diff --git a/.gitattributes b/.gitattributes
index 4018296..fae1034 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -4,3 +4,6 @@
 *.ico binary
 *.cmd text eol=crlf
 *.bat text eol=crlf
+
+# Retain verbatim vendor license/notice bytes, including original whitespace.
+THIRD-PARTY-LICENSES/** -text whitespace=-trailing-space,-blank-at-eof
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
index 22d2956..91c5170 100644
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -11,7 +11,7 @@ body:
     id: version
     attributes:
       label: Version
-      description: The exact version (Help, About, or `--version`).
+      description: The exact version shown in Help → About, including stable or dev edition.
     validations:
       required: true
   - type: textarea
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index ff785d3..d0412bb 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -1,5 +1,11 @@
 blank_issues_enabled: false
 contact_links:
+  - name: User guide
+    url: https://github.com/KofTwentyTwo/MarkdownViewr.Windows/blob/main/docs/user-guide.md
+    about: Opening files, themes, printing, default apps, and troubleshooting.
+  - name: Community support
+    url: https://github.com/KofTwentyTwo/MarkdownViewr.Windows/discussions
+    about: Ask usage questions or discuss ideas with the community.
   - name: Report a security vulnerability
     url: https://github.com/KofTwentyTwo/MarkdownViewr.Windows/security/advisories/new
     about: Please report security issues privately, never as a public issue.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d581873..7695701 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,6 +18,48 @@ concurrency:
 
 jobs:
 
+  reader-regressions:
+    name: reader-regressions
+    runs-on: windows-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Set up .NET
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+        with:
+          global-json-file: global.json
+      - name: Build locked dependencies
+        shell: pwsh
+        run: |
+          dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64 --locked-mode
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          dotnet build MarkdownViewr.Windows.slnx -p:Platform=x64 -warnaserror --no-restore
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+      - name: Verify native source, layout, pickers and print regressions
+        shell: pwsh
+        run: >-
+          dotnet test tests/MarkdownViewr.Windows.UiTests --no-build
+          --filter 'FullyQualifiedName~SourceHighlighting|FullyQualifiedName~Settings_NewWindowPanelDefaults|FullyQualifiedName~Settings_ContentsPresentation|FullyQualifiedName~Settings_ContentsTooltip|FullyQualifiedName~Themes_PalettePreviewAndDefaultChoice|FullyQualifiedName~Settings_PrintingDefaults|FullyQualifiedName~Settings_PrintingDraft|FullyQualifiedName~ThemeTransfer_NativePickerCancels|FullyQualifiedName~Print_UserWidthAndBorders|FullyQualifiedName~ReadingKeys_ScrollCommands|FullyQualifiedName~Source_ShowReloadAndHide|FullyQualifiedName~ThemeEditor_AllTypography|FullyQualifiedName~ThemeEditor_NewCustomTheme|FullyQualifiedName~Appearance_WidthCssAndPrint|FullyQualifiedName~Toolbar_ReadingCommandsAndMenus|FullyQualifiedName~Toolbar_EditorAndPrint|FullyQualifiedName~ThemeTransfer_BatchFutureInvalidAndDisabledExport|FullyQualifiedName~ReadingKeys_HeadingSequences|FullyQualifiedName~Source_BidirectionalScroll|FullyQualifiedName~Source_RawHtmlHeadingProvenance|FullyQualifiedName~Extensions_NativePreferences|FullyQualifiedName~Windows_LocalDocumentLinks|FullyQualifiedName~ActivationInboxTests|FullyQualifiedName~Outline_NestedCollapse'
+          --logger 'trx;LogFileName=reader-regressions.trx'
+          --results-directory artifacts/reader-regressions
+      - name: Retain native regression evidence
+        if: always()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: reader-regression-results
+          path: |
+            artifacts/reader-regressions/*.trx
+            artifacts/installed-smoke-ui/*.png
+            artifacts/installed-smoke-ui/*.log
+            artifacts/installed-smoke-print/*.pdf
+            artifacts/installed-smoke-print/*.png
+          retention-days: 7
+
   installed-updates:
     name: installed-updates
     runs-on: windows-latest
@@ -50,6 +92,8 @@ jobs:
             artifacts/installed-smoke-*/*.json
             artifacts/installed-smoke-*/*.log
             artifacts/installed-smoke-*/*.trx
+            artifacts/installed-smoke-*/*.png
+            artifacts/installed-smoke-*/*.pdf
           retention-days: 7
   ci:
     uses: KofTwentyTwo/standards/.github/workflows/dotnet.yml@fdf5ed029603c938615a32b1beca3628b8787945 # v0.1.2
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
new file mode 100644
index 0000000..f02dc3f
--- /dev/null
+++ b/.github/workflows/fuzz.yml
@@ -0,0 +1,66 @@
+# K22-TEST-25: reproducible security-property campaigns, without browser execution or profile writes.
+name: fuzz
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  schedule:
+    - cron: "34 6 * * 1"
+  workflow_dispatch:
+  workflow_call:
+
+permissions: {}
+
+concurrency:
+  group: fuzz-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  fuzzing:
+    name: fuzzing
+    runs-on: windows-latest
+    timeout-minutes: 15
+    permissions:
+      contents: read
+    env:
+      K22_FUZZ_ITERATIONS: ${{ (github.event_name == 'schedule' || startsWith(github.ref, 'refs/tags/')) && '10000' || '500' }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Set up .NET
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+        with:
+          global-json-file: global.json
+      - name: Restore and build locked core targets
+        shell: pwsh
+        run: |
+          dotnet restore tests/MarkdownViewr.Windows.Core.Tests -p:Platform=x64 --locked-mode
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          dotnet build tests/MarkdownViewr.Windows.Core.Tests -c Release -p:Platform=x64 -warnaserror --no-restore
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+      - name: Restore and build activation adapter targets
+        shell: pwsh
+        run: |
+          dotnet restore tests/MarkdownViewr.Windows.UiTests -p:Platform=x64 --locked-mode
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          dotnet build tests/MarkdownViewr.Windows.UiTests -c Release -p:Platform=x64 -warnaserror --no-restore
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+      - name: Verify seeded parser security properties
+        shell: pwsh
+        run: |
+          Write-Output "Fuzz seeds22023/99173, five targets, $env:K22_FUZZ_ITERATIONS iterations per seed/target."
+          dotnet test tests/MarkdownViewr.Windows.Core.Tests -c Release -p:Platform=x64 --no-build --no-restore --filter Category=Fuzz --logger 'trx;LogFileName=fuzz.trx' --results-directory artifacts/fuzz
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          dotnet test tests/MarkdownViewr.Windows.UiTests -c Release -p:Platform=x64 --no-build --no-restore --filter Category=Fuzz --logger 'trx;LogFileName=activation-fuzz.trx' --results-directory artifacts/fuzz
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+      - name: Retain synthetic campaign failures and results
+        if: always()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: fuzz-results
+          path: artifacts/fuzz/*.trx
+          if-no-files-found: error
+          retention-days: 30
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5532532..caa54cd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@
 #   - Environment `release` (Settings -> Environments) with a deployment rule that allows
 #     only tags matching v*.
 #   - Configure verified Azure signing variables and a repository/environment-bound
-#     OIDC identity; pin the published reviewed builder, enable sign and declare
+#     OIDC identity; pin the reviewed builder, enable sign and declare
 #     the owned-file catalog. See docs/release-signing.md. Unsigned publication is blocked.
 #   - winget (optional, stable releases only): the package must already exist in
 #     microsoft/winget-pkgs. Submit it once by hand with
@@ -87,9 +87,15 @@ jobs:
     permissions:
       contents: read
 
+  fuzzing:
+    needs: verify
+    uses: ./.github/workflows/fuzz.yml
+    permissions:
+      contents: read
+
   release:
-    needs: [verify, gates, security, codeql, scripts]
-    uses: KofTwentyTwo/standards/.github/workflows/release-velopack.yml@fdf5ed029603c938615a32b1beca3628b8787945 # v0.1.2
+    needs: [verify, gates, security, codeql, scripts, fuzzing]
+    uses: KofTwentyTwo/standards/.github/workflows/release-velopack.yml@93b1d6163a4c466ae443e98b62786fc4d80d33bd # v1.1.0
     permissions:
       contents: write      # create and publish the GitHub release
       id-token: write      # sign attestations; Azure OIDC when signing
@@ -97,7 +103,8 @@ jobs:
     with:
       solution: MarkdownViewr.Windows.slnx
       app-project: src/MarkdownViewr.Windows/MarkdownViewr.Windows.csproj
-      app-id: markdownviewr-windows
+      # Separate package IDs install side by side; the installed channel selects its title/data root.
+      app-id: ${{ contains(github.ref_name, '-') && 'markdownviewr-windows-dev' || 'markdownviewr-windows' }}
       main-exe: MarkdownViewr.Windows.exe
       icon: src/MarkdownViewr.Windows/Assets/Brand/app.ico
       platform: x64
@@ -105,7 +112,14 @@ jobs:
       coverage-packages: MarkdownViewr.Windows.Core
       test-projects: |
         tests/MarkdownViewr.Windows.Core.Tests
-      sign: false # Preflight blocks publication until the reviewed signing builder is published and configured.
+      sign: true
+      signing-files: |
+        app/MarkdownViewr.Windows.exe
+        app/MarkdownViewr.Windows.dll
+        app/MarkdownViewr.Windows.Core.dll
+        app/KofTwentyTwo.AppKit.dll
+        app/KofTwentyTwo.AppKit.Updates.dll
+        app/KofTwentyTwo.AppKit.WinUI.dll
 
   # winget lives here, not in the shared workflow, because its token belongs to this
   # repository's `release` environment. It runs only for stable releases, and only when
diff --git a/.github/workflows/scripts.yml b/.github/workflows/scripts.yml
index 6987c96..2021766 100644
--- a/.github/workflows/scripts.yml
+++ b/.github/workflows/scripts.yml
@@ -51,10 +51,28 @@ jobs:
           $ErrorActionPreference = 'Stop'
           Install-Module PSScriptAnalyzer -RequiredVersion 1.25.0 -Scope CurrentUser -Force
           Import-Module PSScriptAnalyzer -RequiredVersion 1.25.0
-          # Analyze each file separately: recursive analysis can crash inside 1.25.0.
+          # Negative fixtures prove neither partition can silently lose its rules.
+          $casingFixture = @(Invoke-ScriptAnalyzer -ScriptDefinition "get-content -literalpath 'fixture.txt'" -Settings ./PSScriptAnalyzerSettings.psd1 -IncludeRule PSUseCorrectCasing)
+          if('PSUseCorrectCasing' -notin $casingFixture.RuleName) { throw 'The casing pass did not detect incorrect casing.' }
+          $remainingFixture = @(Invoke-ScriptAnalyzer -ScriptDefinition "Write-Host 'fixture'" -Settings ./PSScriptAnalyzerSettings.psd1 -ExcludeRule PSUseCorrectCasing)
+          if('PSAvoidUsingWriteHost' -notin $remainingFixture.RuleName) { throw 'The remaining-rule pass did not detect Write-Host.' }
+          # Keep casing in its own pass: command metadata races other rules in 1.25.0.
+          # https://github.com/PowerShell/PSScriptAnalyzer/issues/1708
           foreach($script in Get-ChildItem -LiteralPath build -Recurse -File | Where-Object Extension -In '.ps1', '.psm1', '.psd1')
           {
-             $findings = @(Invoke-ScriptAnalyzer -Path $script.FullName -Settings ./PSScriptAnalyzerSettings.psd1)
+             Write-Output "Analyzing $($script.Name)"
+             try
+             {
+                $findings = @(
+                   Invoke-ScriptAnalyzer -Path $script.FullName -Settings ./PSScriptAnalyzerSettings.psd1 -IncludeRule PSUseCorrectCasing
+                   Invoke-ScriptAnalyzer -Path $script.FullName -Settings ./PSScriptAnalyzerSettings.psd1 -ExcludeRule PSUseCorrectCasing
+                )
+             }
+             catch
+             {
+                Write-Output $_.Exception.ToString()
+                throw
+             }
              if($findings.Count -gt 0) { $findings | Format-Table; throw "Script analysis failed: $($script.Name)" }
           }
       - name: Verify script boundary tests
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 7de635c..9dfbdb3 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -24,9 +24,12 @@ repos:
       - id: check-toml
       - id: detect-private-key
       - id: end-of-file-fixer
+        exclude: ^THIRD-PARTY-LICENSES/
       - id: mixed-line-ending
+        exclude: ^THIRD-PARTY-LICENSES/
         args: [--fix=lf]
       - id: trailing-whitespace
+        exclude: ^THIRD-PARTY-LICENSES/
         args: [--markdown-linebreak-ext=md]
       - id: no-commit-to-branch
         args: [--branch, main]
diff --git a/AGENTS.md b/AGENTS.md
index bfd56fe..92994b2 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -2,7 +2,7 @@
 
 ## Purpose and Structure
 
-MarkdownViewr.Windows is a Windows Markdown viewer built with AppKit and WinUI 3. Read `docs/PRODUCT.md`, `docs/TODO.md` and `docs/SESSION-STATE.md` before continuing. The initial greeting is scaffold content; do not claim the viewer is implemented until its requirements pass.
+MarkdownViewr.Windows is a Windows Markdown viewer built with AppKit and WinUI 3. Read `docs/PRODUCT.md`, `docs/TODO.md` and `docs/SESSION-STATE.md` before continuing. The first reader is implemented; full parity and desktop acceptance remain pending. Do not claim requirements passed without evidence.
 
 `src/MarkdownViewr.Windows.Core/` contains testable logic and view models. `src/MarkdownViewr.Windows/` contains WinUI views and Windows adapters; brand assets are in `Assets/Brand/`. Unit, desktop UI and installed-update probes live under `tests/`. `build/` contains coverage, packaging, setup and release validation tools.
 
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 825e345..420b857 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,127 +1,45 @@
 # Contributing to MarkdownViewr
 
-Thanks for helping. This project follows the
-[KofTwentyTwo standards](https://github.com/KofTwentyTwo/standards); this page is the
-short version of what they ask of a contribution.
+Questions, bug reports, documentation improvements, and code contributions are welcome. For everyday use, start with the [user guide](docs/user-guide.md). For build commands and tests, use [DEVELOPERS.md](DEVELOPERS.md).
 
 ## Before you start
 
-For anything beyond a small fix, open an issue first so the approach can be agreed
-before you invest time. Questions and proposals are welcome in
-[Issues](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues).
+For a substantial change, open an [issue](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues/new/choose) first to agree on the approach. Ask usage questions in [Discussions](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/discussions).
 
-## Setup
+Report security vulnerabilities privately according to [SECURITY.md](SECURITY.md). Do not include private documents, credentials, or personal information in reports, screenshots, or test fixtures.
 
-Prerequisites: Windows 10 1809 or later, the .NET 10 SDK (`global.json` pins the feature
-band), and optionally Visual Studio 2026 or Rider. The
-[workstation setup](https://github.com/KofTwentyTwo/standards#set-up-your-machine)
-installs everything, including the git hooks' tools. The commands below are exactly what
-CI runs; run them before pushing.
+## Development workflow
 
-```powershell
-dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64 --locked-mode
-dotnet build MarkdownViewr.Windows.slnx -p:Platform=x64 -warnaserror
+This Product follows the [KofTwentyTwo standards](https://github.com/KofTwentyTwo/standards).
 
-# Unit tests, then the 100% line-coverage gate over every measured assembly
-dotnet test MarkdownViewr.Windows.slnx -p:Platform=x64 --no-build --filter "FullyQualifiedName!~UiTests" --settings coverage.runsettings --collect:"XPlat Code Coverage" --results-directory TestResults
-./build/Assert-Coverage.ps1 -ResultsDirectory TestResults
+1. Branch from `main` using `<type>/<short-description>`, for example `fix/source-highlighting`.
+2. Follow the [developer guide](DEVELOPERS.md), install both pre-commit and commit-msg hooks, and run the relevant quality gates.
+3. Make signed, signed-off [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/): `git commit -S -s`.
+4. Open a pull request targeting `main` with a Conventional Commit title. PRs are squash merged.
+5. Resolve all review threads and required checks before merging.
 
-# End-to-end UI tests: FlaUI launches the app (needs an interactive desktop)
-dotnet test tests/MarkdownViewr.Windows.UiTests
+## Pull request checklist
 
-# Style gate (Kingsrook layout, analyzers, naming)
-dotnet format MarkdownViewr.Windows.slnx --verify-no-changes --severity warn --no-restore
+- Explain the problem, resulting behavior, and linked issues.
+- Report the checks you actually ran and any limitations.
+- Include screenshots for UI changes and update user documentation.
+- Retain zero-warning builds, clean formatting, and 100% measured core line coverage.
+- Add regression tests for fixes; exercise native and installed behavior where relevant.
+- Justify dependency changes and commit regenerated locks.
+- Update the [threat model](docs/security/threat-model.md) for attack-surface changes.
+- Preserve original MIT notices and dependency credits.
+- Disclose substantial AI assistance and include a `Co-Authored-By:` trailer naming the model.
 
-# PowerShell tooling gate (install PSScriptAnalyzer 1.25.0 once)
-Import-Module PSScriptAnalyzer -RequiredVersion 1.25.0
-Invoke-ScriptAnalyzer -Path build -Recurse -Settings ./PSScriptAnalyzerSettings.psd1 -EnableExit
-Import-Module Pester -RequiredVersion 5.7.1
-Invoke-Pester -Path build/Assert-Coverage.Tests.ps1 -CI
-```
+Required CI covers build/coverage/style, reader and installed-update acceptance, parser fuzzing, tooling tests, dependency/secret/workflow scans, CodeQL, PR title, and DCO.
 
-`dotnet format` (without `--verify-no-changes`) fixes layout, `var` use, usings, and
-line endings. Two Kingsrook rules it cannot apply are checked in review: three blank
-lines between members, and a header comment on every type and method (Rider and
-ReSharper apply the blank lines from `.editorconfig`). Changing a package version means
-updating `Directory.Packages.props` and committing the regenerated `packages.lock.json`
-files (`dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64 --force-evaluate`).
+Under the single-maintainer policy, `review / automated` also requires a genuine current-commit acknowledgement from the configured human maintainer. An agent cannot provide that acknowledgement. See [repository setup](docs/repository-setup.md).
 
-Install the git hooks once per clone (the hook configuration comes from
-[KofTwentyTwo/standards](https://github.com/KofTwentyTwo/standards/tree/main/configs/pre-commit)):
+## Sign-off and license
 
-```sh
-pre-commit install --hook-type pre-commit --hook-type commit-msg
-```
-
-## Workflow
-
-1. Branch from `main` with a short-lived topic branch named `<type>/<short-description>`,
-   for example `feat/export` or `fix/42-splash-never-dismisses`.
-2. Commit with [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/)
-   (`feat: ...`, `fix(settings): ...`). Every commit is **signed** and **signed off**:
-   `git commit -S -s` (see *Sign-off* below).
-3. Open a pull request against `main`. Its title must itself be a Conventional Commit
-   header: pull requests are **squash-merged**, so the title becomes the commit message on
-   `main`.
-4. Every required check must pass, and every review thread must be resolved, before the
-   pull request merges.
-
-## What makes a contribution acceptable
-
-- The build has **zero warnings**, and the format gate is clean.
-- New behavior has tests; a bug fix has a test that fails without the fix.
-- Line coverage of `MarkdownViewr.Windows.Core` stays at **100%**. Logic goes in `MarkdownViewr.Windows.Core`; the
-  WinUI project holds views and framework plumbing only
-  ([ADR-0001](docs/adr/0001-adopt-the-windows-desktop-reference-architecture.md)).
-- User-visible changes update the docs in the same pull request; attack-surface changes
-  update the [threat model](docs/security/threat-model.md).
-- No secrets, credentials, or personal data, ever.
-- New dependencies are justified in the pull request description.
-
-## Checks that gate a merge
-
-| Check | What it verifies |
-| --- | --- |
-| `pr / title` | The PR title is a Conventional Commit header |
-| `pr / dco` | Every commit is signed off |
-| `pr / dependency-review` | Added dependencies have no known vulnerabilities and an allowed license |
-| `security / secrets`, `security / sca`, `security / workflows` | No secrets, no vulnerable or malicious dependencies, safe workflows |
-| `codeql / analyze (csharp)`, `codeql / analyze (actions)` | No high-severity static analysis findings |
-| `ci / build-test` | Locked restore, zero-warning build, unit tests, 100% coverage gate |
-| `ci / format` | `dotnet format --verify-no-changes --severity warn` |
-| `ci / ui-tests` | FlaUI end-to-end tests of the app |
-| `installed-updates` | Real stable/dev installers, upgrades, restart and published-output UI smoke |
-| `powershell`, `javascript` | Tool lint, setup/coverage boundary tests, review tests and dependency signatures |
-| `codeql / analyze (javascript-typescript)` | Static analysis of repository review tooling |
-| `review / automated` (single maintainer) | Current-commit automated review acknowledged by the configured human maintainer |
-
-Run `npm ci --ignore-scripts`, `npm run lint` and `npm test` for repository JavaScript.
-Run PSScriptAnalyzer with `PSScriptAnalyzerSettings.psd1` and Pester against
-`build/*.Tests.ps1`. New owners follow [repository setup](docs/repository-setup.md).
-
-## Sign-off (Developer Certificate of Origin)
-
-By signing off a commit you certify the
-[Developer Certificate of Origin 1.1](https://developercertificate.org/): that you wrote
-the change, or otherwise have the right to submit it under the project's license.
-`git commit -s` appends the sign-off:
+Signing off certifies the [Developer Certificate of Origin 1.1](https://developercertificate.org/): you wrote the contribution or have the right to submit it under the project's license. `git commit -s` adds:
 
 ```text
 Signed-off-by: Your Name <your.email@example.com>
 ```
 
