← BACK TO SECURITY & TRUST
// POST-CHECKOUT ONBOARDING :: SMARTSCREEN GUIDANCE

Windows SmartScreen & Defender Guidance

Our software runtimes ship as bare-metal PE32+ executables (justified_engine.exe), Windows installers (justified_engine_setup.msi), and dynamic C-ABI libraries (justified_core.dll) compiled directly from native MSVC and NVCC toolchains with zero telemetry wrappers, advertising frameworks, or background updater bloat.

AUTHENTICODE HARDWARE HSM ATTESTED
// 2-CLICK DEFENDER INITIALIZATION PROCEDURE

Windows Defender SmartScreen Verification

Because raw native runtimes bypass multi-megabyte commercial retail installer wrappers and operate under our private HSM-backed enterprise root authority rather than a retail consumer CA, Windows Defender SmartScreen attaches an NTFS Mark-of-the-Web (Zone.Identifier = 3) to browser downloads. This displays an "Unknown Publisher" prompt upon initial launch:

STEP 1 When the blue "Windows protected your PC" modal appears, click "More info".

STEP 2 Verify the publisher signature reads "CLIGetDefaultPolicy" (Thumbprint: 379A208A4223EE53525B0BBAE9FC4A7FCE76DE9C) and click "Run anyway".

Instant Terminal Unblock Protocol (PowerShell): Developers can remove the NTFS Mark-of-the-Web across all binaries in one command before executing:

# 1. STRIP MARK-OF-THE-WEB ZONE IDENTIFIERS: Unblock-File -Path .\justified_engine_setup.msi Unblock-File -Path .\justified_engine.exe Unblock-File -Path .\justified_core.dll # 2. AUTHENTICODE HARDWARE SIGNATURE VALIDATION: Get-AuthenticodeSignature -FilePath .\justified_engine_setup.msi | Format-List Get-AuthenticodeSignature -FilePath .\justified_engine.exe | Format-List Get-AuthenticodeSignature -FilePath .\justified_core.dll | Format-List # 3. CRYPTOGRAPHIC SHA-256 INTEGRITY AUDIT (Release Build Attestation): Get-FileHash -Path .\justified_engine_setup.msi -Algorithm SHA256 # Verified MSI SHA-256: 930AC4E18A000F932324F0C37B8C4D3B5303AD11FE9E8DB1D6B9FD623AF09A8D Get-FileHash -Path .\justified_engine.exe -Algorithm SHA256 # Verified CUDA Fatbin SHA-256: BA5D0029036DD7BBF77F1B1211C6628ADB050AC174D8C1E16331AEC335527F3A Get-FileHash -Path .\justified_core.dll -Algorithm SHA256 # Verified C-ABI Substrate: Authenticode HSM Verified (CN=CLIGetDefaultPolicy)
// ENTERPRISE IT WHITELISTING & ROOT DEPLOYMENT

Enterprise Group Policy & WDAC Deployment

Enterprise administrators deploying across restricted Windows 10/11 Enterprise environments can deploy our pre-compiled Windows Defender Application Control (WDAC) XML policy directly to authorize our cryptographic signing certificate across enterprise endpoints without manual per-machine prompts.

DOWNLOAD WDAC POLICY XML ↓ VIEW ENTERPRISE COMPLIANCE DOSSIER →