# Recovery 3001 0.4.0 Beta 1 Dev 10 R8

Dev 10 R8 makes file preview understandable to a person trying to recover
lost USB files without exposing storage-engine diagnostics in the default
window. It remains an unsigned Windows development build, not a commercial GA
release.

## What changed

- The default preview now shows file type, size, plain recovery likelihood,
  how much of the file could be checked, and the recommended next action.
- Photos and readable text remain directly visible.
- PDF, Office, CAD, video, and other formats that cannot be rendered safely in
  the app show a clear instruction to recover the file and open it with the
  appropriate application.
- Large-file, incomplete-read, and decode limitations use a short user-facing
  warning instead of raw byte diagnostics.
- Internal candidate IDs, filesystem labels, recovery method, numeric score,
  exact read length, SHA-256, validation notes, and hexadecimal data are now
  available only in a collapsed expert record.
- The loading state no longer exposes an internal candidate identifier.
- High, needs-review, and possibly-damaged states each provide a distinct plain
  explanation rather than a score alone.

## Preserved behavior

- The source USB remains read only and is never used as a work or recovery
  destination.
- Automatic safe-workspace selection, capacity checks, same-USB reconnect,
  deleted-file scanning, categorized selection, non-overwriting recovery, and
  output reports are unchanged.
- The recovery engine did not change. Published R4 FAT32 and exFAT 1,000-file
  exact regressions remain retained evidence and are not R8 reruns.
- Distribution remains one installer EXE with Start menu, desktop shortcut,
  and Windows uninstall registration.

## Acceptance

R8 must pass the full Rust workspace, Clippy with warnings denied, the three
logical layout profiles, native Windows 11 states at 150%, release build, and
installer lifecycle verification. Automated preview tests must prove that the
default summary excludes internal IDs, filesystem and cluster terms, exact
byte diagnostics, SHA-256, numeric scores, and hexadecimal data.

## Remaining external gates

- Actual Windows 10 x64 execution.
- A destructive copy-delete-recover run on a separately provisioned test USB.
- Four of five real non-expert users complete the workflow without help.
- Additional USB vendors, capacities, and a physical exFAT device.
- Long physical disconnect and read-error endurance testing.
- Trusted Windows code signing and SmartScreen reputation.

Android remains deferred and is not included.