-The name and email must match the commit author. To add missing sign-offs to a branch,
-run `git rebase --signoff main` and force-push the branch.
-
-## AI-assisted contributions
-
-AI coding tools are welcome. You remain the author: you must understand, test, and be
-able to explain every line you submit, and you sign it off as your own. Note substantial
-AI assistance in the pull request description.
-Include a Co-Authored-By trailer naming the model for significant AI contributions
-(K22-AGENT-40 / K22-AI-02).
-
-## License
-
-By contributing, you agree that your contributions are licensed under the project's
-[MIT License](LICENSE).
+The sign-off must match the commit author. Contributions are licensed under the project's [MIT License](LICENSE). AI assistance does not remove your responsibility to understand, test, and explain the change.
diff --git a/DEVELOPERS.md b/DEVELOPERS.md
new file mode 100644
index 0000000..c22b7ce
--- /dev/null
+++ b/DEVELOPERS.md
@@ -0,0 +1,92 @@
+# Developer Guide
+
+For installation and everyday use, see the [README](README.md) and [user guide](docs/user-guide.md). Contribution requirements are in [CONTRIBUTING.md](CONTRIBUTING.md).
+
+## Environment and structure
+
+Use Windows 10 1809 or later, Microsoft Edge WebView2 Runtime, and the .NET 10 SDK selected by `global.json`. The current release target is Windows x64.
+
+- `src/MarkdownViewr.Windows.Core/`: testable document, rendering, theme, and view-model logic.
+- `src/MarkdownViewr.Windows/`: WinUI views, WebView2 integration, Windows adapters, and `Assets/Brand/`.
+- `tests/`: xUnit core tests, native/published UI acceptance, and installed-update probes.
+- `build/`: coverage, repository setup, packaging, signing, and lifecycle validation.
+- `docs/`: product scope, ADRs, security evidence, and release runbooks.
+
+Keep core logic independent of WinUI. Treat documents, renderer messages, resource URLs, and imported themes as untrusted; review the [threat model](docs/security/threat-model.md) before changing those boundaries.
+
+## Restore, build, and run
+
+Run from the repository root:
+
+```powershell
+dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64 --locked-mode
+dotnet build MarkdownViewr.Windows.slnx -p:Platform=x64 -warnaserror
+dotnet run --project src/MarkdownViewr.Windows -p:Platform=x64
+```
+
+To isolate preview data, set `MARKDOWNVIEWR_WINDOWS_DATA_DIR` for that process to a disposable absolute folder. Do not use another person's profile or interfere with an existing preview.
+
+## Tests and quality gates
+
+```powershell
+dotnet test tests/MarkdownViewr.Windows.Core.Tests --settings coverage.runsettings --collect:"XPlat Code Coverage" --results-directory TestResults
+./build/Assert-Coverage.ps1 -ResultsDirectory TestResults
+dotnet format MarkdownViewr.Windows.slnx --verify-no-changes --severity warn --no-restore
+npm ci --ignore-scripts
+npm run lint
+npm test
+```
+
+Core tests use xUnit and Coverlet; retain 100% measured core line coverage. Name tests `Method_Scenario_Expectation` and add meaningful regression coverage for fixes. Deterministic tests inject time and filesystem boundaries.
+
+Native desktop tests use FlaUI/UIA3 and require an available interactive desktop:
+
+```powershell
+dotnet test tests/MarkdownViewr.Windows.UiTests
+```
+
+Reserve the desktop before running physical-input tests. Hosted CI also exercises published output and actual stable/dev installation, update/restart, registration, and coexistence. See [installed-update acceptance](docs/installed-updates.md). Synthetic unsigned fixtures do not establish production signing.
+
+For PowerShell, use PSScriptAnalyzer 1.25.0 with `PSScriptAnalyzerSettings.psd1`, then Pester 5.7.1 against `build/*.Tests.ps1`. Reproduce the exact sequential analyzer partitions and negative fixtures in [scripts.yml](.github/workflows/scripts.yml); engine exceptions and rule findings are failures.
+
+Run the [seeded parser campaigns](docs/security/fuzzing.md) when changing parser or activation boundaries. Never use private documents as a corpus.
+
+## Style and dependencies
+
+Follow `.editorconfig`: three-space C# indentation, Allman braces, file-scoped namespaces, PascalCase public members, and `_camelCase` private fields. Keep type/method header comments and three blank lines between members. YAML uses two spaces.
+
+Package versions live in `Directory.Packages.props`. After a deliberate version change, regenerate and commit affected locks:
+
+```powershell
+dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64 --force-evaluate
+pre-commit install --hook-type pre-commit --hook-type commit-msg
+```
+
+Use `dotnet format` without `--verify-no-changes` for supported formatting fixes; inspect the diff before committing.
+
+## Releases and verification
+
+Follow [RELEASING.md](docs/RELEASING.md), [signing](docs/release-signing.md), and [repository setup](docs/repository-setup.md). Stable tags use `v1.2.3`; prereleases such as `v1.2.3-beta.1` publish to the isolated development channel.
+
+The protected release builder signs owned binaries before packaging, verifies distributed signatures, and generates final checksums and attestations. Never bypass signing failures or publish fixture packages.
+
+After publication, download the actual assets and verify them:
+
+```powershell
+Get-FileHash ./markdownviewr-windows-stable-Setup.exe -Algorithm SHA256
+gh attestation verify ./markdownviewr-windows-stable-Setup.exe --repo KofTwentyTwo/MarkdownViewr.Windows --signer-repo KofTwentyTwo/standards
+Get-AuthenticodeSignature ./markdownviewr-windows-stable-Setup.exe | Format-List Status, SignerCertificate
+signtool verify /pa /all /v ./markdownviewr-windows-stable-Setup.exe
+```
+
+Compare hashes with the published `SHA256SUMS`; confirm publisher, trust, and RFC3161 timestamp. Verify both packages and their shipped payloads using the release runbook.
+
+## Branding
+
+The AppKit BrandTool generates the vector and multi-size ICO assets:
+
+```powershell
+brandtool --out src/MarkdownViewr.Windows/Assets/Brand --start '#1A2B4D' --end '#0C1836' --glyph 'M 144 328 V 184 L 208 260 L 272 184 V 328 M 344 184 V 328 M 312 296 L 344 328 L 376 296 M 144 380 H 376' --stroke 28
+```
+
+Preserve original-author and dependency attribution in [THIRD-PARTY-NOTICES.md](THIRD-PARTY-NOTICES.md) and the About dialog.
diff --git a/Directory.Build.props b/Directory.Build.props
index 5967916..4cbeef1 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -54,7 +54,7 @@
         commit as "+<sha>" on AssemblyInformationalVersion, which the About dialog and the
         CLI's version output show as a short hash. -->
    <PropertyGroup>
-      <VersionPrefix>0.1.0</VersionPrefix>
+      <VersionPrefix>1.0.0</VersionPrefix>
       <VersionSuffix>dev</VersionSuffix>
    </PropertyGroup>
 
diff --git a/Directory.Packages.props b/Directory.Packages.props
index 5b84ed5..7f78696 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -21,7 +21,8 @@
    <ItemGroup>
       <PackageVersion Include="Microsoft.WindowsAppSDK" Version="2.5.1" />
       <PackageVersion Include="Microsoft.Windows.SDK.BuildTools" Version="10.0.28000.2705" />
-      <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.2" />
+      <PackageVersion Include="Markdig" Version="1.4.0" />
+      <PackageVersion Include="HtmlSanitizer" Version="9.2.1039" />
    </ItemGroup>
 
    <ItemGroup Label="Tests">
diff --git a/README.md b/README.md
index c1fa47f..5deb22c 100644
--- a/README.md
+++ b/README.md
@@ -1,95 +1,71 @@
-# MarkdownViewr
+# MarkdownViewr for Windows
 
-> In development: a Windows counterpart to [Darin's markdownViewr](https://github.com/darinkelkhoff/markdownViewr), built with AppKit. The application currently shows the starter's greeting screen; Markdown viewing is not implemented yet. See [the feature plan](docs/PRODUCT.md) and [development tasks](docs/TODO.md). No Windows release is available yet.
+Read Markdown comfortably, keep up with changes, and turn your notes into something worth sharing.
 
-A Windows Markdown viewer with live reload, themes and document navigation.
+MarkdownViewr is a dedicated Windows reader for project documentation, notes, and README files. Open a document, choose a look you like, and focus on the words.
+
+**[Release downloads](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/releases) · [User guide](docs/user-guide.md) · [Ask a question](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/discussions)**
+
+> The first Windows release is being prepared. There are no published Windows downloads yet; the Releases page will contain the stable installer and development previews when publication completes.
 
-[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/KofTwentyTwo/MarkdownViewr.Windows/badge)](https://scorecard.dev/viewer/?uri=github.com/KofTwentyTwo/MarkdownViewr.Windows)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
+[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/15417/badge)](https://www.bestpractices.dev/en/projects/15417)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/KofTwentyTwo/MarkdownViewr.Windows/badge)](https://scorecard.dev/viewer/?uri=github.com/KofTwentyTwo/MarkdownViewr.Windows)
 
-| | |
-| --- | --- |
-| **Tier** | Product ([scope](https://github.com/KofTwentyTwo/standards/blob/main/policies/README.md#scope)) |
-| **Standards** | Adopting [KofTwentyTwo standards](https://github.com/KofTwentyTwo/standards) (pre-v1.0); built from the KofTwentyTwo Windows app template |
-| **Latest release** | [Releases](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/releases/latest) |
+![MarkdownViewr displaying project notes with the GitHub Light palette](docs/images/reading-light.png)
 
-## Install
+## Make Markdown easier to read
 
-Download `markdownviewr-windows-stable-Setup.exe` from the
-[latest release](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/releases/latest) and run it. It
-installs per user (no administrator rights needed) and updates itself in place from
-**Help → Check for updates**. `markdownviewr-windows-stable-Portable.zip` is a portable build that
-does not self-update.
+- **Make it your own.** Choose from 20 document palettes, customize typography, and use a light, dark, or system app appearance.
+- **Follow changes as they happen.** Saved edits refresh automatically. The footer shows the loaded file's modification time and flags an unsuccessful reload.
+- **Navigate long documents.** Show Contents, jump between headings, collapse sections, and find text.
+- **See how it is written.** Open the highlighted, read-only source alongside the document. The split starts at 50/50 and resizes by dragging.
+- **Share a finished document.** Print from the toolbar or save a PDF with separate print styling and optional actions to open the result or its folder.
+- **Stay in your workflow.** Open several documents, launch your configured editor, or open the current document's folder in Explorer.
 
-Prerelease tags (`v1.2.3-beta.1`) publish to the `dev` channel
-(`markdownviewr-windows-dev-Setup.exe`); an installation only ever updates within its own channel.
+Contents and Source start hidden. Turn them on when needed, or change their new-window defaults in **File → Settings → General**.
 
-## Usage
+![Dark document palette with highlighted Markdown source in an equal split](docs/images/source-dark.png)
 
-- **Greeting (example feature):** type a name and press **Greet**. The name is remembered
-  for next time. This is the template's example of a feature: logic and state in
-  `MarkdownViewr.Windows.Core`, a thin view in `MarkdownViewr.Windows`.
-- **View:** choose the light, dark, or system theme; turn the startup splash and the
-  startup update check on or off. Choices are saved immediately.
-- **Help → Activity log:** a live view of the app's log, with an errors-only filter and a
-  shortcut to the log folder.
-- **Help → Check for updates** and **Help → About**.
+## Download and install
 
-Settings and logs live in `%LOCALAPPDATA%\markdownviewr-windows`. Set the data-folder environment
-variable the app reports in its log (the app id in capitals, plus `_DATA_DIR`) to use a
-different folder, for example a portable one.
+The planned Windows packages support **Windows 10 version 1809 or later and Windows 11, x64**. Microsoft Edge WebView2 Runtime is required. No .NET SDK is needed to use a release.
 
-## Building from source
+| Edition | Choose it for | Package |
+| --- | --- | --- |
+| Stable | Everyday reading | `markdownviewr-windows-stable-Setup.exe` |
+| Development preview | Trying upcoming changes | `markdownviewr-windows-dev-Setup.exe` |
+| Portable | Running without installation | `markdownviewr-windows-stable-Portable.zip` |
 
-Prerequisites:
+Once available, download a package from [Releases](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/releases). Run Setup for a per-user installation without administrator rights, or extract the portable ZIP before launching the app.
 
-- Windows 10 version 1809 or later, x64 or ARM64
-- .NET 10 SDK (the feature band is pinned by `global.json`)
-- Optionally Visual Studio 2026 (Windows App SDK workload) or Rider
+Installed editions check for updates through **Help → Check for updates**. Stable and development editions keep separate settings and update channels, so they can coexist. Portable copies do not self-update.
 
-```powershell
-# Once after generation, create and commit the NuGet locks locally:
-# dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64
-dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64 --locked-mode
-dotnet build MarkdownViewr.Windows.slnx -p:Platform=x64 -warnaserror
-dotnet test MarkdownViewr.Windows.slnx -p:Platform=x64 --no-build --filter "FullyQualifiedName!~UiTests"
-dotnet test tests/MarkdownViewr.Windows.UiTests --no-build   # launches the app on the desktop
-```
+## Quick start
 
-Package versions are declared in `Directory.Packages.props` and locked in each project's
-`packages.lock.json`. [CONTRIBUTING.md](CONTRIBUTING.md) has the full local workflow,
-including the coverage gate and the format check that CI runs.
+1. Choose **File → Open** or press **Ctrl+O** and select your Markdown file.
+2. Use **Theme** to choose a document palette, **Contents** to navigate, and **Source** to inspect the Markdown.
+3. Save changes in your editor; the viewer refreshes automatically.
+4. Choose **Print** in the toolbar to print or create a PDF.
 
-## Verifying a release
+To open Markdown files in the viewer by default, use an installed copy and choose **File → Settings → General → Choose default file types**. Select MarkdownViewr in Windows Default Apps for your preferred extensions. Windows asks you to make that choice; installation preserves existing defaults.
 
-Every release asset is listed in `SHA256SUMS` and has a build-provenance attestation
-signed by the KofTwentyTwo release workflow:
+See the [user guide](docs/user-guide.md) for settings, shortcuts, printing, and troubleshooting.
 
-```powershell
-# Integrity: the file matches the published checksum
-(Get-FileHash .\markdownviewr-windows-stable-Setup.exe -Algorithm SHA256).Hash   # compare to SHA256SUMS
+## Help and feedback
 
-# Origin: built by the KofTwentyTwo release workflow from this repository
-gh attestation verify .\markdownviewr-windows-stable-Setup.exe --repo KofTwentyTwo/MarkdownViewr.Windows --signer-repo KofTwentyTwo/standards
+Use **Help → Community support** for questions and **Help → Submit an issue** for bugs or feature requests. You can also visit [Discussions](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/discussions) or [Issues](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues) directly.
 
-# Publisher: Authenticode signature (once code signing is enabled; see SECURITY.md)
-Get-AuthenticodeSignature .\markdownviewr-windows-stable-Setup.exe | Format-List Status, SignerCertificate
-```
+For a bug report, include the version from **Help → About**, your Windows version, and steps to reproduce. Remove private information from logs and screenshots. Report security vulnerabilities privately using [SECURITY.md](SECURITY.md).
 
-## Support
+## Developers and contributors
 
-The latest minor release receives fixes; see [SECURITY.md](SECURITY.md#supported-versions)
-for the full support policy.
+Want to help? Start with [CONTRIBUTING.md](CONTRIBUTING.md). Build commands, tests, architecture, and release verification are in [DEVELOPERS.md](DEVELOPERS.md).
 
-## Security
+This is a Product-tier project adopting the [KofTwentyTwo standards](https://github.com/KofTwentyTwo/standards), built with AppKit and WinUI 3. OpenSSF enrollment is active; registration does not mean a passing badge has been earned.
 
-Report vulnerabilities privately; see [SECURITY.md](SECURITY.md). The app's attack
-surface is described in its [threat model](docs/security/threat-model.md).
+## Credits and license
 
-## Contributing
+Based on [Darin Kelkhoff's original macOS markdownViewr](https://github.com/darinkelkhoff/markdownViewr). Visit [Darin's website](https://kelkhoff.com/). The Windows app also credits the open-source libraries it uses in **Help → About → Components**.
 
-See [CONTRIBUTING.md](CONTRIBUTING.md).
-
-## License
-
-[MIT](LICENSE). Copyright (c) 2026 James Maes.
+Free and open source under the [MIT License](LICENSE). Original-author and dependency notices are preserved in [THIRD-PARTY-NOTICES.md](THIRD-PARTY-NOTICES.md).
diff --git a/SECURITY.md b/SECURITY.md
index 7a00e81..59a663e 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -48,10 +48,15 @@ minor receives security fixes for 6 months.
 
 ## Code signing
 
-Windows installers and binaries are not yet Authenticode-signed (KofTwentyTwo standards
-exception EX-0002, until the signing identity is validated). Until then, verify downloads
-with `SHA256SUMS` and `gh attestation verify` as described in the
-[README](README.md#verifying-a-release).
+Public Windows releases require Authenticode signing of the final shipped binaries
+and installers. Publication fails closed until the approved Azure signing identity
+and expected publisher, trust and timestamp are verified. No verified signed
+MarkdownViewr release has been published yet; unsigned test fixtures are not releases.
+
+Verify final signatures, `SHA256SUMS` and provenance attestations as described in the
+[README](README.md#verifying-a-release) and
+[release signing instructions](docs/release-signing.md). No historical exception
+is claimed as permission to publish unsigned application releases.
 
