build(hololake): add verified Windows x64 distribution path

product-source/hololake-native-desktop/scripts/release-pipeline.test.mjs

@@ -1,4 +1,5 @@
 import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
 import test from 'node:test'
 
 import {
@@ -74,3 +75,11 @@ test('release pipeline requires updater signing, Developer ID and Apple notariza
     APPLE_TEAM_ID: 'TEAM',
   }))
 })
+
+test('Windows updater keeps signed installation but never claims the macOS rollback boundary', () => {
+  const source = readFileSync(new URL('../src-tauri/src/release_update.rs', import.meta.url), 'utf8')
+  assert.match(source, /SIGNED_PACKAGE_VERIFIED_INSTALLING_NO_LOCAL_ROLLBACK/)
+  assert.match(source, /HOLOLAKE_RELEASE_WINDOWS_LOCAL_ROLLBACK_NOT_AVAILABLE/)
+  assert.match(source, /snapshot\.envelope\.hololake\.rollback\.supported\s*&&\s*platform_recovery\.local_rollback_available/)
+  assert.match(source, /update\.install\(&bytes\)/)
+})