[shailendra-nv]

Summary

Finish the MXC documentation corrections after #4757 supplies the shared Windows guide, reviewed platform entry points, and published ETW audit warning. Correct the test reference, policy/runtime limitations, RFC runtime binary names, and CLI policy-update guidance without changing the implementation.

Related Issue

Closes #4645.

Depends on #4757. #4758 is already merged into main; merge #4757 into windows first to restore its missing guide and CI-heading links, then merge this PR. This branch incorporates the updated #4757 commits so the shared edits are consistent. After #4757 is merged, this PR's remaining diff is six Markdown/MDX files.

The repository permits squash merges only. The proposed squash order was simulated against the current Windows base and is conflict-free; the result matches this branch's final tree. Auto-merge on this PR is disabled until its prerequisite lands. Related roadmap issue #4450 remains open.

Changes

• Keep the concise Windows discovery sections, gateway example, and full-validation failure handling approved in docs(windows): route main documentation to the Windows release branch #4758 and implemented by docs(windows): document the Windows implementation and release branch #4757.
• Correct the Windows quick reference for Nextest/server test-support behavior, log filenames, Z3 import-library linkage, and selective driver contracts.
• Clarify that native Windows runs host commands rather than OCI images and uses MXC filesystem/proxy controls; retain the documented host-loopback and revocation limits.
• Carry the published ETW attribution warning from docs(windows): document the Windows implementation and release branch #4757, including failed live qualification on the tested ARM64 host. The linked page and its warning now land together in docs(windows): document the Windows implementation and release branch #4757 to address the Codex review.
• Align RFC 0013 with openshell-windows-sandbox.exe and the implemented Windows kernel socket-owner lookup.
• Remove the obsolete CLI skill claim that MXC rejects all live network policy updates; proxy policy updates use the shared supervisor.
• Preserve the windows branch references and change documentation only. No runtime, task, dependency, or policy-fixture changes.

Testing

• mise run --skip-tools docs passes: navigation matches file paths; Fern 5.112.0 reports zero errors and two warnings for unauthenticated redirect checking and theme contrast.
• Markdown lint passes for 157 files; Mermaid validation passes for 206 files.
• Direct Markdown validation passes for the skill/reference files excluded from the root lint selection.
• Source checks validate the 18 documentation-only files relative to the current Windows base, 19 Windows tasks, four MXC TOML snippets, two detached JSON examples, immediate exit-code checks, and DCO headers.
• The PowerShell examples are byte-for-byte identical to the reviewed docs(windows): route main documentation to the Windows release branch #4758 blocks tested for docs(windows): document the Windows implementation and release branch #4757; the shared validation results are below.
• All repository paths and anchors among the 49 audited docs(windows): route main documentation to the Windows release branch #4758 link occurrences validate in the proposed Windows tree. HTTP verification covers 23 distinct targets; the current public guide 404 and missing CI heading are supplied by docs(windows): document the Windows implementation and release branch #4757, while runner-vetter help requires corporate sign-in.
• git diff --check and the documentation-only commit hook pass.
• Squash-merge simulation for docs(windows): document the Windows implementation and release branch #4757 followed by this PR is conflict-free against base 624f55b3c6affedd4f2757c7eb32132196b4c3e8 and produces tree ce99943b472156fb0a51c8c289d273f8b5176f65.

Shared PowerShell validation ran on N1x-Test (native ARM64), covering six syntax checks and 28 simulated task-exit cases per shell, including both architecture paths and incomplete E2E coverage. This is 68 test executions shared with #4757, not another 68 executions or native MXC qualification.

Suite	Total	Passed	Skipped/ignored	Failed	Result
Windows PowerShell 5.1	34	34	0	0	PASS
PowerShell 7.6.6	34	34	0	0	PASS
All test executions	68	68	0	0	PASS

Full pre-commit was attempted but did not complete dependency setup. The sandbox cannot start sccache; the unrestricted dependency-download retry was stopped, and a cached retry still lacks grpcio==1.78.0 and deltae==0.3.2. Scoped documentation checks and the documentation-only commit hook passed. No full Rust/SDK CI or native OpenShell runtime/E2E qualification result is claimed.

Checklist

• Follows Conventional Commits.
• All commits are signed off (DCO).
• Existing design documentation updated in RFC 0013.
• Preserves the review decisions from merged docs(windows): route main documentation to the Windows release branch #4758 and documents the required merge order.

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-27T23:52:10.817599Z	adaf82f	New commits
🔒 Security Review	✅ Completed 2026-10-27T23:52:57.843882Z	adaf82f	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-4646.docs.buildwithfern.com/openshell

[shailendra-nv]

/ok to test

[copy-pr-bot]

/ok to test

@shailendra-nv, there was an error processing your request: E1

See the following link for more information: https://docs.gha-runners.nvidia.com/cpr/e/1/

[shailendra-nv]

@drew Review requested for this documentation-only PR. The source-consistency review of commit 3eb4b7e found no actionable issues; the PR head and Windows base are unchanged since that review. Documentation preview and DCO checks pass.

Pre-merge validation is blocked: copy-pr-bot rejected my /ok to test request with E1, and no pull-request/4646 workflow runs have started. Please review and help obtain validation from an authorized PR vetter. The E1 documentation requires corporate sign-in, so I have not verified its specific cause.

Squash auto-merge is enabled, subject to the required approval and checks. Native runtime/E2E tests were not rerun as part of this documentation review.