 ## Published vulnerabilities
 
diff --git a/THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-LICENSE.txt b/THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-LICENSE.txt
new file mode 100644
index 0000000..45f0297
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-LICENSE.txt
@@ -0,0 +1,27 @@
+Copyright (C) Microsoft Corporation. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * The name of Microsoft Corporation, or the names of its contributors 
+may not be used to endorse or promote products derived from this
+software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
\ No newline at end of file
diff --git a/THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-NOTICE.txt b/THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-NOTICE.txt
new file mode 100644
index 0000000..bb64ba3
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-NOTICE.txt
@@ -0,0 +1,85 @@
+NOTICES AND INFORMATION
+Do Not Translate or Localize
+
+This software incorporates material from third parties. Microsoft makes certain
+open source code available at https://3rdpartysource.microsoft.com, or you may
+send a check or money order for US $5.00, including the product name, the open
+source component name, and version number, to:
+
+Source Code Compliance Team
+Microsoft Corporation
+One Microsoft Way
+Redmond, WA 98052
+USA
+
+Notwithstanding any other terms, you may reverse engineer this software to the
+extent required to debug changes to any libraries licensed under the GNU Lesser
+General Public License.
+
+----------------------------------------------------------------
+
+Antlr3.Runtime 3.5.2-rc1 - BSD 3-Clause
+
+[The "BSD license"]
+Copyright (c) 2011 The ANTLR Project
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+ 1. Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+ 2. Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+ 3. Neither the name of the copyright holder nor the names of its
+    contributors may be used to endorse or promote products derived from
+    this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+---------------------------------------------------------
+
+StringTemplate4 4.0.9-rc1 - BSD 3-Clause
+
+[The "BSD license"]
+Copyright (c) 2011 The ANTLR Project
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+ 1. Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+ 2. Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+ 3. Neither the name of the copyright holder nor the names of its
+    contributors may be used to endorse or promote products derived from
+    this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
diff --git a/THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-ThirdPartyNotices.txt b/THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-ThirdPartyNotices.txt
new file mode 100644
index 0000000..87f31e6
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-ThirdPartyNotices.txt
@@ -0,0 +1,6121 @@
+THIRD PARTY SOFTWARE NOTICES AND INFORMATION
+
+Do Not Translate or Localize
+
+This software incorporates material from third parties. Microsoft makes certain
+open source code available at http://3rdpartysource.microsoft.com, or you may
+send a check or money order for US $5.00, including the product name, the open
+source component name, and version number, to:
+
+Source Code Compliance Team
+Microsoft Corporation
+One Microsoft Way
+Redmond, WA 98052
+USA
+
+Notwithstanding any other terms, you may reverse engineer this software to the
+extent required to debug changes to any libraries licensed under the GNU Lesser
+General Public License.
+
+_____
+
+Intel Math Kernel Library (Intel MKL)
+
+Intel Simplified Software License (Version April 2018)
+
+Copyright (c) 2018 Intel Corporation.
+
+Use and Redistribution.  You may use and redistribute the software (the “Software”), without modification,
+provided the following conditions are met:
+
+* Redistributions must reproduce the above copyright notice and the following terms of use in the Software
+and in the documentation and/or other materials provided with the distribution.
+
+* Neither the name of Intel nor the names of its suppliers may be used to endorse or promote products
+derived from this Software without specific prior written permission.
+
+* No reverse engineering, decompilation, or disassembly of this Software is permitted.
+
+Limited patent license.  Intel grants you a world-wide, royalty-free, non-exclusive license under patents it now
+or hereafter owns or controls to make, have made, use, import, offer to sell and sell (“Utilize”) this Software,
+but solely to the extent that any such patent is necessary to Utilize the Software alone. The patent license
+shall not apply to any combinations which include this software.  No hardware per se is licensed hereunder.
+
+Third party and other Intel programs.  “Third Party Programs” are the files listed in the “third-party-programs.txt”
+text file that is included with the Software and may include Intel programs under separate license terms.
+Third Party Programs, even if included with the distribution of the Materials, are governed by
+separate license terms and those license terms solely govern your use of those programs.
+
+DISCLAIMER.  THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
+INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT ARE DISCLAIMED. THIS SOFTWARE IS
+NOT INTENDED FOR USE IN SYSTEMS OR APPLICATIONS WHERE FAILURE OF THE SOFTWARE
+MAY CAUSE PERSONAL INJURY OR DEATH AND YOU AGREE THAT YOU ARE FULLY RESPONSIBLE FOR ANY
+CLAIMS, COSTS, DAMAGES, EXPENSES, AND ATTORNEYS’ FEES ARISING OUT OF ANY SUCH USE,
+EVEN IF ANY CLAIM ALLEGES THAT INTEL WAS NEGLIGENT REGARDING THE DESIGN OR MANUFACTURE OF
+THE MATERIALS.
+
+LIMITATION OF LIABILITY. IN NO EVENT WILL INTEL BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
+OF SUCH DAMAGE. YOU AGREE TO INDEMNIFY AND HOLD INTEL HARMLESS AGAINST ANY CLAIMS
+AND EXPENSES RESULTING FROM YOUR USE OR UNAUTHORIZED USE OF THE SOFTWARE.
+
+No support.  Intel may make changes to the Software, at any time without notice, and is not obligated to
+support, update or provide training for the Software.
+
+Termination. Intel may terminate your right to use the Software in the event of your breach of this Agreement
+and you fail to cure the breach within a reasonable period of time.
+
+Feedback.  Should you provide Intel with comments, modifications, corrections, enhancements or other input
+(“Feedback”) related to the Software Intel will be free to use, disclose, reproduce, license or otherwise
+distribute or exploit the Feedback in its sole discretion without any obligations or restrictions of any kind,
+including without limitation, intellectual property rights or licensing obligations.
+
+Compliance with laws.  You agree to comply with all relevant laws and regulations governing your use,
+transfer, import or export (or prohibition thereof) of the Software.
+
+Governing law.  All disputes will be governed by the laws of the United States of America and the State of
+Delaware without reference to conflict of law principles and subject to the exclusive jurisdiction of the state or
+federal courts sitting in the State of Delaware, and each party agrees that it submits to the personal
+jurisdiction and venue of those courts and waives any objections. The United Nations Convention on
+Contracts for the International Sale of Goods (1980) is specifically excluded and will not apply to the
+Software.
+
+*Other names and brands may be claimed as the property of others.
+
+_____
+
+protocolbuffers/protobuf
+
+Copyright 2008 Google Inc.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+
+    * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Code generated by the Protocol Buffer compiler is owned by the owner
+of the input file used when generating it.  This code is not
+standalone and requires a support library to be linked with it.  This
+support library is itself covered by the above license.
+
+_____
+
+madler/zlib
+
+The deflate format used by zlib was defined by Phil Katz.  The deflate and
+zlib specifications were written by L.  Peter Deutsch.  Thanks to all the
+people who reported problems and suggested various improvements in zlib; they
+are too numerous to cite here.
+
+Copyright notice:
+
+ (C) 1995-2017 Jean-loup Gailly and Mark Adler
+
+  This software is provided 'as-is', without any express or implied
+  warranty.  In no event will the authors be held liable for any damages
+  arising from the use of this software.
+
+  Permission is granted to anyone to use this software for any purpose,
+  including commercial applications, and to alter it and redistribute it
+  freely, subject to the following restrictions:
+
+  1. The origin of this software must not be misrepresented; you must not
+     claim that you wrote the original software. If you use this software
+     in a product, an acknowledgment in the product documentation would be
+     appreciated but is not required.
+
+  2. Altered source versions must be plainly marked as such, and must not be
+     misrepresented as being the original software.
+
+  3. This notice may not be removed or altered from any source distribution.
+
+  Jean-loup Gailly        Mark Adler
+  jloup@gzip.org          madler@alumni.caltech.edu
+
+If you use the zlib library in a product, we would appreciate *not* receiving
+lengthy legal documents to sign.  The sources are provided for free but without
+warranty of any kind.  The library has been entirely written by Jean-loup
+Gailly and Mark Adler; it does not include third-party code.
+
+If you redistribute modified sources, we would appreciate that you include in
+the file ChangeLog history information documenting your changes.  Please read
+the FAQ for more information on the distribution of modified source versions.
+
+_____
+
+pybind/pybind11
+
+Copyright (c) 2016 Wenzel Jakob <wenzel.jakob@epfl.ch>, All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+   may be used to endorse or promote products derived from this software
+   without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Please also refer to the file CONTRIBUTING.md, which clarifies licensing of
+external contributions to this project including patches, pull requests, etc.
+
+_____
+
+onnx
+Open Neural Network Exchange
+
+Copyright (c) Facebook, Inc. and Microsoft Corporation. All rights reserved.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+_____
+
+Eigen
+
+MPL v2.0
+Mozilla Public License Version 2.0
+
+
+==================================
+
+1. Definitions
+
+--------------
+
+1.1. "Contributor"
+    means each individual or legal entity that creates, contributes to
+    the creation of, or owns Covered Software.
+
+1.2. "Contributor Version"
+    means the combination of the Contributions of others (if any) used
+    by a Contributor and that particular Contributor's Contribution.
+
+1.3. "Contribution"
+    means Covered Software of a particular Contributor.
+
+1.4. "Covered Software"
+    means Source Code Form to which the initial Contributor has attached
+    the notice in Exhibit A, the Executable Form of such Source Code
+    Form, and Modifications of such Source Code Form, in each case
+    including portions thereof.
+
+1.5. "Incompatible With Secondary Licenses"
+    means
+
+    (a) that the initial Contributor has attached the notice described
+        in Exhibit B to the Covered Software; or
+
+    (b) that the Covered Software was made available under the terms of
+        version 1.1 or earlier of the License, but not also under the
+        terms of a Secondary License.
+
+1.6. "Executable Form"
+    means any form of the work other than Source Code Form.
+
+1.7. "Larger Work"
+    means a work that combines Covered Software with other material, in
+    a separate file or files, that is not Covered Software.
+
+1.8. "License"
+    means this document.
+
+1.9. "Licensable"
+    means having the right to grant, to the maximum extent possible,
+    whether at the time of the initial grant or subsequently, any and
+    all of the rights conveyed by this License.
+
+1.10. "Modifications"
+    means any of the following:
+
+    (a) any file in Source Code Form that results from an addition to,
+        deletion from, or modification of the contents of Covered
+        Software; or
+
+    (b) any new file in Source Code Form that contains any Covered
+        Software.
+
+1.11. "Patent Claims" of a Contributor
+    means any patent claim(s), including without limitation, method,
+    process, and apparatus claims, in any patent Licensable by such
+    Contributor that would be infringed, but for the grant of the
+    License, by the making, using, selling, offering for sale, having
+    made, import, or transfer of either its Contributions or its
+    Contributor Version.
+
+1.12. "Secondary License"
+    means either the GNU General Public License, Version 2.0, the GNU
+    Lesser General Public License, Version 2.1, the GNU Affero General
+    Public License, Version 3.0, or any later versions of those
+    licenses.
+
+1.13. "Source Code Form"
+    means the form of the work preferred for making modifications.
+
+1.14. "You" (or "Your")
+    means an individual or a legal entity exercising rights under this
+    License. For legal entities, "You" includes any entity that
+    controls, is controlled by, or is under common control with You. For
+    purposes of this definition, "control" means (a) the power, direct
+    or indirect, to cause the direction or management of such entity,
+    whether by contract or otherwise, or (b) ownership of more than
+    fifty percent (50%) of the outstanding shares or beneficial
+    ownership of such entity.
+
+2. License Grants and Conditions
+
+--------------------------------
+
+2.1. Grants
+
+Each Contributor hereby grants You a world-wide, royalty-free,
+non-exclusive license:
+
+(a) under intellectual property rights (other than patent or trademark)
+    Licensable by such Contributor to use, reproduce, make available,
+    modify, display, perform, distribute, and otherwise exploit its
+    Contributions, either on an unmodified basis, with Modifications, or
+    as part of a Larger Work; and
+
+(b) under Patent Claims of such Contributor to make, use, sell, offer
+    for sale, have made, import, and otherwise transfer either its
+    Contributions or its Contributor Version.
+
+2.2. Effective Date
+
+The licenses granted in Section 2.1 with respect to any Contribution
+become effective for each Contribution on the date the Contributor first
+distributes such Contribution.
+
+2.3. Limitations on Grant Scope
+
+The licenses granted in this Section 2 are the only rights granted under
+this License. No additional rights or licenses will be implied from the
+distribution or licensing of Covered Software under this License.
+Notwithstanding Section 2.1(b) above, no patent license is granted by a
+Contributor:
+
+(a) for any code that a Contributor has removed from Covered Software;
+    or
+
+(b) for infringements caused by: (i) Your and any other third party's
+    modifications of Covered Software, or (ii) the combination of its
+    Contributions with other software (except as part of its Contributor
+    Version); or
+
+(c) under Patent Claims infringed by Covered Software in the absence of
+    its Contributions.
+
+This License does not grant any rights in the trademarks, service marks,
+or logos of any Contributor (except as may be necessary to comply with
+the notice requirements in Section 3.4).
+
+2.4. Subsequent Licenses
+
+No Contributor makes additional grants as a result of Your choice to
+distribute the Covered Software under a subsequent version of this
+License (see Section 10.2) or under the terms of a Secondary License (if
+permitted under the terms of Section 3.3).
+
+2.5. Representation
+
+Each Contributor represents that the Contributor believes its
+Contributions are its original creation(s) or it has sufficient rights
+to grant the rights to its Contributions conveyed by this License.
+
+2.6. Fair Use
+
+This License is not intended to limit any rights You have under
+applicable copyright doctrines of fair use, fair dealing, or other
+equivalents.
+
+2.7. Conditions
+
+Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
+in Section 2.1.
+
+3. Responsibilities
+
+-------------------
+
+3.1. Distribution of Source Form
+
+All distribution of Covered Software in Source Code Form, including any
+Modifications that You create or to which You contribute, must be under
+the terms of this License. You must inform recipients that the Source
+Code Form of the Covered Software is governed by the terms of this
+License, and how they can obtain a copy of this License. You may not
+attempt to alter or restrict the recipients' rights in the Source Code
+Form.
+
+3.2. Distribution of Executable Form
+
+If You distribute Covered Software in Executable Form then:
+
+(a) such Covered Software must also be made available in Source Code
+    Form, as described in Section 3.1, and You must inform recipients of
+    the Executable Form how they can obtain a copy of such Source Code
+    Form by reasonable means in a timely manner, at a charge no more
+    than the cost of distribution to the recipient; and
+
+(b) You may distribute such Executable Form under the terms of this
+    License, or sublicense it under different terms, provided that the
+    license for the Executable Form does not attempt to limit or alter
+    the recipients' rights in the Source Code Form under this License.
+
+3.3. Distribution of a Larger Work
+
+You may create and distribute a Larger Work under terms of Your choice,
+provided that You also comply with the requirements of this License for
+the Covered Software. If the Larger Work is a combination of Covered
+Software with a work governed by one or more Secondary Licenses, and the
+Covered Software is not Incompatible With Secondary Licenses, this
+License permits You to additionally distribute such Covered Software
+under the terms of such Secondary License(s), so that the recipient of
+the Larger Work may, at their option, further distribute the Covered
+Software under the terms of either this License or such Secondary
+License(s).
+
+3.4. Notices
+
+You may not remove or alter the substance of any license notices
+(including copyright notices, patent notices, disclaimers of warranty,
+or limitations of liability) contained within the Source Code Form of
+the Covered Software, except that You may alter any license notices to
+the extent required to remedy known factual inaccuracies.
+
+3.5. Application of Additional Terms
+
+You may choose to offer, and to charge a fee for, warranty, support,
+indemnity or liability obligations to one or more recipients of Covered
+Software. However, You may do so only on Your own behalf, and not on
+behalf of any Contributor. You must make it absolutely clear that any
+such warranty, support, indemnity, or liability obligation is offered by
+You alone, and You hereby agree to indemnify every Contributor for any
+liability incurred by such Contributor as a result of warranty, support,
+indemnity or liability terms You offer. You may include additional
+disclaimers of warranty and limitations of liability specific to any
+jurisdiction.
+
+4. Inability to Comply Due to Statute or Regulation
+
+---------------------------------------------------
+
+If it is impossible for You to comply with any of the terms of this
+License with respect to some or all of the Covered Software due to
+statute, judicial order, or regulation then You must: (a) comply with
+the terms of this License to the maximum extent possible; and (b)
+describe the limitations and the code they affect. Such description must
+be placed in a text file included with all distributions of the Covered
+Software under this License. Except to the extent prohibited by statute
+or regulation, such description must be sufficiently detailed for a
+recipient of ordinary skill to be able to understand it.
+
+5. Termination
+
+--------------
+
+5.1. The rights granted under this License will terminate automatically
+if You fail to comply with any of its terms. However, if You become
+compliant, then the rights granted under this License from a particular
+Contributor are reinstated (a) provisionally, unless and until such
+Contributor explicitly and finally terminates Your grants, and (b) on an
+ongoing basis, if such Contributor fails to notify You of the
+non-compliance by some reasonable means prior to 60 days after You have
+come back into compliance. Moreover, Your grants from a particular
+Contributor are reinstated on an ongoing basis if such Contributor
+notifies You of the non-compliance by some reasonable means, this is the
+first time You have received notice of non-compliance with this License
+from such Contributor, and You become compliant prior to 30 days after
+Your receipt of the notice.
+
+5.2. If You initiate litigation against any entity by asserting a patent
+infringement claim (excluding declaratory judgment actions,
+counter-claims, and cross-claims) alleging that a Contributor Version
+directly or indirectly infringes any patent, then the rights granted to
+You by any and all Contributors for the Covered Software under Section
+2.1 of this License shall terminate.
+
+5.3. In the event of termination under Sections 5.1 or 5.2 above, all
+end user license agreements (excluding distributors and resellers) which
+have been validly granted by You or Your distributors under this License
+prior to termination shall survive termination.
+
+************************************************************************
+*                                                                      *
+*  6. Disclaimer of Warranty                                           *
+*  -------------------------                                           *
+*                                                                      *
+*  Covered Software is provided under this License on an "as is"       *
+*  basis, without warranty of any kind, either expressed, implied, or  *
+*  statutory, including, without limitation, warranties that the       *
+*  Covered Software is free of defects, merchantable, fit for a        *
+*  particular purpose or non-infringing. The entire risk as to the     *
+*  quality and performance of the Covered Software is with You.        *
+*  Should any Covered Software prove defective in any respect, You     *
+*  (not any Contributor) assume the cost of any necessary servicing,   *
+*  repair, or correction. This disclaimer of warranty constitutes an   *
+*  essential part of this License. No use of any Covered Software is   *
+*  authorized under this License except under this disclaimer.         *
+*                                                                      *
+************************************************************************
+
+************************************************************************
+*                                                                      *
+*  7. Limitation of Liability                                          *
+*  --------------------------                                          *
+*                                                                      *
+*  Under no circumstances and under no legal theory, whether tort      *
+*  (including negligence), contract, or otherwise, shall any           *
+*  Contributor, or anyone who distributes Covered Software as          *
+*  permitted above, be liable to You for any direct, indirect,         *
+*  special, incidental, or consequential damages of any character      *
+*  including, without limitation, damages for lost profits, loss of    *
+*  goodwill, work stoppage, computer failure or malfunction, or any    *
+*  and all other commercial damages or losses, even if such party      *
+*  shall have been informed of the possibility of such damages. This   *
+*  limitation of liability shall not apply to liability for death or   *
+*  personal injury resulting from such party's negligence to the       *
+*  extent applicable law prohibits such limitation. Some               *
+*  jurisdictions do not allow the exclusion or limitation of           *
+*  incidental or consequential damages, so this exclusion and          *
+*  limitation may not apply to You.                                    *
+*                                                                      *
+************************************************************************
+8. Litigation
+-------------
+
+Any litigation relating to this License may be brought only in the
+courts of a jurisdiction where the defendant maintains its principal
+place of business and such litigation shall be governed by laws of that
+jurisdiction, without reference to its conflict-of-law provisions.
+Nothing in this Section shall prevent a party's ability to bring
+cross-claims or counter-claims.
+
+9. Miscellaneous
+----------------
+
+This License represents the complete agreement concerning the subject
+matter hereof. If any provision of this License is held to be
+unenforceable, such provision shall be reformed only to the extent
+necessary to make it enforceable. Any law or regulation which provides
+that the language of a contract shall be construed against the drafter
+shall not be used to construe this License against a Contributor.
+
+10. Versions of the License
+---------------------------
+
+10.1. New Versions
+
+Mozilla Foundation is the license steward. Except as provided in Section
+10.3, no one other than the license steward has the right to modify or
+publish new versions of this License. Each version will be given a
+distinguishing version number.
+
+10.2. Effect of New Versions
+
+You may distribute the Covered Software under the terms of the version
+of the License under which You originally received the Covered Software,
+or under the terms of any subsequent version published by the license
+steward.
+
+10.3. Modified Versions
+
+If you create software not governed by this License, and you want to
+create a new license for such software, you may create and use a
+modified version of this License if you rename the license and remove
+any references to the name of the license steward (except to note that
+such modified license differs from this License).
+
+10.4. Distributing Source Code Form that is Incompatible With Secondary
+Licenses
+
+If You choose to distribute Source Code Form that is Incompatible With
+Secondary Licenses under the terms of this version of the License, the
+notice described in Exhibit B of this License must be attached.
+
+Exhibit A - Source Code Form License Notice
+-------------------------------------------
+
+  This Source Code Form is subject to the terms of the Mozilla Public
+  License, v. 2.0. If a copy of the MPL was not distributed with this
+  file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+If it is not possible or desirable to put the notice in a particular
+file, then You may include the notice in a location (such as a LICENSE
+file in a relevant directory) where a recipient would be likely to look
+for such a notice.
+
+You may add additional accurate notices of copyright ownership.
+
+Exhibit B - "Incompatible With Secondary Licenses" Notice
+---------------------------------------------------------
+
+  This Source Code Form is "Incompatible With Secondary Licenses", as
+  defined by the Mozilla Public License, v. 2.0.
+
+_____
+
+intel/dnnl
+
+Copyright 2016-2018 Intel Corporation
+
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+sub-components:
+
+xbyak
+
+Copyright (c) 2007 MITSUNARI Shigeo. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+Neither the name of the copyright owner nor the names of its contributors may
+be used to endorse or promote products derived from this software without
+specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
+THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+Microsoft GSL
+
+Copyright (c) 2015 Microsoft Corporation. All rights reserved.
+
+This code is licensed under the MIT License (MIT).
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+_____
+
+Tensorflow
+
+Copyright 2018 The TensorFlow Authors. All rights reserved.
+
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction,
+and distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by
+the copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all
+other entities that control, are controlled by, or are under common
+control with that entity. For the purposes of this definition,
+"control" means (i) the power, direct or indirect, to cause the
+direction or management of such entity, whether by contract or
+otherwise, or (ii) ownership of fifty percent (50%) or more of the
+outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity
+exercising permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications,
+including but not limited to software source code, documentation
+source, and configuration files.
+
+"Object" form shall mean any form resulting from mechanical
+transformation or translation of a Source form, including but
+not limited to compiled object code, generated documentation,
+and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or
+Object form, made available under the License, as indicated by a
