preservation.

The recovery engine did not change. Published R4 FAT32 and exFAT 1,000-file
exact regressions remain retained engine evidence and must not be described as
R7 reruns. A non-destructive physical USB preflight is also not a deleted-file
recovery result.

## Remaining external gates

- Actual Windows 10 x64 execution.
- A destructive copy-delete-recover run on a separately provisioned test USB
  through the exact current product flow.
- Four of five real non-expert users complete the workflow without help.
- Additional USB vendors, capacities, and a physical exFAT device.
- Long physical disconnect and read-error endurance testing.
- Windows code-signing certificate, signed artifacts, and SmartScreen trust.

Android remains deferred and is not included.