+copyright notice that is included in or attached to the work
+(an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object
+form, that is based on (or derived from) the Work and for which the
+editorial revisions, annotations, elaborations, or other modifications
+represent, as a whole, an original work of authorship. For the purposes
+of this License, Derivative Works shall not include works that remain
+separable from, or merely link (or bind by name) to the interfaces of,
+the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including
+the original version of the Work and any modifications or additions
+to that Work or Derivative Works thereof, that is intentionally
+submitted to Licensor for inclusion in the Work by the copyright owner
+or by an individual or Legal Entity authorized to submit on behalf of
+the copyright owner. For the purposes of this definition, "submitted"
+means any form of electronic, verbal, or written communication sent
+to the Licensor or its representatives, including but not limited to
+communication on electronic mailing lists, source code control systems,
+and issue tracking systems that are managed by, or on behalf of, the
+Licensor for the purpose of discussing and improving the Work, but
+excluding communication that is conspicuously marked or otherwise
+designated in writing by the copyright owner as "Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity
+on behalf of whom a Contribution has been received by Licensor and
+subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+this License, each Contributor hereby grants to You a perpetual,
+worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+copyright license to reproduce, prepare Derivative Works of,
+publicly display, publicly perform, sublicense, and distribute the
+Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+this License, each Contributor hereby grants to You a perpetual,
+worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+(except as stated in this section) patent license to make, have made,
+use, offer to sell, sell, import, and otherwise transfer the Work,
+where such license applies only to those patent claims licensable
+by such Contributor that are necessarily infringed by their
+Contribution(s) alone or by combination of their Contribution(s)
+with the Work to which such Contribution(s) was submitted. If You
+institute patent litigation against any entity (including a
+cross-claim or counterclaim in a lawsuit) alleging that the Work
+or a Contribution incorporated within the Work constitutes direct
+or contributory patent infringement, then any patent licenses
+granted to You under this License for that Work shall terminate
+as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+Work or Derivative Works thereof in any medium, with or without
+modifications, and in Source or Object form, provided that You
+meet the following conditions:
+
+(a) You must give any other recipients of the Work or
+Derivative Works a copy of this License; and
+
+(b) You must cause any modified files to carry prominent notices
+stating that You changed the files; and
+
+(c) You must retain, in the Source form of any Derivative Works
+that You distribute, all copyright, patent, trademark, and
+attribution notices from the Source form of the Work,
+excluding those notices that do not pertain to any part of
+the Derivative Works; and
+
+(d) If the Work includes a "NOTICE" text file as part of its
+distribution, then any Derivative Works that You distribute must
+include a readable copy of the attribution notices contained
+within such NOTICE file, excluding those notices that do not
+pertain to any part of the Derivative Works, in at least one
+of the following places: within a NOTICE text file distributed
+as part of the Derivative Works; within the Source form or
+documentation, if provided along with the Derivative Works; or,
+within a display generated by the Derivative Works, if and
+wherever such third-party notices normally appear. The contents
+of the NOTICE file are for informational purposes only and
+do not modify the License. You may add Your own attribution
+notices within Derivative Works that You distribute, alongside
+or as an addendum to the NOTICE text from the Work, provided
+that such additional attribution notices cannot be construed
+as modifying the License.
+
+You may add Your own copyright statement to Your modifications and
+may provide additional or different license terms and conditions
+for use, reproduction, or distribution of Your modifications, or
+for any such Derivative Works as a whole, provided Your use,
+reproduction, and distribution of the Work otherwise complies with
+the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+any Contribution intentionally submitted for inclusion in the Work
+by You to the Licensor shall be under the terms and conditions of
+this License, without any additional terms or conditions.
+Notwithstanding the above, nothing herein shall supersede or modify
+the terms of any separate license agreement you may have executed
+with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+names, trademarks, service marks, or product names of the Licensor,
+except as required for reasonable and customary use in describing the
+origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+agreed to in writing, Licensor provides the Work (and each
+Contributor provides its Contributions) on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+implied, including, without limitation, any warranties or conditions
+of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+PARTICULAR PURPOSE. You are solely responsible for determining the
+appropriateness of using or redistributing the Work and assume any
+risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+whether in tort (including negligence), contract, or otherwise,
+unless required by applicable law (such as deliberate and grossly
+negligent acts) or agreed to in writing, shall any Contributor be
+liable to You for damages, including any direct, indirect, special,
+incidental, or consequential damages of any character arising as a
+result of this License or out of the use or inability to use the
+Work (including but not limited to damages for loss of goodwill,
+work stoppage, computer failure or malfunction, or any and all
+other commercial damages or losses), even if such Contributor
+has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+the Work or Derivative Works thereof, You may choose to offer,
+and charge a fee for, acceptance of support, warranty, indemnity,
+or other liability obligations and/or rights consistent with this
+License. However, in accepting such obligations, You may act only
+on Your own behalf and on Your sole responsibility, not on behalf
+of any other Contributor, and only if You agree to indemnify,
+defend, and hold each Contributor harmless for any liability
+incurred by, or claims asserted against, such Contributor by reason
+of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017, The TensorFlow Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+_____
+
+Microsoft Cognitive Toolkit (CNTK)
+
+Copyright (c) Microsoft Corporation. All rights reserved.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify,
+merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
+NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+_____
+
+NumPy License
+
+Copyright (c) 2005, NumPy Developers
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+    Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+    Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+    Neither the name of the NumPy Developers nor the names of any contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+Pytorch / Caffe2
+
+From PyTorch:
+
+Copyright (c) 2016-     Facebook, Inc            (Adam Paszke)
+Copyright (c) 2014-     Facebook, Inc            (Soumith Chintala)
+Copyright (c) 2011-2014 Idiap Research Institute (Ronan Collobert)
+Copyright (c) 2012-2014 Deepmind Technologies    (Koray Kavukcuoglu)
+Copyright (c) 2011-2012 NEC Laboratories America (Koray Kavukcuoglu)
+Copyright (c) 2011-2013 NYU                      (Clement Farabet)
+Copyright (c) 2006-2010 NEC Laboratories America (Ronan Collobert, Leon Bottou, Iain Melvin, Jason Weston)
+Copyright (c) 2006      Idiap Research Institute (Samy Bengio)
+Copyright (c) 2001-2004 Idiap Research Institute (Ronan Collobert, Samy Bengio, Johnny Mariethoz)
+
+From Caffe2:
+
+Copyright (c) 2016-present, Facebook Inc. All rights reserved.
+
+All contributions by Facebook:
+Copyright (c) 2016 Facebook Inc.
+
+All contributions by Google:
+Copyright (c) 2015 Google Inc.
+All rights reserved.
+
+All contributions by Yangqing Jia:
+Copyright (c) 2015 Yangqing Jia
+All rights reserved.
+
+All contributions from Caffe:
+Copyright(c) 2013, 2014, 2015, the respective contributors
+All rights reserved.
+
+All other contributions:
+Copyright(c) 2015, 2016 the respective contributors
+All rights reserved.
+
+Caffe2 uses a copyright model similar to Caffe: each contributor holds
+copyright over their contributions to Caffe2. The project versioning records
+all such contribution and copyright details. If a contributor wants to further
+mark their specific copyright on a particular contribution, they should
+indicate their copyright solely in the commit message of the change when it is
+committed. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+3. Neither the names of Facebook, Deepmind Technologies, NYU, NEC Laboratories America
+   and IDIAP Research Institute nor the names of its contributors may be
+   used to endorse or promote products derived from this software without
+   specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+Caffe
+
+COPYRIGHT
+
+All contributions by the University of California:
+Copyright (c) 2014-2017 The Regents of the University of California (Regents)
+All rights reserved.
+
+All other contributions:
+Copyright (c) 2014-2017, the respective contributors
+All rights reserved.
+
+Caffe uses a shared copyright model: each contributor holds copyright over
+their contributions to Caffe. The project versioning records all such
+contribution and copyright details. If a contributor wants to further mark
+their specific copyright on a particular contribution, they should indicate
+their copyright solely in the commit message of the change when it is
+committed.
+
+LICENSE
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+CONTRIBUTION AGREEMENT
+
+By contributing to the BVLC/caffe repository through pull-request, comment,
+or otherwise, the contributor releases their content to the
+license and copyright terms herein.
+
+_____
+
+The LLVM Compiler Infrastructure
+
+==============================================================================
+LLVM Release License
+==============================================================================
+University of Illinois/NCSA
+Open Source License
+
+Copyright (c) 2003-2017 University of Illinois at Urbana-Champaign.
+All rights reserved.
+
+Developed by:
+
+    LLVM Team
+
+    University of Illinois at Urbana-Champaign
+
+    http://llvm.org
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal with
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+    * Redistributions of source code must retain the above copyright notice,
+      this list of conditions and the following disclaimers.
+
+    * Redistributions in binary form must reproduce the above copyright notice,
+      this list of conditions and the following disclaimers in the
+      documentation and/or other materials provided with the distribution.
+
+    * Neither the names of the LLVM Team, University of Illinois at
+      Urbana-Champaign, nor the names of its contributors may be used to
+      endorse or promote products derived from this Software without specific
+      prior written permission.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+CONTRIBUTORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS WITH THE
+SOFTWARE.
+
+==============================================================================
+Copyrights and Licenses for Third Party Software Distributed with LLVM:
+==============================================================================
+The LLVM software contains code written by third parties.  Such software will
+have its own individual LICENSE.TXT file in the directory in which it appears.
+This file will describe the copyrights, license, and restrictions which apply
+to that code.
+
+The disclaimer of warranty in the University of Illinois Open Source License
+applies to all code in the LLVM Distribution, and nothing in any of the
+other licenses gives permission to use the names of the LLVM Team or the
+University of Illinois to endorse or promote products derived from this
+Software.
+
+The following pieces of software have additional or alternate copyrights,
+licenses, and/or restrictions:
+
+Program             Directory
+-------             ---------
+Google Test         llvm/utils/unittest/googletest
+OpenBSD regex       llvm/lib/Support/{reg*, COPYRIGHT.regex}
+pyyaml tests        llvm/test/YAMLParser/{*.data, LICENSE.TXT}
+ARM contributions   llvm/lib/Target/ARM/LICENSE.TXT
+md5 contributions   llvm/lib/Support/MD5.cpp llvm/include/llvm/Support/MD5.h
+
+_____
+
+google/benchmark
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+CONTRIBUTORS
+
+# People who have agreed to one of the CLAs and can contribute patches.
+# The AUTHORS file lists the copyright holders; this file
+# lists people.  For example, Google employees are listed here
+# but not in AUTHORS, because Google holds the copyright.
+#
+# Names should be added to this file only after verifying that
+# the individual or the individual's organization has agreed to
+# the appropriate Contributor License Agreement, found here:
+#
+# https://developers.google.com/open-source/cla/individual
+# https://developers.google.com/open-source/cla/corporate
+#
+# The agreement for individuals can be filled out on the web.
+#
+# When adding J Random Contributor's name to this file,
+# either J's name or J's organization's name should be
+# added to the AUTHORS file, depending on whether the
+# individual or corporate CLA was used.
+#
+# Names should be added to this file as:
+#     Name <email address>
+#
+# Please keep the list sorted.
+
+Albert Pretorius <pretoalb@gmail.com>
+Arne Beer <arne@twobeer.de>
+Billy Robert O'Neal III <billy.oneal@gmail.com> <bion@microsoft.com>
+Chris Kennelly <ckennelly@google.com> <ckennelly@ckennelly.com>
+Christopher Seymour <chris.j.seymour@hotmail.com>
+David Coeurjolly <david.coeurjolly@liris.cnrs.fr>
+Deniz Evrenci <denizevrenci@gmail.com>
+Dominic Hamon <dma@stripysock.com> <dominic@google.com>
+Dominik Czarnota <dominik.b.czarnota@gmail.com>
+Eric Fiselier <eric@efcs.ca>
+Eugene Zhuk <eugene.zhuk@gmail.com>
+Evgeny Safronov <division494@gmail.com>
+Federico Ficarelli <federico.ficarelli@gmail.com>
+Felix Homann <linuxaudio@showlabor.de>
+Ismael Jimenez Martinez <ismael.jimenez.martinez@gmail.com>
+Jern-Kuan Leong <jernkuan@gmail.com>
+JianXiong Zhou <zhoujianxiong2@gmail.com>
+Joao Paulo Magalhaes <joaoppmagalhaes@gmail.com>
+John Millikin <jmillikin@stripe.com>
+Jussi Knuuttila <jussi.knuuttila@gmail.com>
+Kai Wolf <kai.wolf@gmail.com>
+Kishan Kumar <kumar.kishan@outlook.com>
+Kaito Udagawa <umireon@gmail.com>
+Lei Xu <eddyxu@gmail.com>
+Matt Clarkson <mattyclarkson@gmail.com>
+Maxim Vafin <maxvafin@gmail.com>
+Nick Hutchinson <nshutchinson@gmail.com>
+Oleksandr Sochka <sasha.sochka@gmail.com>
+Pascal Leroy <phl@google.com>
+Paul Redmond <paul.redmond@gmail.com>
+Pierre Phaneuf <pphaneuf@google.com>
+Radoslav Yovchev <radoslav.tm@gmail.com>
+Raul Marin <rmrodriguez@cartodb.com>
+Ray Glover <ray.glover@uk.ibm.com>
+Robert Guo <robert.guo@mongodb.com>
+Roman Lebedev <lebedev.ri@gmail.com>
+Shuo Chen <chenshuo@chenshuo.com>
+Tobias Ulvgård <tobias.ulvgard@dirac.se>
+Tom Madams <tom.ej.madams@gmail.com> <tmadams@google.com>
+Yixuan Qiu <yixuanq@gmail.com>
+Yusuke Suzuki <utatane.tea@gmail.com>
+Zbigniew Skowron <zbychs@gmail.com>
+
+AUTHORS
+
+# This is the official list of benchmark authors for copyright purposes.
+# This file is distinct from the CONTRIBUTORS files.
+# See the latter for an explanation.
+#
+# Names should be added to this file as:
+#	Name or Organization <email address>
+# The email address is not required for organizations.
+#
+# Please keep the list sorted.
+
+Albert Pretorius <pretoalb@gmail.com>
+Arne Beer <arne@twobeer.de>
+Carto
+Christopher Seymour <chris.j.seymour@hotmail.com>
+David Coeurjolly <david.coeurjolly@liris.cnrs.fr>
+Deniz Evrenci <denizevrenci@gmail.com>
+Dirac Research
+Dominik Czarnota <dominik.b.czarnota@gmail.com>
+Eric Fiselier <eric@efcs.ca>
+Eugene Zhuk <eugene.zhuk@gmail.com>
+Evgeny Safronov <division494@gmail.com>
+Federico Ficarelli <federico.ficarelli@gmail.com>
+Felix Homann <linuxaudio@showlabor.de>
+Google Inc.
+International Business Machines Corporation
+Ismael Jimenez Martinez <ismael.jimenez.martinez@gmail.com>
+Jern-Kuan Leong <jernkuan@gmail.com>
+JianXiong Zhou <zhoujianxiong2@gmail.com>
+Joao Paulo Magalhaes <joaoppmagalhaes@gmail.com>
+Jussi Knuuttila <jussi.knuuttila@gmail.com>
+Kaito Udagawa <umireon@gmail.com>
+Kishan Kumar <kumar.kishan@outlook.com>
+Lei Xu <eddyxu@gmail.com>
+Matt Clarkson <mattyclarkson@gmail.com>
+Maxim Vafin <maxvafin@gmail.com>
+MongoDB Inc.
+Nick Hutchinson <nshutchinson@gmail.com>
+Oleksandr Sochka <sasha.sochka@gmail.com>
+Paul Redmond <paul.redmond@gmail.com>
+Radoslav Yovchev <radoslav.tm@gmail.com>
+Roman Lebedev <lebedev.ri@gmail.com>
+Shuo Chen <chenshuo@chenshuo.com>
+Steinar H. Gunderson <sgunderson@bigfoot.com>
+Stripe, Inc.
+Yixuan Qiu <yixuanq@gmail.com>
+Yusuke Suzuki <utatane.tea@gmail.com>
+Zbigniew Skowron <zbychs@gmail.com>
+
+_____
+
+HalideIR
+
+Copyright (c) 2016 HalideIR contributors
+Copyright (c) 2012-2014 MIT CSAIL, Google Inc., and other contributors
+HalideIR is derived from the Halide project.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+_____
+
+Distributed Machine Learning Common Codebase
+
+Copyright (c) 2015 by Contributors
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+_____
+
+DLPack: Open In Memory Tensor Structure
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017 by Contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+_____
+
+HowardHinnant/date
+
+The source code in this project is released using the MIT License. There is no
+global license for the project because each file is licensed individually with
+different author names and/or dates.
+
+If you contribute to this project, please add your name to the license of each
+file you modify.  If you have already contributed to this project and forgot to
+add your name to the license, please feel free to submit a new P/R to add your
+name to the license in each file you modified.
+
+For convenience, here is a copy of the MIT license found in each file except
+without author names or dates:
+
+The MIT License (MIT)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+_____
+
+FreeBSD: getopt.c file
+
+Copyright (c) 1987, 1993, 1994
+The Regents of the University of California.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+ 1. Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the University nor the names of its contributors
+may be used to endorse or promote products derived from this software
+without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGE.
+_____
+
+
+google/googletest
+
+Copyright 2008, Google Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+    * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+G3log : Asynchronous logger with Dynamic Sinks
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <http://unlicense.org/>
+_____
+
+Scikit-learn
+
+Copyright (c) 2007–2018 The scikit-learn developers.
+All rights reserved.
+
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  a. Redistributions of source code must retain the above copyright notice,
+     this list of conditions and the following disclaimer.
+  b. Redistributions in binary form must reproduce the above copyright
+     notice, this list of conditions and the following disclaimer in the
+     documentation and/or other materials provided with the distribution.
+  c. Neither the name of the Scikit-learn Developers  nor the names of
+     its contributors may be used to endorse or promote products
+     derived from this software without specific prior written
+     permission.
+
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
+DAMAGE.
+
+_____
+
+google/re2
+
+Copyright (c) 2009 The RE2 Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+  * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+_____
+onnx/onnx-tensorrt
+
+MIT License
+
+Copyright (c) 2018, NVIDIA CORPORATION. All rights reserved.
+Copyright (c) 2018 Open Neural Network Exchange
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+_____
+nvidia/cutlass
+
+Copyright (c) 2017 - 2022 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+SPDX-License-Identifier: BSD-3-Clause
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+Boost
+
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+
+
+_____
+
+JDAI-CV/DNNLibrary
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [2019] [JD.com Inc. JD AI]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+_____
+
+google/flatbuffers
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2014 Google Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+_____
+
+google/glog
+
+Copyright (c) 2008, Google Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+    * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+A function gettimeofday in utilities.cc is based on
+
+http://www.google.com/codesearch/p?hl=en#dR3YEbitojA/COPYING&q=GetSystemTimeAsFileTime%20license:bsd
+
+The license of this code is:
+
+Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi> and contributors
+All Rights Reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+3. Neither the name(s) of the above-listed copyright holder(s) nor the
+   names of its contributors may be used to endorse or promote products
+   derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+abseil-cpp
+https://github.com/abseil/abseil-cpp
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        https://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       https://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+_____
+
+microsoft/wil
+
+MIT License
+
+Copyright (c) Microsoft Corporation. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE
+
+_____
+
+nlohmann/json
+
+MIT License
+
+Copyright (c) 2013-2019 Niels Lohmann
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+_____
+
+dcleblanc/SafeInt
+
+MIT License
+
+Copyright (c) 2018 Microsoft
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+_____
+Open MPI
+
+3-Clause BSD License
+
+Most files in this release are marked with the copyrights of the
+organizations who have edited them.  The copyrights below are in no
+particular order and generally reflect members of the Open MPI core
+team who have contributed code to this release.  The copyrights for
+code used under license from other parties are included in the
+corresponding files.
+
+Copyright (c) 2004-2010 The Trustees of Indiana University and Indiana
+                        University Research and Technology
+                        Corporation.  All rights reserved.
+Copyright (c) 2004-2017 The University of Tennessee and The University
+                        of Tennessee Research Foundation.  All rights
+                        reserved.
+Copyright (c) 2004-2010 High Performance Computing Center Stuttgart,
+                        University of Stuttgart.  All rights reserved.
+Copyright (c) 2004-2008 The Regents of the University of California.
+                        All rights reserved.
+Copyright (c) 2006-2017 Los Alamos National Security, LLC.  All rights
+                        reserved.
+Copyright (c) 2006-2017 Cisco Systems, Inc.  All rights reserved.
+Copyright (c) 2006-2010 Voltaire, Inc. All rights reserved.
+Copyright (c) 2006-2017 Sandia National Laboratories. All rights reserved.
+Copyright (c) 2006-2010 Sun Microsystems, Inc.  All rights reserved.
+                        Use is subject to license terms.
+Copyright (c) 2006-2017 The University of Houston. All rights reserved.
+Copyright (c) 2006-2009 Myricom, Inc.  All rights reserved.
+Copyright (c) 2007-2017 UT-Battelle, LLC. All rights reserved.
+Copyright (c) 2007-2017 IBM Corporation.  All rights reserved.
+Copyright (c) 1998-2005 Forschungszentrum Juelich, Juelich Supercomputing
+                        Centre, Federal Republic of Germany
+Copyright (c) 2005-2008 ZIH, TU Dresden, Federal Republic of Germany
+Copyright (c) 2007      Evergrid, Inc. All rights reserved.
+Copyright (c) 2008      Chelsio, Inc.  All rights reserved.
+Copyright (c) 2008-2009 Institut National de Recherche en
+                        Informatique.  All rights reserved.
+Copyright (c) 2007      Lawrence Livermore National Security, LLC.
+                        All rights reserved.
+Copyright (c) 2007-2017 Mellanox Technologies.  All rights reserved.
+Copyright (c) 2006-2010 QLogic Corporation.  All rights reserved.
+Copyright (c) 2008-2017 Oak Ridge National Labs.  All rights reserved.
+Copyright (c) 2006-2012 Oracle and/or its affiliates.  All rights reserved.
+Copyright (c) 2009-2015 Bull SAS.  All rights reserved.
+Copyright (c) 2010      ARM ltd.  All rights reserved.
+Copyright (c) 2016      ARM, Inc.  All rights reserved.
+Copyright (c) 2010-2011 Alex Brick .  All rights reserved.
+Copyright (c) 2012      The University of Wisconsin-La Crosse. All rights
+                        reserved.
+Copyright (c) 2013-2016 Intel, Inc. All rights reserved.
+Copyright (c) 2011-2017 NVIDIA Corporation.  All rights reserved.
+Copyright (c) 2016      Broadcom Limited.  All rights reserved.
+Copyright (c) 2011-2017 Fujitsu Limited.  All rights reserved.
+Copyright (c) 2014-2015 Hewlett-Packard Development Company, LP.  All
+                        rights reserved.
+Copyright (c) 2013-2017 Research Organization for Information Science (RIST).
+                        All rights reserved.
+Copyright (c) 2017-2018 Amazon.com, Inc. or its affiliates.  All Rights
+                        reserved.
+Copyright (c) 2018      DataDirect Networks. All rights reserved.
+Copyright (c) 2018-2019 Triad National Security, LLC. All rights reserved.
+
+$COPYRIGHT$
+
+Additional copyrights may follow
+
+$HEADER$
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+- Redistributions of source code must retain the above copyright
+  notice, this list of conditions and the following disclaimer.
+
+- Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer listed
+  in this license in the documentation and/or other materials
+  provided with the distribution.
+
+- Neither the name of the copyright holders nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+The copyright holders provide no reassurances that the source code
+provided does not infringe any patent, copyright, or any other
+intellectual property rights of third parties.  The copyright holders
+disclaim any liability to any recipient for claims brought against
+recipient by any third party for infringement of that parties
+intellectual property rights.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+The Android Open Source Project
+
+Copyright (C) 2017 The Android Open Source Project
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+------
+
+libprotobuf-mutator
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   -----
+
+   openucx/ucx
+   https://github.com/openucx/ucx
+
+   Copyright (c) 2014-2015      UT-Battelle, LLC. All rights reserved.
+   Copyright (C) 2014-2020      Mellanox Technologies Ltd. All rights reserved.
+   Copyright (C) 2014-2015      The University of Houston System. All rights reserved.
+   Copyright (C) 2015           The University of Tennessee and The University
+                              of Tennessee Research Foundation. All rights reserved.
+   Copyright (C) 2016-2020      ARM Ltd. All rights reserved.
+   Copyright (c) 2016           Los Alamos National Security, LLC. All rights reserved.
+   Copyright (C) 2016-2020      Advanced Micro Devices, Inc.  All rights reserved.
+   Copyright (C) 2019           UChicago Argonne, LLC.  All rights reserved.
+   Copyright (c) 2018-2020      NVIDIA CORPORATION. All rights reserved.
+   Copyright (C) 2020           Huawei Technologies Co., Ltd. All rights reserved.
+   Copyright (C) 2016-2020      Stony Brook University. All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions
+   are met:
+
+   1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+   2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+   3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+   HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
+   TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+   PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+   LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+   NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+   SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+   -----
+
+   From PyTorch:
+
+   Copyright (c) 2016-     Facebook, Inc            (Adam Paszke)
+   Copyright (c) 2014-     Facebook, Inc            (Soumith Chintala)
+   Copyright (c) 2011-2014 Idiap Research Institute (Ronan Collobert)
+   Copyright (c) 2012-2014 Deepmind Technologies    (Koray Kavukcuoglu)
+   Copyright (c) 2011-2012 NEC Laboratories America (Koray Kavukcuoglu)
+   Copyright (c) 2011-2013 NYU                      (Clement Farabet)
+   Copyright (c) 2006-2010 NEC Laboratories America (Ronan Collobert, Leon Bottou, Iain Melvin, Jason Weston)
+   Copyright (c) 2006      Idiap Research Institute (Samy Bengio)
+   Copyright (c) 2001-2004 Idiap Research Institute (Ronan Collobert, Samy Bengio, Johnny Mariethoz)
+
+   From Caffe2:
+
+   Copyright (c) 2016-present, Facebook Inc. All rights reserved.
+
+   All contributions by Facebook:
+   Copyright (c) 2016 Facebook Inc.
+
+   All contributions by Google:
+   Copyright (c) 2015 Google Inc.
+   All rights reserved.
+
+   All contributions by Yangqing Jia:
+   Copyright (c) 2015 Yangqing Jia
+   All rights reserved.
+
+   All contributions from Caffe:
+   Copyright(c) 2013, 2014, 2015, the respective contributors
+   All rights reserved.
+
+   All other contributions:
+   Copyright(c) 2015, 2016 the respective contributors
+   All rights reserved.
+
+   Caffe2 uses a copyright model similar to Caffe: each contributor holds
+   copyright over their contributions to Caffe2. The project versioning records
+   all such contribution and copyright details. If a contributor wants to further
+   mark their specific copyright on a particular contribution, they should
+   indicate their copyright solely in the commit message of the change when it is
+   committed.
+
+   All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions are met:
+
+   1. Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+
+   2. Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+
+   3. Neither the names of Facebook, Deepmind Technologies, NYU, NEC Laboratories America
+      and IDIAP Research Institute nor the names of its contributors may be
+      used to endorse or promote products derived from this software without
+      specific prior written permission.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+   AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+   IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+   ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+   LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+   CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+   SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+   INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+   CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+   POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+   mpi4py
+   https://github.com/mpi4py/mpi4py/
+
+   =======================
+   LICENSE: MPI for Python
+   =======================
+
+   :Author:  Lisandro Dalcin
+   :Contact: dalcinl@gmail.com
+
+
+   Copyright (c) 2019, Lisandro Dalcin.
+   All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions
+   are met:
+
+   * Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+   * Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS
+   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+   HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+   LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+   DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+   THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+_____
+huggingface/transformers
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+_____
+msgpack/msgpack-python
+
+Copyright (C) 2008-2011 INADA Naoki <songofacandy@gmail.com>
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+_____
+lanpa/tensorboardX
+
+MIT License
+
+Copyright (c) 2017 Tzu-Wei Huang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+_____
+tensorflow/tensorboard
+
+Copyright 2017 The TensorFlow Authors.  All rights reserved.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017, The TensorFlow Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+_____
+
+cerberus
+
+Cerberus is a lightweight and extensible data validation library for Python.
+
+ISC License
+
+Copyright (c) 2012-2016 Nicola Iarocci.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+_____
+
+MurmurHash3
+
+MIT license
+
+https://github.com/aappleby/smhasher
+
+SMHasher is a test suite designed to test the distribution, collision, and
+performance properties of non-cryptographic hash functions.
+This is the home for the MurmurHash family of hash functions along with the
+SMHasher test suite used to verify them.
+SMHasher is released under the MIT license.
+All MurmurHash versions are public domain software, and the author disclaims all copyright to their code.
+
+_____
+
+gtest-ios-framework
+
+https://github.com/mestevens/gtest-ios-framework
+
+Copyright (c) 2013 Matthew Stevens
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+_____
+
+DLPack
+
+https://github.com/dmlc/dlpack
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017 by Contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+_____
+
+emsdk
+
+MIT/Expat license
+
+https://github.com/emscripten-core/emsdk
+
+Copyright (c) 2018 Emscripten authors (see AUTHORS in Emscripten)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+----------------------------------------------------------------------------
+
+This is the MIT/Expat License. For more information see:
+
+1. http://www.opensource.org/licenses/mit-license.php
+
+2. http://en.wikipedia.org/wiki/MIT_License
+
+_____
+
+coremltools
+
+BSD-3-Clause License
+
+https://github.com/apple/coremltools
+
+Copyright (c) 2020, Apple Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1.  Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2.  Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3.  Neither the name of the copyright holder(s) nor the names of any contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+© 2021 GitHub, Inc.
+
+_____
+
+react-native
+
+MIT License
+
+https://github.com/facebook/react-native
+
+Copyright (c) Facebook, Inc. and its affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+_____
+
+pytorch/cpuinfo
+
+BSD 2-Clause "Simplified" License
+
+https://github.com/pytorch/cpuinfo
+
+Copyright (c) 2019 Google LLC
+Copyright (c) 2017-2018 Facebook Inc.
+Copyright (C) 2012-2017 Georgia Institute of Technology
+Copyright (C) 2010-2012 Marat Dukhan
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+SQLite Is Public Domain
+
+All of the code and documentation in SQLite has been dedicated to the public
+domain by the authors. All code authors, and representatives of the companies
+they work for, have signed affidavits dedicating their contributions to the
+public domain and originals of those signed affidavits are stored in a firesafe
+at the main offices of Hwaci. Anyone is free to copy, modify, publish, use,
+compile, sell, or distribute the original SQLite code, either in source code
+form or as a compiled binary, for any purpose, commercial or non-commercial,
+and by any means.
+
+The previous paragraph applies to the deliverable code and documentation in
+SQLite - those parts of the SQLite library that you actually bundle and ship
+with a larger application. Some scripts used as part of the build process (for
+example the "configure" scripts generated by autoconf) might fall under other
+open-source licenses. Nothing from these build scripts ever reaches the final
+deliverable SQLite library, however, and so the licenses associated with those
+scripts should not be a factor in assessing your rights to copy and use the
+SQLite library.
+
+All of the deliverable code in SQLite has been written from scratch. No code
+has been taken from other projects or from the open internet. Every line of
+code can be traced back to its original author, and all of those authors have
+public domain dedications on file. So the SQLite code base is clean and is
+uncontaminated with licensed code from other projects.
+
+_____
+
+google/XNNPACK
+
+BSD License
+
+For XNNPACK software
+
+Copyright (c) Facebook, Inc. and its affiliates. All rights reserved.
+Copyright 2019 Google LLC
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+ * Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+ * Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+ * Neither the name Facebook nor the names of its contributors may be used to
+   endorse or promote products derived from this software without specific
+   prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+google/sentencepiece, https://github.com/google/sentencepiece
+(included when statically linked with onnxruntime-extensions)
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+_____
+
+dlfcn-win32/dlfcn-win32 is licensed under the MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+_____
+
+The Python Imaging Library (PIL) is
+
+    Copyright © 1997-2011 by Secret Labs AB
+    Copyright © 1995-2011 by Fredrik Lundh
+
+Pillow is the friendly PIL fork. It is
+
+    Copyright © 2010-2023 by Alex Clark and contributors
+
+Like PIL, Pillow is licensed under the open source HPND License:
+
+By obtaining, using, and/or copying this software and/or its associated
+documentation, you agree that you have read, understood, and will comply
+with the following terms and conditions:
+
+Permission to use, copy, modify, and distribute this software and its
+associated documentation for any purpose and without fee is hereby granted,
+provided that the above copyright notice appears in all copies, and that
+both that copyright notice and this permission notice appear in supporting
+documentation, and that the name of Secret Labs AB or the author not be
+used in advertising or publicity pertaining to distribution of the software
+without specific, written prior permission.
+
+SECRET LABS AB AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
+SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS.
+IN NO EVENT SHALL SECRET LABS AB OR THE AUTHOR BE LIABLE FOR ANY SPECIAL,
+INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+_____
+
+openssl/openssl, https://github.com/openssl/openssl
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        https://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+_____
+
+Tencent/rapidjson, https://github.com/Tencent/rapidjson
+
+Tencent is pleased to support the open source community by making RapidJSON available.
+
+Copyright (C) 2015 THL A29 Limited, a Tencent company, and Milo Yip.  All rights reserved.
+
+If you have downloaded a copy of the RapidJSON binary from Tencent, please note that the RapidJSON binary is licensed under the MIT License.
+If you have downloaded a copy of the RapidJSON source code from Tencent, please note that RapidJSON source code is licensed under the MIT License, except for the third-party components listed below which are subject to different license terms.  Your integration of RapidJSON into your own projects may require compliance with the MIT License, as well as the other licenses applicable to the third-party components included within RapidJSON. To avoid the problematic JSON license in your own projects, it's sufficient to exclude the bin/jsonchecker/ directory, as it's the only code under the JSON license.
+A copy of the MIT License is included in this file.
+
+Other dependencies and licenses:
+
+Open Source Software Licensed Under the BSD License:
+--------------------------------------------------------------------
+
+The msinttypes r29
+Copyright (c) 2006-2013 Alexander Chemeris
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+* Neither the name of  copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS AND CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Open Source Software Licensed Under the JSON License:
+--------------------------------------------------------------------
+
+json.org
+Copyright (c) 2002 JSON.org
+All Rights Reserved.
+
+JSON_checker
+Copyright (c) 2002 JSON.org
+All Rights Reserved.
+
+
+Terms of the JSON License:
+---------------------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+The Software shall be used for Good, not Evil.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+Terms of the MIT License:
+--------------------------------------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+_____
+
+boostorg/boost, https://github.com/boostorg/boost
+
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+
+_____
+
+libb64/libb64, https://github.com/libb64/libb64
+
+Copyright-Only Dedication (based on United States law) or Public Domain Certification
+
+The person or persons who have associated work with this document (the "Dedicator" or "Certifier") hereby either (a) certifies that, to the best of his knowledge, the work of authorship identified is in the public domain of the country from which the work is published, or (b) hereby dedicates whatever copyright the dedicators holds in the work of authorship identified below (the "Work") to the public domain. A certifier, moreover, dedicates any copyright interest he may have in the associated work, and for these purposes, is described as a "dedicator" below.
+
+A certifier has taken reasonable steps to verify the copyright status of this work. Certifier recognizes that his good faith efforts may not shield him from liability if in fact the work certified is not in the public domain.
+
+Dedicator makes this dedication for the benefit of the public at large and to the detriment of the Dedicator's heirs and successors. Dedicator intends this dedication to be an overt act of relinquishment in perpetuity of all present and future rights under copyright law, whether vested or contingent, in the Work. Dedicator understands that such relinquishment of all rights includes the relinquishment of all rights to enforce (by lawsuit or otherwise) those copyrights in the Work.
+
+Dedicator recognizes that, once placed in the public domain, the Work may be freely reproduced, distributed, transmitted, used, modified, built upon, or otherwise exploited by anyone for any purpose, commercial or non-commercial, and in any way, including by methods that have not yet been invented or conceived.
+
+_____
+
+posix pthread library, https://sourceforge.net/projects/pthreads4w
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+_____
+
+Triton Inference Server & Client, https://github.com/triton-inference-server
+
+Copyright (c) 2022, NVIDIA CORPORATION. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+ * Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+ * Neither the name of NVIDIA CORPORATION nor the names of its
+   contributors may be used to endorse or promote products derived
+   from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS ``AS IS'' AND ANY
+EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR
+CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+microsoft/mimalloc, https://github.com/microsoft/mimalloc
+
+MIT License
+
+Copyright (c) 2018-2021 Microsoft Corporation, Daan Leijen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+_____
+
+TensorFlow.js
+
+https://github.com/tensorflow/tfjs
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+——
+
+curl/curl
+
+https://github.com/curl
+
+COPYRIGHT AND PERMISSION NOTICE
+
+Copyright (C) Daniel Stenberg, <daniel@haxx.se>, and many
+contributors, see the THANKS file.
+
+All rights reserved.
+
+Permission to use, copy, modify, and distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright
+notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. IN
+NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE
+OR OTHER DEALINGS IN THE SOFTWARE.
+
+Except as contained in this notice, the name of a copyright holder shall not
+be used in advertising or otherwise to promote the sale, use or other dealings
+in this Software without prior written authorization of the copyright holder.
+
+_____
+
+Intel neural-compressor
+
+https://github.com/intel/neural-compressor
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   ============================================================================
+
+   Copyright 2016-2019 Intel Corporation
+   Copyright 2018 YANDEX LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   This distribution includes third party software ("third party programs").
+   This third party software, even if included with the distribution of
+   the Intel software, may be governed by separate license terms, including
+   without limitation, third party license terms, other Intel software license
+   terms, and open source software license terms. These separate license terms
+   govern your use of the third party programs as set forth in the
+   "THIRD-PARTY-PROGRAMS" file.
+
+_____
+
+FlashAttention, https://github.com/Dao-AILab/flash-attention
+
+BSD 3-Clause License
+
+Copyright (c) 2022, the respective contributors, as shown by the AUTHORS file.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+neural-speed
+
+https://github.com/intel/neural-speed
+
+                                 Apache License
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   ============================================================================
+
+   Copyright 2016-2019 Intel Corporation
+   Copyright 2018 YANDEX LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   This distribution includes third party software ("third party programs").
+   This third party software, even if included with the distribution of
+   the Intel software, may be governed by separate license terms, including
+   without limitation, third party license terms, other Intel software license
+   terms, and open source software license terms. These separate license terms
+   govern your use of the third party programs as set forth in the
+   "THIRD-PARTY-PROGRAMS" file.
+
+_____
+
+dawn
+
+https://dawn.googlesource.com/dawn
+
+   BSD 3-Clause License
+
+   Copyright 2017-2023 The Dawn & Tint Authors
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions are met:
+
+   1. Redistributions of source code must retain the above copyright notice, this
+      list of conditions and the following disclaimer.
+
+   2. Redistributions in binary form must reproduce the above copyright notice,
+      this list of conditions and the following disclaimer in the documentation
+      and/or other materials provided with the distribution.
+
+   3. Neither the name of the copyright holder nor the names of its
+      contributors may be used to endorse or promote products derived from
+      this software without specific prior written permission.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+   AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+   IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+   DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+   FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+   DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+   SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+   CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+   OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+_____
+
+KleidiAI
+
+https://gitlab.arm.com/kleidi/kleidiai
+
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files.
+
+"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions:
+
+     (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and
+
+     (b) You must cause any modified files to carry prominent notices stating that You changed the files; and
+
+     (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and
+
+     (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License.
+
+     You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+Copyright 2024-2025 Arm Limited and/or its affiliates <open-source-office@arm.com>
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-license.txt b/THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-license.txt
new file mode 100644
index 0000000..67d275d
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-license.txt
@@ -0,0 +1,51 @@
+MICROSOFT SOFTWARE LICENSE TERMS
+Microsoft Windows ML Runtime
+________________________________________
+IF YOU LIVE IN (OR ARE A BUSINESS WITH A PRINCIPAL PLACE OF BUSINESS IN) THE UNITED STATES, PLEASE READ THE “BINDING ARBITRATION AND CLASS ACTION WAIVER” SECTION BELOW. IT AFFECTS HOW DISPUTES ARE RESOLVED.
+________________________________________
+These license terms are an agreement between you and Microsoft Corporation (or one of its affiliates). They apply to the software named above and any Microsoft services or software updates (except to the extent such services or updates are accompanied by new or additional terms, in which case those different terms apply prospectively and do not alter your or Microsoft’s rights relating to pre-updated software or services). IF YOU COMPLY WITH THESE LICENSE TERMS, YOU HAVE THE RIGHTS BELOW. BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS.
+    1. INSTALLATION AND USE RIGHTS.
+        a) General. Subject to the terms of this agreement, you may install and use any number of copies of the software to develop and test your applications, solely for use on Windows. When building Generative AI applications follow the guidelines in https://learn.microsoft.com/windows/ai/rai.
+        b) Included Microsoft Applications. The software may include other Microsoft applications. These license terms apply to those included applications, if any, unless other license terms are provided with the other Microsoft applications.
+        c) Microsoft Platforms. The software may include components from Microsoft Windows. These components are governed by separate agreements and their own product support policies, as described in the license terms found in the installation directory for that component or in the “Licenses” folder accompanying the software.
+        d) Third Party Materials. The software may use or include source code, object code, or data available under an open source or open data license (“Open Source Materials”) or a proprietary license from a third party (with Open Source Materials, collectively, “Third Party Materials”) that are licensed under the specific license terms applicable to the Third Party Materials (an “Third Party License Agreement”). To the extent that any Third Party License Agreement requires that the corresponding Third Party Materials be licensed under terms that are different from the terms set forth in this Agreement, then such Third Party Materials are licensed under the terms of that Third Party License Agreement and the other terms and conditions in this Agreement will not apply with respect to those Third Party Materials. You (a) acknowledge that any such Third Party License Agreement is solely between Licensee and the applicable licensor of the Third Party Materials, and (b) will comply with the terms of any such Third Party License Agreement. Without limitation to the foregoing, the licenses referenced on this website (https://learn.microsoft.com/en-us/windows/ai/new-windows-ml/supported-execution-providers) are deemed to be “Third Party Materials.”
+    2. DATA.
+        a) Data Collection. The software may collect information about you and your use of the software, and send that to Microsoft. Microsoft may use this information to provide services and improve our products and services. You may opt-out of many of these scenarios, but not all, as described in the product documentation. There are also some features in the software that may enable you to collect data from users of your applications. If you use these features to enable data collection in your applications, you must comply with applicable law, including providing appropriate notices to users of your applications. You can learn more about data collection and use in the help documentation and the privacy statement at https://aka.ms/privacy. Your use of the software operates as your consent to these practices.
+        b) Processing of Personal Data. To the extent Microsoft is a processor or subprocessor of personal data in connection with the software, Microsoft makes the commitments in the European Union General Data Protection Regulation Terms of the Online Services Terms to all customers effective May 25, 2018, at https://docs.microsoft.com/en-us/legal/gdpr.
+    3. DISTRIBUTABLE CODE. The software may contain code you are permitted to distribute (i.e. make available for third parties) in applications you develop, as described in this Section.
+        a) Distribution Rights. The code and test files described below are distributable if included with the software.
+            i. Any files that are binplaced with your application by the WindowsAppSDK NuGet package are, by definition, permitted to be redistributed.  This applies to both framework package dependent and self-contained deployments.
+            ii. Image Library. You may copy and distribute images, graphics, and animations in the Image Library as described in the software documentation; and
+            iii. Third Party Distribution. You may permit distributors of your applications to copy and distribute any of this distributable code you elect to distribute with your applications.
+        b) Distribution Requirements. For any code you distribute, you must:
+            i. add significant primary functionality to it in your applications;
+            ii. require distributors and external end users to agree to terms that protect it and Microsoft at least as much as this agreement; and
+            iii. indemnify, defend, and hold harmless Microsoft from any claims, including attorneys’ fees, related to the distribution or use of your applications, except to the extent that any claim is based solely on the unmodified distributable code.
+        c) Distribution Restrictions. You may not:
+            i. use Microsoft’s trademarks or trade dress in your application in any way that suggests your application comes from or is endorsed by Microsoft; or
+            ii. modify or distribute the source code of any distributable code so that any part of it becomes subject to any license that requires that the distributable code, any other part of the software, or any of Microsoft’s other intellectual property be disclosed or distributed in source code form, or that others have the right to modify it.
+    4. SCOPE OF LICENSE. The software is licensed, not sold. Microsoft reserves all other rights. Unless applicable law gives you more rights despite this limitation, you will not (and have no right to):
+        a) work around any technical limitations in the software that only allow you to use it in certain ways;
+        b) reverse engineer, decompile or disassemble the software, or otherwise attempt to derive the source code for the software, except and to the extent required by third party licensing terms governing use of certain open source components that may be included in the software;
+        c) remove, minimize, block, or modify any notices of Microsoft or its suppliers in the software;
+        d) use the software in any way that is against the law or to create or propagate malware; or
+        e) share, publish, distribute, or lease the software (except for any distributable code, subject to the terms above), provide the software as a stand-alone offering for others to use, or transfer the software or this agreement to any third party.
+    5. EXPORT RESTRICTIONS. You must comply with all domestic and international export laws and regulations that apply to the software, which include restrictions on destinations, end users, and end use. For further information on export restrictions, visit https://aka.ms/exporting.
+    6. SUPPORT SERVICES. Microsoft is not obligated under this agreement to provide any support services for the software. Any support provided is “as is”, “with all faults”, and without warranty of any kind.
+    7. UPDATES. The software may periodically check for updates, and download and install them for you. You may obtain updates only from Microsoft or authorized sources. Microsoft may need to update your system to provide you with updates. You agree to receive these automatic updates without any additional notice. Updates may not include or support all existing software features, services, or peripheral devices.
+    8. BINDING ARBITRATION AND CLASS ACTION WAIVER. This Section applies if you live in (or, if a business, your principal place of business is in) the United States. If you and Microsoft have a dispute, you and Microsoft agree to try for 60 days to resolve it informally. If you and Microsoft can’t, you and Microsoft agree to binding individual arbitration before the American Arbitration Association under the Federal Arbitration Act (“FAA”), and not to sue in court in front of a judge or jury. Instead, a neutral arbitrator will decide. Class action lawsuits, class-wide arbitrations, private attorney-general actions, and any other proceeding where someone acts in a representative capacity are not allowed; nor is combining individual proceedings without the consent of all parties. The complete Arbitration Agreement contains more terms and is at https://aka.ms/arb-agreement-4. You and Microsoft agree to these terms.
+    9. ENTIRE AGREEMENT. This agreement, and any other terms Microsoft may provide for supplements, updates, or third-party applications, is the entire agreement for the software.
+    10. APPLICABLE LAW AND PLACE TO RESOLVE DISPUTES. If you acquired the software in the United States or Canada, the laws of the state or province where you live (or, if a business, where your principal place of business is located) govern the interpretation of this agreement, claims for its breach, and all other claims (including consumer protection, unfair competition, and tort claims), regardless of conflict of laws principles, except that the FAA governs everything related to arbitration. If you acquired the software in any other country, its laws apply, except that the FAA governs everything related to arbitration. If U.S. federal jurisdiction exists, you and Microsoft consent to exclusive jurisdiction and venue in the federal court in King County, Washington for all disputes heard in court (excluding arbitration). If not, you and Microsoft consent to exclusive jurisdiction and venue in the Superior Court of King County, Washington for all disputes heard in court (excluding arbitration).
+    11. CONSUMER RIGHTS; REGIONAL VARIATIONS. This agreement describes certain legal rights. You may have other rights, including consumer rights, under the laws of your state or country. Separate and apart from your relationship with Microsoft, you may also have rights with respect to the party from which you acquired the software. This agreement does not change those other rights if the laws of your state or country do not permit it to do so. For example, if you acquired the software in one of the below regions, or mandatory country law applies, then the following provisions apply to you:
+        a) Australia. You have statutory guarantees under the Australian Consumer Law and nothing in this agreement is intended to affect those rights.
+        b) Canada. If you acquired this software in Canada, you may stop receiving updates by turning off the automatic update feature, disconnecting your device from the Internet (if and when you re-connect to the Internet, however, the software will resume checking for and installing updates), or uninstalling the software. The product documentation, if any, may also specify how to turn off updates for your specific device or software.
+        c) Germany and Austria.
+            i. Warranty. The properly licensed software will perform substantially as described in any Microsoft materials that accompany the software. However, Microsoft gives no contractual guarantee in relation to the licensed software.
+            ii. Limitation of Liability. In case of intentional conduct, gross negligence, claims based on the Product Liability Act, as well as, in case of death or personal or physical injury, Microsoft is liable according to the statutory law.
+                Subject to the foregoing clause ii., Microsoft will only be liable for slight negligence if Microsoft is in breach of such material contractual obligations, the fulfillment of which facilitate the due performance of this agreement, the breach of which would endanger the purpose of this agreement and the compliance with which a party may constantly trust in (so-called "cardinal obligations"). In other cases of slight negligence, Microsoft will not be liable for slight negligence.
+    12. DISCLAIMER OF WARRANTY. THE SOFTWARE IS LICENSED “AS IS.” YOU BEAR THE RISK OF USING IT. MICROSOFT GIVES NO EXPRESS WARRANTIES, GUARANTEES, OR CONDITIONS. TO THE EXTENT PERMITTED UNDER APPLICABLE LAWS, MICROSOFT EXCLUDES ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
+    13. LIMITATION ON AND EXCLUSION OF DAMAGES. IF YOU HAVE ANY BASIS FOR RECOVERING DAMAGES DESPITE THE PRECEDING DISCLAIMER OF WARRANTY, YOU CAN RECOVER FROM MICROSOFT AND ITS SUPPLIERS ONLY DIRECT DAMAGES UP TO U.S. $5.00. YOU CANNOT RECOVER ANY OTHER DAMAGES, INCLUDING CONSEQUENTIAL, LOST PROFITS, SPECIAL, INDIRECT, OR INCIDENTAL DAMAGES.
+
+This limitation applies to (a) anything related to the software, services, content (including code) on third party Internet sites, or third party applications; and (b) claims for breach of contract, warranty, guarantee, or condition; strict liability, negligence, or other tort; or any other claim; in each case to the extent permitted by applicable law.
+
+It also applies even if Microsoft knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your state, province, or country may not allow the exclusion or limitation of incidental, consequential, or other damages.
diff --git a/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt
new file mode 100644
index 0000000..11e406a
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt
@@ -0,0 +1,92 @@
+MICROSOFT SOFTWARE LICENSE TERMS
+MICROSOFT WINDOWS APP SDK
+________________________________________
+IF YOU LIVE IN (OR ARE A BUSINESS WITH A PRINCIPAL PLACE OF BUSINESS IN) THE UNITED STATES, PLEASE READ THE “BINDING ARBITRATION AND CLASS ACTION WAIVER” SECTION BELOW. IT AFFECTS HOW DISPUTES ARE RESOLVED.
+________________________________________
+
+These license terms are an agreement between you and Microsoft Corporation (or one of its affiliates). They apply to the software named above and any Microsoft services or software updates (except to the extent such services or updates are accompanied by new or additional terms, in which case those different terms apply prospectively and do not alter your or Microsoft’s rights relating to pre-updated software or services). IF YOU COMPLY WITH THESE LICENSE TERMS, YOU HAVE THE RIGHTS BELOW.  BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS.
+
+1. INSTALLATION AND USE RIGHTS.
+
+    a) General. Subject to the terms of this agreement, you may install and use any number of copies of the software to develop and test your applications, solely for use on Windows. When building Generative AI applications follow the guidelines in https://learn.microsoft.com/windows/ai/rai. 
+
+    b) Included Microsoft Applications. The software may include other Microsoft applications. These license terms apply to those included applications, if any, unless other license terms are provided with the other Microsoft applications.
+
+    c) Microsoft Platforms. The software may include components from Microsoft Windows. These components are governed by separate agreements and their own product support policies, as described in the license terms found in the installation directory for that component or in the “Licenses” folder accompanying the software.
+
+2. DATA.
+
+    a) Data Collection. The software may collect information about you and your use of the software, and send that to Microsoft. Microsoft may use this information to provide services and improve our products and services. You may opt-out of many of these scenarios, but not all, as described in the product documentation.  There are also some features in the software that may enable you to collect data from users of your applications. If you use these features to enable data collection in your applications, you must comply with applicable law, including providing appropriate notices to users of your applications. You can learn more about data collection and use in the help documentation and the privacy statement at https://aka.ms/privacy. Your use of the software operates as your consent to these practices.
+
+    b) Processing of Personal Data. To the extent Microsoft is a processor or subprocessor of personal data in connection with the software, Microsoft makes the commitments in the European Union General Data Protection Regulation Terms of the Online Services Terms to all customers effective May 25, 2018, at https://docs.microsoft.com/en-us/legal/gdpr.
+
+3. DISTRIBUTABLE CODE. The software may contain code you are permitted to distribute (i.e. make available for third parties) in applications you develop, as described in this Section.
+
+    a) Distribution Rights. The code and test files described below are distributable if included with the software.
+
+        i. Any files that are binplaced with your application by the WindowsAppSDK NuGet package are, by definition, permitted to be redistributed.  This applies to both framework package dependent and self-contained deployments.
+
+        ii. Image Library. You may copy and distribute images, graphics, and animations in the Image Library as described in the software documentation; and
+
+        iii. Third Party Distribution. You may permit distributors of your applications to copy and distribute any of this distributable code you elect to distribute with your applications.
+
+    b) Distribution Requirements. For any code you distribute, you must:
+
+        i. add significant primary functionality to it in your applications;
+
+        ii. require distributors and external end users to agree to terms that protect it and Microsoft at least as much as this agreement; and
+
+        iii. indemnify, defend, and hold harmless Microsoft from any claims, including attorneys’ fees, related to the distribution or use of your applications, except to the extent that any claim is based solely on the unmodified distributable code.
+
+    c) Distribution Restrictions. You may not:
+
+        i. use Microsoft’s trademarks or trade dress in your application in any way that suggests your application comes from or is endorsed by Microsoft; or
+
+        ii. modify or distribute the source code of any distributable code so that any part of it becomes subject to any license that requires that the distributable code, any other part of the software, or any of Microsoft’s other intellectual property be disclosed or distributed in source code form, or that others have the right to modify it.
+
+4. SCOPE OF LICENSE. The software is licensed, not sold. Microsoft reserves all other rights. Unless applicable law gives you more rights despite this limitation, you will not (and have no right to):
+
+    a) work around any technical limitations in the software that only allow you to use it in certain ways;
+
+    b) reverse engineer, decompile or disassemble the software, or otherwise attempt to derive the source code for the software, except and to the extent required by third party licensing terms governing use of certain open source components that may be included in the software;
+
+    c) remove, minimize, block, or modify any notices of Microsoft or its suppliers in the software;
+
+    d) use the software in any way that is against the law or to create or propagate malware; or
+
+    e) share, publish, distribute, or lease the software (except for any distributable code, subject to the terms above), provide the software as a stand-alone offering for others to use, or transfer the software or this agreement to any third party.
+
+5. EXPORT RESTRICTIONS. You must comply with all domestic and international export laws and regulations that apply to the software, which include restrictions on destinations, end users, and end use. For further information on export restrictions, visit https://aka.ms/exporting.
+
+6. SUPPORT SERVICES. Microsoft is not obligated under this agreement to provide any support services for the software. Any support provided is “as is”, “with all faults”, and without warranty of any kind.
+
+7. UPDATES. The software may periodically check for updates, and download and install them for you. You may obtain updates only from Microsoft or authorized sources. Microsoft may need to update your system to provide you with updates. You agree to receive these automatic updates without any additional notice. Updates may not include or support all existing software features, services, or peripheral devices.
+
+8. BINDING ARBITRATION AND CLASS ACTION WAIVER. This Section applies if you live in (or, if a business, your principal place of business is in) the United States.  If you and Microsoft have a dispute, you and Microsoft agree to try for 60 days to resolve it informally. If you and Microsoft can’t, you and Microsoft agree to binding individual arbitration before the American Arbitration Association under the Federal Arbitration Act (“FAA”), and not to sue in court in front of a judge or jury. Instead, a neutral arbitrator will decide. Class action lawsuits, class-wide arbitrations, private attorney-general actions, and any other proceeding where someone acts in a representative capacity are not allowed; nor is combining individual proceedings without the consent of all parties. The complete Arbitration Agreement contains more terms and is at https://aka.ms/arb-agreement-4. You and Microsoft agree to these terms.
+
+9. ENTIRE AGREEMENT. This agreement, and any other terms Microsoft may provide for supplements, updates, or third-party applications, is the entire agreement for the software.
+
+10. APPLICABLE LAW AND PLACE TO RESOLVE DISPUTES. If you acquired the software in the United States or Canada, the laws of the state or province where you live (or, if a business, where your principal place of business is located) govern the interpretation of this agreement, claims for its breach, and all other claims (including consumer protection, unfair competition, and tort claims), regardless of conflict of laws principles, except that the FAA governs everything related to arbitration. If you acquired the software in any other country, its laws apply, except that the FAA governs everything related to arbitration. If U.S. federal jurisdiction exists, you and Microsoft consent to exclusive jurisdiction and venue in the federal court in King County, Washington for all disputes heard in court (excluding arbitration). If not, you and Microsoft consent to exclusive jurisdiction and venue in the Superior Court of King County, Washington for all disputes heard in court (excluding arbitration).
+
+11. CONSUMER RIGHTS; REGIONAL VARIATIONS. This agreement describes certain legal rights. You may have other rights, including consumer rights, under the laws of your state or country. Separate and apart from your relationship with Microsoft, you may also have rights with respect to the party from which you acquired the software. This agreement does not change those other rights if the laws of your state or country do not permit it to do so. For example, if you acquired the software in one of the below regions, or mandatory country law applies, then the following provisions apply to you:
+
+    a) Australia. You have statutory guarantees under the Australian Consumer Law and nothing in this agreement is intended to affect those rights.
+
+    b) Canada. If you acquired this software in Canada, you may stop receiving updates by turning off the automatic update feature, disconnecting your device from the Internet (if and when you re-connect to the Internet, however, the software will resume checking for and installing updates), or uninstalling the software. The product documentation, if any, may also specify how to turn off updates for your specific device or software.
+
+    c) Germany and Austria.
+
+        i. Warranty. The properly licensed software will perform substantially as described in any Microsoft materials that accompany the software. However, Microsoft gives no contractual guarantee in relation to the licensed software.
+
+        ii. Limitation of Liability. In case of intentional conduct, gross negligence, claims based on the Product Liability Act, as well as, in case of death or personal or physical injury, Microsoft is liable according to the statutory law.
+
+        Subject to the foregoing clause ii., Microsoft will only be liable for slight negligence if Microsoft is in breach of such material contractual obligations, the fulfillment of which facilitate the due performance of this agreement, the breach of which would endanger the purpose of this agreement and the compliance with which a party may constantly trust in (so-called "cardinal obligations"). In other cases of slight negligence, Microsoft will not be liable for slight negligence.
+
+12. DISCLAIMER OF WARRANTY. THE SOFTWARE IS LICENSED “AS IS.” YOU BEAR THE RISK OF USING IT. MICROSOFT GIVES NO EXPRESS WARRANTIES, GUARANTEES, OR CONDITIONS. TO THE EXTENT PERMITTED UNDER APPLICABLE LAWS, MICROSOFT EXCLUDES ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
+
+13. LIMITATION ON AND EXCLUSION OF DAMAGES. IF YOU HAVE ANY BASIS FOR RECOVERING DAMAGES DESPITE THE PRECEDING DISCLAIMER OF WARRANTY, YOU CAN RECOVER FROM MICROSOFT AND ITS SUPPLIERS ONLY DIRECT DAMAGES UP TO U.S. $5.00. YOU CANNOT RECOVER ANY OTHER DAMAGES, INCLUDING CONSEQUENTIAL, LOST PROFITS, SPECIAL, INDIRECT, OR INCIDENTAL DAMAGES.
+
+This limitation applies to (a) anything related to the software, services, content (including code) on third party Internet sites, or third party applications; and (b) claims for breach of contract, warranty, guarantee, or condition; strict liability, negligence, or other tort; or any other claim; in each case to the extent permitted by applicable law.
+
+It also applies even if Microsoft knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your state, province, or country may not allow the exclusion or limitation of incidental, consequential, or other damages.
+
diff --git a/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt
new file mode 100644
index 0000000..651b8ba
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt
@@ -0,0 +1,6236 @@
+NOTICES AND INFORMATION
+Do Not Translate or Localize
+
+This software incorporates material from third parties.
+Microsoft makes certain open source code available at https://3rdpartysource.microsoft.com,
+or you may send a check or money order for US $5.00, including the product name,
+the open source component name, platform, and version number, to:
+
+Source Code Compliance Team
+Microsoft Corporation
+One Microsoft Way
+Redmond, WA 98052
+USA
+
+Notwithstanding any other terms, you may reverse engineer this software to the extent
+required to debug changes to any libraries licensed under the GNU Lesser General Public License.
+
+---------------------------------------------------------
+
+Newtonsoft.Json 13.0.1 - MIT
+
+
+Copyright James Newton-King 2008
+Copyright (c) 2007 James Newton-King
+Copyright (c) James Newton-King 2008
+Copyright James Newton-King 2008 Json.NET
+
+The MIT License (MIT)
+
+Copyright (c) 2007 James Newton-King
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+---------------------------------------------------------
+
+Intel Math Kernel Library (Intel MKL)
+
+Intel Simplified Software License (Version April 2018)
+
+Copyright (c) 2018 Intel Corporation.
+
+Use and Redistribution.  You may use and redistribute the software (the “Software”), without modification,
+provided the following conditions are met:
+
+* Redistributions must reproduce the above copyright notice and the following terms of use in the Software
+and in the documentation and/or other materials provided with the distribution.
+
+* Neither the name of Intel nor the names of its suppliers may be used to endorse or promote products
+derived from this Software without specific prior written permission.
+
+* No reverse engineering, decompilation, or disassembly of this Software is permitted.
+
+Limited patent license.  Intel grants you a world-wide, royalty-free, non-exclusive license under patents it now
+or hereafter owns or controls to make, have made, use, import, offer to sell and sell (“Utilize”) this Software,
+but solely to the extent that any such patent is necessary to Utilize the Software alone. The patent license
+shall not apply to any combinations which include this software.  No hardware per se is licensed hereunder.
+
+Third party and other Intel programs.  “Third Party Programs” are the files listed in the “third-party-programs.txt”
+text file that is included with the Software and may include Intel programs under separate license terms.
+Third Party Programs, even if included with the distribution of the Materials, are governed by
+separate license terms and those license terms solely govern your use of those programs.
+
+DISCLAIMER.  THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
+INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT ARE DISCLAIMED. THIS SOFTWARE IS
+NOT INTENDED FOR USE IN SYSTEMS OR APPLICATIONS WHERE FAILURE OF THE SOFTWARE
+MAY CAUSE PERSONAL INJURY OR DEATH AND YOU AGREE THAT YOU ARE FULLY RESPONSIBLE FOR ANY
+CLAIMS, COSTS, DAMAGES, EXPENSES, AND ATTORNEYS’ FEES ARISING OUT OF ANY SUCH USE,
+EVEN IF ANY CLAIM ALLEGES THAT INTEL WAS NEGLIGENT REGARDING THE DESIGN OR MANUFACTURE OF
+THE MATERIALS.
+
+LIMITATION OF LIABILITY. IN NO EVENT WILL INTEL BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
+OF SUCH DAMAGE. YOU AGREE TO INDEMNIFY AND HOLD INTEL HARMLESS AGAINST ANY CLAIMS
+AND EXPENSES RESULTING FROM YOUR USE OR UNAUTHORIZED USE OF THE SOFTWARE.
+
+No support.  Intel may make changes to the Software, at any time without notice, and is not obligated to
+support, update or provide training for the Software.
+
+Termination. Intel may terminate your right to use the Software in the event of your breach of this Agreement
+and you fail to cure the breach within a reasonable period of time.
+
+Feedback.  Should you provide Intel with comments, modifications, corrections, enhancements or other input
+(“Feedback”) related to the Software Intel will be free to use, disclose, reproduce, license or otherwise
+distribute or exploit the Feedback in its sole discretion without any obligations or restrictions of any kind,
+including without limitation, intellectual property rights or licensing obligations.
+
+Compliance with laws.  You agree to comply with all relevant laws and regulations governing your use,
+transfer, import or export (or prohibition thereof) of the Software.
+
+Governing law.  All disputes will be governed by the laws of the United States of America and the State of
+Delaware without reference to conflict of law principles and subject to the exclusive jurisdiction of the state or
+federal courts sitting in the State of Delaware, and each party agrees that it submits to the personal
+jurisdiction and venue of those courts and waives any objections. The United Nations Convention on
+Contracts for the International Sale of Goods (1980) is specifically excluded and will not apply to the
+Software.
+
+*Other names and brands may be claimed as the property of others.
+
+---------------------------------------------------------
+
+protocolbuffers/protobuf
+
+Copyright 2008 Google Inc.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+
+    * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Code generated by the Protocol Buffer compiler is owned by the owner
+of the input file used when generating it.  This code is not
+standalone and requires a support library to be linked with it.  This
+support library is itself covered by the above license.
+
+---------------------------------------------------------
+
+madler/zlib
+
+The deflate format used by zlib was defined by Phil Katz.  The deflate and
+zlib specifications were written by L.  Peter Deutsch.  Thanks to all the
+people who reported problems and suggested various improvements in zlib; they
+are too numerous to cite here.
+
+Copyright notice:
+
+ (C) 1995-2017 Jean-loup Gailly and Mark Adler
+
+  This software is provided 'as-is', without any express or implied
+  warranty.  In no event will the authors be held liable for any damages
+  arising from the use of this software.
+
+  Permission is granted to anyone to use this software for any purpose,
+  including commercial applications, and to alter it and redistribute it
+  freely, subject to the following restrictions:
+
+  1. The origin of this software must not be misrepresented; you must not
+     claim that you wrote the original software. If you use this software
+     in a product, an acknowledgment in the product documentation would be
+     appreciated but is not required.
+
+  2. Altered source versions must be plainly marked as such, and must not be
+     misrepresented as being the original software.
+
+  3. This notice may not be removed or altered from any source distribution.
+
+  Jean-loup Gailly        Mark Adler
+  jloup@gzip.org          madler@alumni.caltech.edu
+
+If you use the zlib library in a product, we would appreciate *not* receiving
+lengthy legal documents to sign.  The sources are provided for free but without
+warranty of any kind.  The library has been entirely written by Jean-loup
+Gailly and Mark Adler; it does not include third-party code.
+
+If you redistribute modified sources, we would appreciate that you include in
+the file ChangeLog history information documenting your changes.  Please read
+the FAQ for more information on the distribution of modified source versions.
+
+---------------------------------------------------------
+
+pybind/pybind11
+
+Copyright (c) 2016 Wenzel Jakob <wenzel.jakob@epfl.ch>, All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+   may be used to endorse or promote products derived from this software
+   without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Please also refer to the file CONTRIBUTING.md, which clarifies licensing of
+external contributions to this project including patches, pull requests, etc.
+
+---------------------------------------------------------
+
+onnx
+Open Neural Network Exchange
+
+Copyright (c) Facebook, Inc. and Microsoft Corporation. All rights reserved.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+---------------------------------------------------------
+
+Eigen
+
+MPL v2.0
+Mozilla Public License Version 2.0
+
+
+==================================
+
+1. Definitions
+
+--------------
+
+1.1. "Contributor"
+    means each individual or legal entity that creates, contributes to
+    the creation of, or owns Covered Software.
+
+1.2. "Contributor Version"
+    means the combination of the Contributions of others (if any) used
+    by a Contributor and that particular Contributor's Contribution.
+
+1.3. "Contribution"
+    means Covered Software of a particular Contributor.
+
+1.4. "Covered Software"
+    means Source Code Form to which the initial Contributor has attached
+    the notice in Exhibit A, the Executable Form of such Source Code
+    Form, and Modifications of such Source Code Form, in each case
+    including portions thereof.
+
+1.5. "Incompatible With Secondary Licenses"
+    means
+
+    (a) that the initial Contributor has attached the notice described
+        in Exhibit B to the Covered Software; or
+
+    (b) that the Covered Software was made available under the terms of
+        version 1.1 or earlier of the License, but not also under the
+        terms of a Secondary License.
+
+1.6. "Executable Form"
+    means any form of the work other than Source Code Form.
+
+1.7. "Larger Work"
+    means a work that combines Covered Software with other material, in
+    a separate file or files, that is not Covered Software.
+
+1.8. "License"
+    means this document.
+
+1.9. "Licensable"
+    means having the right to grant, to the maximum extent possible,
+    whether at the time of the initial grant or subsequently, any and
+    all of the rights conveyed by this License.
+
+1.10. "Modifications"
+    means any of the following:
+
+    (a) any file in Source Code Form that results from an addition to,
+        deletion from, or modification of the contents of Covered
+        Software; or
+
+    (b) any new file in Source Code Form that contains any Covered
+        Software.
+
+1.11. "Patent Claims" of a Contributor
+    means any patent claim(s), including without limitation, method,
+    process, and apparatus claims, in any patent Licensable by such
+    Contributor that would be infringed, but for the grant of the
+    License, by the making, using, selling, offering for sale, having
+    made, import, or transfer of either its Contributions or its
+    Contributor Version.
+
+1.12. "Secondary License"
+    means either the GNU General Public License, Version 2.0, the GNU
+    Lesser General Public License, Version 2.1, the GNU Affero General
+    Public License, Version 3.0, or any later versions of those
+    licenses.
+
+1.13. "Source Code Form"
+    means the form of the work preferred for making modifications.
+
+1.14. "You" (or "Your")
+    means an individual or a legal entity exercising rights under this
+    License. For legal entities, "You" includes any entity that
+    controls, is controlled by, or is under common control with You. For
+    purposes of this definition, "control" means (a) the power, direct
+    or indirect, to cause the direction or management of such entity,
+    whether by contract or otherwise, or (b) ownership of more than
+    fifty percent (50%) of the outstanding shares or beneficial
+    ownership of such entity.
+
+2. License Grants and Conditions
+
+--------------------------------
+
+2.1. Grants
+
+Each Contributor hereby grants You a world-wide, royalty-free,
+non-exclusive license:
+
+(a) under intellectual property rights (other than patent or trademark)
+    Licensable by such Contributor to use, reproduce, make available,
+    modify, display, perform, distribute, and otherwise exploit its
+    Contributions, either on an unmodified basis, with Modifications, or
+    as part of a Larger Work; and
+
+(b) under Patent Claims of such Contributor to make, use, sell, offer
+    for sale, have made, import, and otherwise transfer either its
+    Contributions or its Contributor Version.
+
+2.2. Effective Date
+
+The licenses granted in Section 2.1 with respect to any Contribution
+become effective for each Contribution on the date the Contributor first
+distributes such Contribution.
+
+2.3. Limitations on Grant Scope
+
+The licenses granted in this Section 2 are the only rights granted under
+this License. No additional rights or licenses will be implied from the
+distribution or licensing of Covered Software under this License.
+Notwithstanding Section 2.1(b) above, no patent license is granted by a
+Contributor:
+
+(a) for any code that a Contributor has removed from Covered Software;
+    or
+
+(b) for infringements caused by: (i) Your and any other third party's
+    modifications of Covered Software, or (ii) the combination of its
+    Contributions with other software (except as part of its Contributor
+    Version); or
+
+(c) under Patent Claims infringed by Covered Software in the absence of
+    its Contributions.
+
+This License does not grant any rights in the trademarks, service marks,
+or logos of any Contributor (except as may be necessary to comply with
+the notice requirements in Section 3.4).
+
+2.4. Subsequent Licenses
+
+No Contributor makes additional grants as a result of Your choice to
+distribute the Covered Software under a subsequent version of this
+License (see Section 10.2) or under the terms of a Secondary License (if
+permitted under the terms of Section 3.3).
+
+2.5. Representation
+
+Each Contributor represents that the Contributor believes its
+Contributions are its original creation(s) or it has sufficient rights
+to grant the rights to its Contributions conveyed by this License.
+
+2.6. Fair Use
+
+This License is not intended to limit any rights You have under
+applicable copyright doctrines of fair use, fair dealing, or other
+equivalents.
+
+2.7. Conditions
+
+Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
+in Section 2.1.
+
+3. Responsibilities
+
+-------------------
+
+3.1. Distribution of Source Form
+
+All distribution of Covered Software in Source Code Form, including any
+Modifications that You create or to which You contribute, must be under
+the terms of this License. You must inform recipients that the Source
+Code Form of the Covered Software is governed by the terms of this
+License, and how they can obtain a copy of this License. You may not
+attempt to alter or restrict the recipients' rights in the Source Code
+Form.
+
+3.2. Distribution of Executable Form
+
+If You distribute Covered Software in Executable Form then:
+
+(a) such Covered Software must also be made available in Source Code
+    Form, as described in Section 3.1, and You must inform recipients of
+    the Executable Form how they can obtain a copy of such Source Code
+    Form by reasonable means in a timely manner, at a charge no more
+    than the cost of distribution to the recipient; and
+
+(b) You may distribute such Executable Form under the terms of this
+    License, or sublicense it under different terms, provided that the
+    license for the Executable Form does not attempt to limit or alter
+    the recipients' rights in the Source Code Form under this License.
+
+3.3. Distribution of a Larger Work
+
+You may create and distribute a Larger Work under terms of Your choice,
+provided that You also comply with the requirements of this License for
+the Covered Software. If the Larger Work is a combination of Covered
+Software with a work governed by one or more Secondary Licenses, and the
+Covered Software is not Incompatible With Secondary Licenses, this
+License permits You to additionally distribute such Covered Software
+under the terms of such Secondary License(s), so that the recipient of
+the Larger Work may, at their option, further distribute the Covered
+Software under the terms of either this License or such Secondary
+License(s).
+
+3.4. Notices
+
+You may not remove or alter the substance of any license notices
+(including copyright notices, patent notices, disclaimers of warranty,
+or limitations of liability) contained within the Source Code Form of
+the Covered Software, except that You may alter any license notices to
+the extent required to remedy known factual inaccuracies.
+
+3.5. Application of Additional Terms
+
+You may choose to offer, and to charge a fee for, warranty, support,
+indemnity or liability obligations to one or more recipients of Covered
+Software. However, You may do so only on Your own behalf, and not on
+behalf of any Contributor. You must make it absolutely clear that any
+such warranty, support, indemnity, or liability obligation is offered by
+You alone, and You hereby agree to indemnify every Contributor for any
+liability incurred by such Contributor as a result of warranty, support,
+indemnity or liability terms You offer. You may include additional
+disclaimers of warranty and limitations of liability specific to any
+jurisdiction.
+
+4. Inability to Comply Due to Statute or Regulation
+
+---------------------------------------------------
+
+If it is impossible for You to comply with any of the terms of this
+License with respect to some or all of the Covered Software due to
+statute, judicial order, or regulation then You must: (a) comply with
+the terms of this License to the maximum extent possible; and (b)
+describe the limitations and the code they affect. Such description must
+be placed in a text file included with all distributions of the Covered
+Software under this License. Except to the extent prohibited by statute
+or regulation, such description must be sufficiently detailed for a
+recipient of ordinary skill to be able to understand it.
+
+5. Termination
+
+--------------
+
+5.1. The rights granted under this License will terminate automatically
+if You fail to comply with any of its terms. However, if You become
+compliant, then the rights granted under this License from a particular
+Contributor are reinstated (a) provisionally, unless and until such
+Contributor explicitly and finally terminates Your grants, and (b) on an
+ongoing basis, if such Contributor fails to notify You of the
+non-compliance by some reasonable means prior to 60 days after You have
+come back into compliance. Moreover, Your grants from a particular
+Contributor are reinstated on an ongoing basis if such Contributor
+notifies You of the non-compliance by some reasonable means, this is the
+first time You have received notice of non-compliance with this License
+from such Contributor, and You become compliant prior to 30 days after
+Your receipt of the notice.
+
+5.2. If You initiate litigation against any entity by asserting a patent
+infringement claim (excluding declaratory judgment actions,
+counter-claims, and cross-claims) alleging that a Contributor Version
+directly or indirectly infringes any patent, then the rights granted to
+You by any and all Contributors for the Covered Software under Section
+2.1 of this License shall terminate.
+
+5.3. In the event of termination under Sections 5.1 or 5.2 above, all
+end user license agreements (excluding distributors and resellers) which
+have been validly granted by You or Your distributors under this License
+prior to termination shall survive termination.
+
+************************************************************************
+*                                                                      *
+*  6. Disclaimer of Warranty                                           *
+*  -------------------------                                           *
+*                                                                      *
+*  Covered Software is provided under this License on an "as is"       *
+*  basis, without warranty of any kind, either expressed, implied, or  *
+*  statutory, including, without limitation, warranties that the       *
+*  Covered Software is free of defects, merchantable, fit for a        *
+*  particular purpose or non-infringing. The entire risk as to the     *
+*  quality and performance of the Covered Software is with You.        *
+*  Should any Covered Software prove defective in any respect, You     *
+*  (not any Contributor) assume the cost of any necessary servicing,   *
+*  repair, or correction. This disclaimer of warranty constitutes an   *
+*  essential part of this License. No use of any Covered Software is   *
+*  authorized under this License except under this disclaimer.         *
+*                                                                      *
+************************************************************************
+
+************************************************************************
+*                                                                      *
+*  7. Limitation of Liability                                          *
+*  --------------------------                                          *
+*                                                                      *
+*  Under no circumstances and under no legal theory, whether tort      *
+*  (including negligence), contract, or otherwise, shall any           *
+*  Contributor, or anyone who distributes Covered Software as          *
+*  permitted above, be liable to You for any direct, indirect,         *
+*  special, incidental, or consequential damages of any character      *
+*  including, without limitation, damages for lost profits, loss of    *
+*  goodwill, work stoppage, computer failure or malfunction, or any    *
+*  and all other commercial damages or losses, even if such party      *
+*  shall have been informed of the possibility of such damages. This   *
+*  limitation of liability shall not apply to liability for death or   *
+*  personal injury resulting from such party's negligence to the       *
+*  extent applicable law prohibits such limitation. Some               *
+*  jurisdictions do not allow the exclusion or limitation of           *
+*  incidental or consequential damages, so this exclusion and          *
+*  limitation may not apply to You.                                    *
+*                                                                      *
+************************************************************************
+8. Litigation
+-------------
+
+Any litigation relating to this License may be brought only in the
+courts of a jurisdiction where the defendant maintains its principal
+place of business and such litigation shall be governed by laws of that
+jurisdiction, without reference to its conflict-of-law provisions.
+Nothing in this Section shall prevent a party's ability to bring
+cross-claims or counter-claims.
+
+9. Miscellaneous
+----------------
+
+This License represents the complete agreement concerning the subject
+matter hereof. If any provision of this License is held to be
+unenforceable, such provision shall be reformed only to the extent
+necessary to make it enforceable. Any law or regulation which provides
+that the language of a contract shall be construed against the drafter
+shall not be used to construe this License against a Contributor.
+
+10. Versions of the License
+---------------------------
+
+10.1. New Versions
+
+Mozilla Foundation is the license steward. Except as provided in Section
+10.3, no one other than the license steward has the right to modify or
+publish new versions of this License. Each version will be given a
+distinguishing version number.
+
+10.2. Effect of New Versions
+
+You may distribute the Covered Software under the terms of the version
+of the License under which You originally received the Covered Software,
+or under the terms of any subsequent version published by the license
+steward.
+
+10.3. Modified Versions
+
+If you create software not governed by this License, and you want to
+create a new license for such software, you may create and use a
+modified version of this License if you rename the license and remove
+any references to the name of the license steward (except to note that
+such modified license differs from this License).
+
+10.4. Distributing Source Code Form that is Incompatible With Secondary
+Licenses
+
+If You choose to distribute Source Code Form that is Incompatible With
+Secondary Licenses under the terms of this version of the License, the
+notice described in Exhibit B of this License must be attached.
+
+Exhibit A - Source Code Form License Notice
+-------------------------------------------
+
+  This Source Code Form is subject to the terms of the Mozilla Public
+  License, v. 2.0. If a copy of the MPL was not distributed with this
+  file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+If it is not possible or desirable to put the notice in a particular
+file, then You may include the notice in a location (such as a LICENSE
+file in a relevant directory) where a recipient would be likely to look
+for such a notice.
+
+You may add additional accurate notices of copyright ownership.
+
+Exhibit B - "Incompatible With Secondary Licenses" Notice
+---------------------------------------------------------
+
+  This Source Code Form is "Incompatible With Secondary Licenses", as
+  defined by the Mozilla Public License, v. 2.0.
+
+---------------------------------------------------------
+
+intel/dnnl
+
+Copyright 2016-2018 Intel Corporation
+
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+sub-components:
+
+xbyak
+
+Copyright (c) 2007 MITSUNARI Shigeo. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+Neither the name of the copyright owner nor the names of its contributors may
+be used to endorse or promote products derived from this software without
+specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
+THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+Microsoft GSL
+
+Copyright (c) 2015 Microsoft Corporation. All rights reserved.
+
+This code is licensed under the MIT License (MIT).
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+---------------------------------------------------------
+
+Tensorflow
+
+Copyright 2018 The TensorFlow Authors. All rights reserved.
+
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction,
+and distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by
+the copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all
+other entities that control, are controlled by, or are under common
+control with that entity. For the purposes of this definition,
+"control" means (i) the power, direct or indirect, to cause the
+direction or management of such entity, whether by contract or
+otherwise, or (ii) ownership of fifty percent (50%) or more of the
+outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity
+exercising permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications,
+including but not limited to software source code, documentation
+source, and configuration files.
+
+"Object" form shall mean any form resulting from mechanical
+transformation or translation of a Source form, including but
+not limited to compiled object code, generated documentation,
+and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or
+Object form, made available under the License, as indicated by a
+copyright notice that is included in or attached to the work
+(an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object
+form, that is based on (or derived from) the Work and for which the
+editorial revisions, annotations, elaborations, or other modifications
+represent, as a whole, an original work of authorship. For the purposes
+of this License, Derivative Works shall not include works that remain
+separable from, or merely link (or bind by name) to the interfaces of,
+the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including
+the original version of the Work and any modifications or additions
+to that Work or Derivative Works thereof, that is intentionally
+submitted to Licensor for inclusion in the Work by the copyright owner
+or by an individual or Legal Entity authorized to submit on behalf of
+the copyright owner. For the purposes of this definition, "submitted"
+means any form of electronic, verbal, or written communication sent
+to the Licensor or its representatives, including but not limited to
+communication on electronic mailing lists, source code control systems,
+and issue tracking systems that are managed by, or on behalf of, the
+Licensor for the purpose of discussing and improving the Work, but
+excluding communication that is conspicuously marked or otherwise
+designated in writing by the copyright owner as "Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity
+on behalf of whom a Contribution has been received by Licensor and
+subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+this License, each Contributor hereby grants to You a perpetual,
+worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+copyright license to reproduce, prepare Derivative Works of,
+publicly display, publicly perform, sublicense, and distribute the
+Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+this License, each Contributor hereby grants to You a perpetual,
+worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+(except as stated in this section) patent license to make, have made,
+use, offer to sell, sell, import, and otherwise transfer the Work,
+where such license applies only to those patent claims licensable
+by such Contributor that are necessarily infringed by their
+Contribution(s) alone or by combination of their Contribution(s)
+with the Work to which such Contribution(s) was submitted. If You
+institute patent litigation against any entity (including a
+cross-claim or counterclaim in a lawsuit) alleging that the Work
+or a Contribution incorporated within the Work constitutes direct
+or contributory patent infringement, then any patent licenses
+granted to You under this License for that Work shall terminate
+as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+Work or Derivative Works thereof in any medium, with or without
+modifications, and in Source or Object form, provided that You
+meet the following conditions:
+
+(a) You must give any other recipients of the Work or
+Derivative Works a copy of this License; and
+
+(b) You must cause any modified files to carry prominent notices
+stating that You changed the files; and
+
+(c) You must retain, in the Source form of any Derivative Works
+that You distribute, all copyright, patent, trademark, and
+attribution notices from the Source form of the Work,
+excluding those notices that do not pertain to any part of
+the Derivative Works; and
+
+(d) If the Work includes a "NOTICE" text file as part of its
+distribution, then any Derivative Works that You distribute must
+include a readable copy of the attribution notices contained
+within such NOTICE file, excluding those notices that do not
+pertain to any part of the Derivative Works, in at least one
+of the following places: within a NOTICE text file distributed
+as part of the Derivative Works; within the Source form or
+documentation, if provided along with the Derivative Works; or,
+within a display generated by the Derivative Works, if and
+wherever such third-party notices normally appear. The contents
+of the NOTICE file are for informational purposes only and
+do not modify the License. You may add Your own attribution
+notices within Derivative Works that You distribute, alongside
+or as an addendum to the NOTICE text from the Work, provided
+that such additional attribution notices cannot be construed
+as modifying the License.
+
+You may add Your own copyright statement to Your modifications and
+may provide additional or different license terms and conditions
+for use, reproduction, or distribution of Your modifications, or
+for any such Derivative Works as a whole, provided Your use,
+reproduction, and distribution of the Work otherwise complies with
+the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+any Contribution intentionally submitted for inclusion in the Work
+by You to the Licensor shall be under the terms and conditions of
+this License, without any additional terms or conditions.
+Notwithstanding the above, nothing herein shall supersede or modify
+the terms of any separate license agreement you may have executed
+with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+names, trademarks, service marks, or product names of the Licensor,
+except as required for reasonable and customary use in describing the
+origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+agreed to in writing, Licensor provides the Work (and each
+Contributor provides its Contributions) on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+implied, including, without limitation, any warranties or conditions
+of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+PARTICULAR PURPOSE. You are solely responsible for determining the
+appropriateness of using or redistributing the Work and assume any
+risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+whether in tort (including negligence), contract, or otherwise,
+unless required by applicable law (such as deliberate and grossly
+negligent acts) or agreed to in writing, shall any Contributor be
+liable to You for damages, including any direct, indirect, special,
+incidental, or consequential damages of any character arising as a
+result of this License or out of the use or inability to use the
+Work (including but not limited to damages for loss of goodwill,
+work stoppage, computer failure or malfunction, or any and all
+other commercial damages or losses), even if such Contributor
+has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+the Work or Derivative Works thereof, You may choose to offer,
+and charge a fee for, acceptance of support, warranty, indemnity,
+or other liability obligations and/or rights consistent with this
+License. However, in accepting such obligations, You may act only
+on Your own behalf and on Your sole responsibility, not on behalf
+of any other Contributor, and only if You agree to indemnify,
+defend, and hold each Contributor harmless for any liability
+incurred by, or claims asserted against, such Contributor by reason
+of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017, The TensorFlow Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+---------------------------------------------------------
+
+Microsoft Cognitive Toolkit (CNTK)
+
+Copyright (c) Microsoft Corporation. All rights reserved.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify,
+merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
+NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+---------------------------------------------------------
+
+NumPy License
+
+Copyright (c) 2005, NumPy Developers
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+    Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+    Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+    Neither the name of the NumPy Developers nor the names of any contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+Pytorch / Caffe2
+
+From PyTorch:
+
+Copyright (c) 2016-     Facebook, Inc            (Adam Paszke)
+Copyright (c) 2014-     Facebook, Inc            (Soumith Chintala)
+Copyright (c) 2011-2014 Idiap Research Institute (Ronan Collobert)
+Copyright (c) 2012-2014 Deepmind Technologies    (Koray Kavukcuoglu)
+Copyright (c) 2011-2012 NEC Laboratories America (Koray Kavukcuoglu)
+Copyright (c) 2011-2013 NYU                      (Clement Farabet)
+Copyright (c) 2006-2010 NEC Laboratories America (Ronan Collobert, Leon Bottou, Iain Melvin, Jason Weston)
+Copyright (c) 2006      Idiap Research Institute (Samy Bengio)
+Copyright (c) 2001-2004 Idiap Research Institute (Ronan Collobert, Samy Bengio, Johnny Mariethoz)
+
+From Caffe2:
+
+Copyright (c) 2016-present, Facebook Inc. All rights reserved.
+
+All contributions by Facebook:
+Copyright (c) 2016 Facebook Inc.
+
+All contributions by Google:
+Copyright (c) 2015 Google Inc.
+All rights reserved.
+
+All contributions by Yangqing Jia:
+Copyright (c) 2015 Yangqing Jia
+All rights reserved.
+
+All contributions from Caffe:
+Copyright(c) 2013, 2014, 2015, the respective contributors
+All rights reserved.
+
+All other contributions:
+Copyright(c) 2015, 2016 the respective contributors
+All rights reserved.
+
+Caffe2 uses a copyright model similar to Caffe: each contributor holds
+copyright over their contributions to Caffe2. The project versioning records
+all such contribution and copyright details. If a contributor wants to further
+mark their specific copyright on a particular contribution, they should
+indicate their copyright solely in the commit message of the change when it is
+committed. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+3. Neither the names of Facebook, Deepmind Technologies, NYU, NEC Laboratories America
+   and IDIAP Research Institute nor the names of its contributors may be
+   used to endorse or promote products derived from this software without
+   specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+Caffe
+
+COPYRIGHT
+
+All contributions by the University of California:
+Copyright (c) 2014-2017 The Regents of the University of California (Regents)
+All rights reserved.
+
+All other contributions:
+Copyright (c) 2014-2017, the respective contributors
+All rights reserved.
+
+Caffe uses a shared copyright model: each contributor holds copyright over
+their contributions to Caffe. The project versioning records all such
+contribution and copyright details. If a contributor wants to further mark
+their specific copyright on a particular contribution, they should indicate
+their copyright solely in the commit message of the change when it is
+committed.
+
+LICENSE
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+CONTRIBUTION AGREEMENT
+
+By contributing to the BVLC/caffe repository through pull-request, comment,
+or otherwise, the contributor releases their content to the
+license and copyright terms herein.
+
+---------------------------------------------------------
+
+The LLVM Compiler Infrastructure
+
+==============================================================================
+LLVM Release License
+==============================================================================
+University of Illinois/NCSA
+Open Source License
+
+Copyright (c) 2003-2017 University of Illinois at Urbana-Champaign.
+All rights reserved.
+
+Developed by:
+
+    LLVM Team
+
+    University of Illinois at Urbana-Champaign
+
+    http://llvm.org
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal with
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+    * Redistributions of source code must retain the above copyright notice,
+      this list of conditions and the following disclaimers.
+
+    * Redistributions in binary form must reproduce the above copyright notice,
+      this list of conditions and the following disclaimers in the
+      documentation and/or other materials provided with the distribution.
+
+    * Neither the names of the LLVM Team, University of Illinois at
+      Urbana-Champaign, nor the names of its contributors may be used to
+      endorse or promote products derived from this Software without specific
+      prior written permission.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+CONTRIBUTORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS WITH THE
+SOFTWARE.
+
+==============================================================================
+Copyrights and Licenses for Third Party Software Distributed with LLVM:
+==============================================================================
+The LLVM software contains code written by third parties.  Such software will
+have its own individual LICENSE.TXT file in the directory in which it appears.
+This file will describe the copyrights, license, and restrictions which apply
+to that code.
+
+The disclaimer of warranty in the University of Illinois Open Source License
+applies to all code in the LLVM Distribution, and nothing in any of the
+other licenses gives permission to use the names of the LLVM Team or the
+University of Illinois to endorse or promote products derived from this
+Software.
+
+The following pieces of software have additional or alternate copyrights,
+licenses, and/or restrictions:
+
+Program             Directory
+-------             ---------
+Google Test         llvm/utils/unittest/googletest
+OpenBSD regex       llvm/lib/Support/{reg*, COPYRIGHT.regex}
+pyyaml tests        llvm/test/YAMLParser/{*.data, LICENSE.TXT}
+ARM contributions   llvm/lib/Target/ARM/LICENSE.TXT
+md5 contributions   llvm/lib/Support/MD5.cpp llvm/include/llvm/Support/MD5.h
+
+---------------------------------------------------------
+
+google/benchmark
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+CONTRIBUTORS
+
+# People who have agreed to one of the CLAs and can contribute patches.
+# The AUTHORS file lists the copyright holders; this file
+# lists people.  For example, Google employees are listed here
+# but not in AUTHORS, because Google holds the copyright.
+#
+# Names should be added to this file only after verifying that
+# the individual or the individual's organization has agreed to
+# the appropriate Contributor License Agreement, found here:
+#
+# https://developers.google.com/open-source/cla/individual
+# https://developers.google.com/open-source/cla/corporate
+#
+# The agreement for individuals can be filled out on the web.
+#
+# When adding J Random Contributor's name to this file,
+# either J's name or J's organization's name should be
+# added to the AUTHORS file, depending on whether the
+# individual or corporate CLA was used.
+#
+# Names should be added to this file as:
+#     Name <email address>
+#
+# Please keep the list sorted.
+
+Albert Pretorius <pretoalb@gmail.com>
+Arne Beer <arne@twobeer.de>
+Billy Robert O'Neal III <billy.oneal@gmail.com> <bion@microsoft.com>
+Chris Kennelly <ckennelly@google.com> <ckennelly@ckennelly.com>
+Christopher Seymour <chris.j.seymour@hotmail.com>
+David Coeurjolly <david.coeurjolly@liris.cnrs.fr>
+Deniz Evrenci <denizevrenci@gmail.com>
+Dominic Hamon <dma@stripysock.com> <dominic@google.com>
+Dominik Czarnota <dominik.b.czarnota@gmail.com>
+Eric Fiselier <eric@efcs.ca>
+Eugene Zhuk <eugene.zhuk@gmail.com>
+Evgeny Safronov <division494@gmail.com>
+Federico Ficarelli <federico.ficarelli@gmail.com>
+Felix Homann <linuxaudio@showlabor.de>
+Ismael Jimenez Martinez <ismael.jimenez.martinez@gmail.com>
+Jern-Kuan Leong <jernkuan@gmail.com>
+JianXiong Zhou <zhoujianxiong2@gmail.com>
+Joao Paulo Magalhaes <joaoppmagalhaes@gmail.com>
+John Millikin <jmillikin@stripe.com>
+Jussi Knuuttila <jussi.knuuttila@gmail.com>
+Kai Wolf <kai.wolf@gmail.com>
+Kishan Kumar <kumar.kishan@outlook.com>
+Kaito Udagawa <umireon@gmail.com>
+Lei Xu <eddyxu@gmail.com>
+Matt Clarkson <mattyclarkson@gmail.com>
+Maxim Vafin <maxvafin@gmail.com>
+Nick Hutchinson <nshutchinson@gmail.com>
+Oleksandr Sochka <sasha.sochka@gmail.com>
+Pascal Leroy <phl@google.com>
+Paul Redmond <paul.redmond@gmail.com>
+Pierre Phaneuf <pphaneuf@google.com>
+Radoslav Yovchev <radoslav.tm@gmail.com>
+Raul Marin <rmrodriguez@cartodb.com>
+Ray Glover <ray.glover@uk.ibm.com>
+Robert Guo <robert.guo@mongodb.com>
+Roman Lebedev <lebedev.ri@gmail.com>
+Shuo Chen <chenshuo@chenshuo.com>
+Tobias Ulvgård <tobias.ulvgard@dirac.se>
+Tom Madams <tom.ej.madams@gmail.com> <tmadams@google.com>
+Yixuan Qiu <yixuanq@gmail.com>
+Yusuke Suzuki <utatane.tea@gmail.com>
+Zbigniew Skowron <zbychs@gmail.com>
+
+AUTHORS
+
+# This is the official list of benchmark authors for copyright purposes.
+# This file is distinct from the CONTRIBUTORS files.
+# See the latter for an explanation.
+#
+# Names should be added to this file as:
+#	Name or Organization <email address>
+# The email address is not required for organizations.
+#
+# Please keep the list sorted.
+
+Albert Pretorius <pretoalb@gmail.com>
+Arne Beer <arne@twobeer.de>
+Carto
+Christopher Seymour <chris.j.seymour@hotmail.com>
+David Coeurjolly <david.coeurjolly@liris.cnrs.fr>
+Deniz Evrenci <denizevrenci@gmail.com>
+Dirac Research
+Dominik Czarnota <dominik.b.czarnota@gmail.com>
+Eric Fiselier <eric@efcs.ca>
+Eugene Zhuk <eugene.zhuk@gmail.com>
+Evgeny Safronov <division494@gmail.com>
+Federico Ficarelli <federico.ficarelli@gmail.com>
+Felix Homann <linuxaudio@showlabor.de>
+Google Inc.
+International Business Machines Corporation
+Ismael Jimenez Martinez <ismael.jimenez.martinez@gmail.com>
+Jern-Kuan Leong <jernkuan@gmail.com>
+JianXiong Zhou <zhoujianxiong2@gmail.com>
+Joao Paulo Magalhaes <joaoppmagalhaes@gmail.com>
+Jussi Knuuttila <jussi.knuuttila@gmail.com>
+Kaito Udagawa <umireon@gmail.com>
+Kishan Kumar <kumar.kishan@outlook.com>
+Lei Xu <eddyxu@gmail.com>
+Matt Clarkson <mattyclarkson@gmail.com>
+Maxim Vafin <maxvafin@gmail.com>
+MongoDB Inc.
+Nick Hutchinson <nshutchinson@gmail.com>
+Oleksandr Sochka <sasha.sochka@gmail.com>
+Paul Redmond <paul.redmond@gmail.com>
+Radoslav Yovchev <radoslav.tm@gmail.com>
+Roman Lebedev <lebedev.ri@gmail.com>
+Shuo Chen <chenshuo@chenshuo.com>
+Steinar H. Gunderson <sgunderson@bigfoot.com>
+Stripe, Inc.
+Yixuan Qiu <yixuanq@gmail.com>
+Yusuke Suzuki <utatane.tea@gmail.com>
+Zbigniew Skowron <zbychs@gmail.com>
+
+---------------------------------------------------------
+
+HalideIR
+
+Copyright (c) 2016 HalideIR contributors
+Copyright (c) 2012-2014 MIT CSAIL, Google Inc., and other contributors
+HalideIR is derived from the Halide project.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+---------------------------------------------------------
+
+Distributed Machine Learning Common Codebase
+
+Copyright (c) 2015 by Contributors
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+---------------------------------------------------------
+
+DLPack: Open In Memory Tensor Structure
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017 by Contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+---------------------------------------------------------
+
+HowardHinnant/date
+
+The source code in this project is released using the MIT License. There is no
+global license for the project because each file is licensed individually with
+different author names and/or dates.
+
+If you contribute to this project, please add your name to the license of each
+file you modify.  If you have already contributed to this project and forgot to
+add your name to the license, please feel free to submit a new P/R to add your
+name to the license in each file you modified.
+
+For convenience, here is a copy of the MIT license found in each file except
+without author names or dates:
+
+The MIT License (MIT)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---------------------------------------------------------
+
+FreeBSD: getopt.c file
+
+Copyright (c) 1987, 1993, 1994
+The Regents of the University of California.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+ 1. Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the University nor the names of its contributors
+may be used to endorse or promote products derived from this software
+without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGE.
+---------------------------------------------------------
+
+
+google/googletest
+
+Copyright 2008, Google Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+    * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+G3log : Asynchronous logger with Dynamic Sinks
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <http://unlicense.org/>
+---------------------------------------------------------
+
+Scikit-learn
+
+Copyright (c) 2007–2018 The scikit-learn developers.
+All rights reserved.
+
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  a. Redistributions of source code must retain the above copyright notice,
+     this list of conditions and the following disclaimer.
+  b. Redistributions in binary form must reproduce the above copyright
+     notice, this list of conditions and the following disclaimer in the
+     documentation and/or other materials provided with the distribution.
+  c. Neither the name of the Scikit-learn Developers  nor the names of
+     its contributors may be used to endorse or promote products
+     derived from this software without specific prior written
+     permission.
+
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
+DAMAGE.
+
+---------------------------------------------------------
+
+google/re2
+
+Copyright (c) 2009 The RE2 Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+  * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+---------------------------------------------------------
+onnx/onnx-tensorrt
+
+MIT License
+
+Copyright (c) 2018, NVIDIA CORPORATION. All rights reserved.
+Copyright (c) 2018 Open Neural Network Exchange
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---------------------------------------------------------
+nvidia/cutlass
+
+Copyright (c) 2017 - 2022 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+SPDX-License-Identifier: BSD-3-Clause
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+Boost
+
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+
+
+---------------------------------------------------------
+
+JDAI-CV/DNNLibrary
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [2019] [JD.com Inc. JD AI]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+---------------------------------------------------------
+
+google/flatbuffers
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2014 Google Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+---------------------------------------------------------
+
+google/glog
+
+Copyright (c) 2008, Google Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+    * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+A function gettimeofday in utilities.cc is based on
+
+http://www.google.com/codesearch/p?hl=en#dR3YEbitojA/COPYING&q=GetSystemTimeAsFileTime%20license:bsd
+
+The license of this code is:
+
+Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi> and contributors
+All Rights Reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+3. Neither the name(s) of the above-listed copyright holder(s) nor the
+   names of its contributors may be used to endorse or promote products
+   derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+abseil-cpp
+https://github.com/abseil/abseil-cpp
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        https://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       https://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+---------------------------------------------------------
+
+microsoft/wil
+
+MIT License
+
+Copyright (c) Microsoft Corporation. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE
+
+---------------------------------------------------------
+
+nlohmann/json
+
+MIT License
+
+Copyright (c) 2013-2019 Niels Lohmann
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---------------------------------------------------------
+
+dcleblanc/SafeInt
+
+MIT License
+
+Copyright (c) 2018 Microsoft
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---------------------------------------------------------
+Open MPI
+
+3-Clause BSD License
+
+Most files in this release are marked with the copyrights of the
+organizations who have edited them.  The copyrights below are in no
+particular order and generally reflect members of the Open MPI core
+team who have contributed code to this release.  The copyrights for
+code used under license from other parties are included in the
+corresponding files.
+
+Copyright (c) 2004-2010 The Trustees of Indiana University and Indiana
+                        University Research and Technology
+                        Corporation.  All rights reserved.
+Copyright (c) 2004-2017 The University of Tennessee and The University
+                        of Tennessee Research Foundation.  All rights
+                        reserved.
+Copyright (c) 2004-2010 High Performance Computing Center Stuttgart,
+                        University of Stuttgart.  All rights reserved.
+Copyright (c) 2004-2008 The Regents of the University of California.
+                        All rights reserved.
+Copyright (c) 2006-2017 Los Alamos National Security, LLC.  All rights
+                        reserved.
+Copyright (c) 2006-2017 Cisco Systems, Inc.  All rights reserved.
+Copyright (c) 2006-2010 Voltaire, Inc. All rights reserved.
+Copyright (c) 2006-2017 Sandia National Laboratories. All rights reserved.
+Copyright (c) 2006-2010 Sun Microsystems, Inc.  All rights reserved.
+                        Use is subject to license terms.
+Copyright (c) 2006-2017 The University of Houston. All rights reserved.
+Copyright (c) 2006-2009 Myricom, Inc.  All rights reserved.
+Copyright (c) 2007-2017 UT-Battelle, LLC. All rights reserved.
+Copyright (c) 2007-2017 IBM Corporation.  All rights reserved.
+Copyright (c) 1998-2005 Forschungszentrum Juelich, Juelich Supercomputing
+                        Centre, Federal Republic of Germany
+Copyright (c) 2005-2008 ZIH, TU Dresden, Federal Republic of Germany
+Copyright (c) 2007      Evergrid, Inc. All rights reserved.
+Copyright (c) 2008      Chelsio, Inc.  All rights reserved.
+Copyright (c) 2008-2009 Institut National de Recherche en
+                        Informatique.  All rights reserved.
+Copyright (c) 2007      Lawrence Livermore National Security, LLC.
+                        All rights reserved.
+Copyright (c) 2007-2017 Mellanox Technologies.  All rights reserved.
+Copyright (c) 2006-2010 QLogic Corporation.  All rights reserved.
+Copyright (c) 2008-2017 Oak Ridge National Labs.  All rights reserved.
+Copyright (c) 2006-2012 Oracle and/or its affiliates.  All rights reserved.
+Copyright (c) 2009-2015 Bull SAS.  All rights reserved.
+Copyright (c) 2010      ARM ltd.  All rights reserved.
+Copyright (c) 2016      ARM, Inc.  All rights reserved.
+Copyright (c) 2010-2011 Alex Brick .  All rights reserved.
+Copyright (c) 2012      The University of Wisconsin-La Crosse. All rights
+                        reserved.
+Copyright (c) 2013-2016 Intel, Inc. All rights reserved.
+Copyright (c) 2011-2017 NVIDIA Corporation.  All rights reserved.
+Copyright (c) 2016      Broadcom Limited.  All rights reserved.
+Copyright (c) 2011-2017 Fujitsu Limited.  All rights reserved.
+Copyright (c) 2014-2015 Hewlett-Packard Development Company, LP.  All
+                        rights reserved.
+Copyright (c) 2013-2017 Research Organization for Information Science (RIST).
+                        All rights reserved.
+Copyright (c) 2017-2018 Amazon.com, Inc. or its affiliates.  All Rights
+                        reserved.
+Copyright (c) 2018      DataDirect Networks. All rights reserved.
+Copyright (c) 2018-2019 Triad National Security, LLC. All rights reserved.
+
+$COPYRIGHT$
+
+Additional copyrights may follow
+
+$HEADER$
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+- Redistributions of source code must retain the above copyright
+  notice, this list of conditions and the following disclaimer.
+
+- Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer listed
+  in this license in the documentation and/or other materials
+  provided with the distribution.
+
+- Neither the name of the copyright holders nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+The copyright holders provide no reassurances that the source code
+provided does not infringe any patent, copyright, or any other
+intellectual property rights of third parties.  The copyright holders
+disclaim any liability to any recipient for claims brought against
+recipient by any third party for infringement of that parties
+intellectual property rights.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+The Android Open Source Project
+
+Copyright (C) 2017 The Android Open Source Project
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+------
+
+libprotobuf-mutator
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   -----
+
+   openucx/ucx
+   https://github.com/openucx/ucx
+
+   Copyright (c) 2014-2015      UT-Battelle, LLC. All rights reserved.
+   Copyright (C) 2014-2020      Mellanox Technologies Ltd. All rights reserved.
+   Copyright (C) 2014-2015      The University of Houston System. All rights reserved.
+   Copyright (C) 2015           The University of Tennessee and The University
+                              of Tennessee Research Foundation. All rights reserved.
+   Copyright (C) 2016-2020      ARM Ltd. All rights reserved.
+   Copyright (c) 2016           Los Alamos National Security, LLC. All rights reserved.
+   Copyright (C) 2016-2020      Advanced Micro Devices, Inc.  All rights reserved.
+   Copyright (C) 2019           UChicago Argonne, LLC.  All rights reserved.
+   Copyright (c) 2018-2020      NVIDIA CORPORATION. All rights reserved.
+   Copyright (C) 2020           Huawei Technologies Co., Ltd. All rights reserved.
+   Copyright (C) 2016-2020      Stony Brook University. All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions
+   are met:
+
+   1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+   2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+   3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+   HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
+   TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+   PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+   LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+   NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+   SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+   -----
+
+   From PyTorch:
+
+   Copyright (c) 2016-     Facebook, Inc            (Adam Paszke)
+   Copyright (c) 2014-     Facebook, Inc            (Soumith Chintala)
+   Copyright (c) 2011-2014 Idiap Research Institute (Ronan Collobert)
+   Copyright (c) 2012-2014 Deepmind Technologies    (Koray Kavukcuoglu)
+   Copyright (c) 2011-2012 NEC Laboratories America (Koray Kavukcuoglu)
+   Copyright (c) 2011-2013 NYU                      (Clement Farabet)
+   Copyright (c) 2006-2010 NEC Laboratories America (Ronan Collobert, Leon Bottou, Iain Melvin, Jason Weston)
+   Copyright (c) 2006      Idiap Research Institute (Samy Bengio)
+   Copyright (c) 2001-2004 Idiap Research Institute (Ronan Collobert, Samy Bengio, Johnny Mariethoz)
+
+   From Caffe2:
+
+   Copyright (c) 2016-present, Facebook Inc. All rights reserved.
+
+   All contributions by Facebook:
+   Copyright (c) 2016 Facebook Inc.
+
+   All contributions by Google:
+   Copyright (c) 2015 Google Inc.
+   All rights reserved.
+
+   All contributions by Yangqing Jia:
+   Copyright (c) 2015 Yangqing Jia
+   All rights reserved.
+
+   All contributions from Caffe:
+   Copyright(c) 2013, 2014, 2015, the respective contributors
+   All rights reserved.
+
+   All other contributions:
+   Copyright(c) 2015, 2016 the respective contributors
+   All rights reserved.
+
+   Caffe2 uses a copyright model similar to Caffe: each contributor holds
+   copyright over their contributions to Caffe2. The project versioning records
+   all such contribution and copyright details. If a contributor wants to further
+   mark their specific copyright on a particular contribution, they should
+   indicate their copyright solely in the commit message of the change when it is
+   committed.
+
+   All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions are met:
+
+   1. Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+
+   2. Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+
+   3. Neither the names of Facebook, Deepmind Technologies, NYU, NEC Laboratories America
+      and IDIAP Research Institute nor the names of its contributors may be
+      used to endorse or promote products derived from this software without
+      specific prior written permission.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+   AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+   IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+   ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+   LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+   CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+   SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+   INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+   CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+   POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+   mpi4py
+   https://github.com/mpi4py/mpi4py/
+
+   =======================
+   LICENSE: MPI for Python
+   =======================
+
+   :Author:  Lisandro Dalcin
+   :Contact: dalcinl@gmail.com
+
+
+   Copyright (c) 2019, Lisandro Dalcin.
+   All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions
+   are met:
+
+   * Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+   * Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS
+   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+   HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+   LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+   DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+   THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+---------------------------------------------------------
+huggingface/transformers
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+---------------------------------------------------------
+msgpack/msgpack-python
+
+Copyright (C) 2008-2011 INADA Naoki <songofacandy@gmail.com>
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+---------------------------------------------------------
+lanpa/tensorboardX
+
+MIT License
+
+Copyright (c) 2017 Tzu-Wei Huang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+---------------------------------------------------------
+tensorflow/tensorboard
+
+Copyright 2017 The TensorFlow Authors.  All rights reserved.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017, The TensorFlow Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+---------------------------------------------------------
+
+cerberus
+
+Cerberus is a lightweight and extensible data validation library for Python.
+
+ISC License
+
+Copyright (c) 2012-2016 Nicola Iarocci.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+---------------------------------------------------------
+
+MurmurHash3
+
+MIT license
+
+https://github.com/aappleby/smhasher
+
+SMHasher is a test suite designed to test the distribution, collision, and
+performance properties of non-cryptographic hash functions.
+This is the home for the MurmurHash family of hash functions along with the
+SMHasher test suite used to verify them.
+SMHasher is released under the MIT license.
+All MurmurHash versions are public domain software, and the author disclaims all copyright to their code.
+
+---------------------------------------------------------
+
+gtest-ios-framework
+
+https://github.com/mestevens/gtest-ios-framework
+
+Copyright (c) 2013 Matthew Stevens
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+---------------------------------------------------------
+
+DLPack
+
+https://github.com/dmlc/dlpack
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2017 by Contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+---------------------------------------------------------
+
+emsdk
+
+MIT/Expat license
+
+https://github.com/emscripten-core/emsdk
+
+Copyright (c) 2018 Emscripten authors (see AUTHORS in Emscripten)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+----------------------------------------------------------------------------
+
+This is the MIT/Expat License. For more information see:
+
+1. http://www.opensource.org/licenses/mit-license.php
+
+2. http://en.wikipedia.org/wiki/MIT_License
+
+---------------------------------------------------------
+
+coremltools
+
+BSD-3-Clause License
+
+https://github.com/apple/coremltools
+
+Copyright (c) 2020, Apple Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1.  Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2.  Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3.  Neither the name of the copyright holder(s) nor the names of any contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+© 2021 GitHub, Inc.
+
+---------------------------------------------------------
+
+react-native
+
+MIT License
+
+https://github.com/facebook/react-native
+
+Copyright (c) Facebook, Inc. and its affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---------------------------------------------------------
+
+pytorch/cpuinfo
+
+BSD 2-Clause "Simplified" License
+
+https://github.com/pytorch/cpuinfo
+
+Copyright (c) 2019 Google LLC
+Copyright (c) 2017-2018 Facebook Inc.
+Copyright (C) 2012-2017 Georgia Institute of Technology
+Copyright (C) 2010-2012 Marat Dukhan
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+SQLite Is Public Domain
+
+All of the code and documentation in SQLite has been dedicated to the public
+domain by the authors. All code authors, and representatives of the companies
+they work for, have signed affidavits dedicating their contributions to the
+public domain and originals of those signed affidavits are stored in a firesafe
+at the main offices of Hwaci. Anyone is free to copy, modify, publish, use,
+compile, sell, or distribute the original SQLite code, either in source code
+form or as a compiled binary, for any purpose, commercial or non-commercial,
+and by any means.
+
+The previous paragraph applies to the deliverable code and documentation in
+SQLite - those parts of the SQLite library that you actually bundle and ship
+with a larger application. Some scripts used as part of the build process (for
+example the "configure" scripts generated by autoconf) might fall under other
+open-source licenses. Nothing from these build scripts ever reaches the final
+deliverable SQLite library, however, and so the licenses associated with those
+scripts should not be a factor in assessing your rights to copy and use the
+SQLite library.
+
+All of the deliverable code in SQLite has been written from scratch. No code
+has been taken from other projects or from the open internet. Every line of
+code can be traced back to its original author, and all of those authors have
+public domain dedications on file. So the SQLite code base is clean and is
+uncontaminated with licensed code from other projects.
+
+---------------------------------------------------------
+
+google/XNNPACK
+
+BSD License
+
+For XNNPACK software
+
+Copyright (c) Facebook, Inc. and its affiliates. All rights reserved.
+Copyright 2019 Google LLC
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+ * Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+ * Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+ * Neither the name Facebook nor the names of its contributors may be used to
+   endorse or promote products derived from this software without specific
+   prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+google/sentencepiece, https://github.com/google/sentencepiece
+(included when statically linked with onnxruntime-extensions)
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+---------------------------------------------------------
+
+dlfcn-win32/dlfcn-win32 is licensed under the MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+---------------------------------------------------------
+
+The Python Imaging Library (PIL) is
+
+    Copyright © 1997-2011 by Secret Labs AB
+    Copyright © 1995-2011 by Fredrik Lundh
+
+Pillow is the friendly PIL fork. It is
+
+    Copyright © 2010-2023 by Alex Clark and contributors
+
+Like PIL, Pillow is licensed under the open source HPND License:
+
+By obtaining, using, and/or copying this software and/or its associated
+documentation, you agree that you have read, understood, and will comply
+with the following terms and conditions:
+
+Permission to use, copy, modify, and distribute this software and its
+associated documentation for any purpose and without fee is hereby granted,
+provided that the above copyright notice appears in all copies, and that
+both that copyright notice and this permission notice appear in supporting
+documentation, and that the name of Secret Labs AB or the author not be
+used in advertising or publicity pertaining to distribution of the software
+without specific, written prior permission.
+
+SECRET LABS AB AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
+SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS.
+IN NO EVENT SHALL SECRET LABS AB OR THE AUTHOR BE LIABLE FOR ANY SPECIAL,
+INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+---------------------------------------------------------
+
+openssl/openssl, https://github.com/openssl/openssl
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        https://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+---------------------------------------------------------
+
+Tencent/rapidjson, https://github.com/Tencent/rapidjson
+
+Tencent is pleased to support the open source community by making RapidJSON available.
+
+Copyright (C) 2015 THL A29 Limited, a Tencent company, and Milo Yip.  All rights reserved.
+
+If you have downloaded a copy of the RapidJSON binary from Tencent, please note that the RapidJSON binary is licensed under the MIT License.
+If you have downloaded a copy of the RapidJSON source code from Tencent, please note that RapidJSON source code is licensed under the MIT License, except for the third-party components listed below which are subject to different license terms.  Your integration of RapidJSON into your own projects may require compliance with the MIT License, as well as the other licenses applicable to the third-party components included within RapidJSON. To avoid the problematic JSON license in your own projects, it's sufficient to exclude the bin/jsonchecker/ directory, as it's the only code under the JSON license.
+A copy of the MIT License is included in this file.
+
+Other dependencies and licenses:
+
+Open Source Software Licensed Under the BSD License:
+--------------------------------------------------------------------
+
+The msinttypes r29
+Copyright (c) 2006-2013 Alexander Chemeris
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+* Neither the name of  copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS AND CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Open Source Software Licensed Under the JSON License:
+--------------------------------------------------------------------
+
+json.org
+Copyright (c) 2002 JSON.org
+All Rights Reserved.
+
+JSON_checker
+Copyright (c) 2002 JSON.org
+All Rights Reserved.
+
+
+Terms of the JSON License:
+---------------------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+The Software shall be used for Good, not Evil.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+Terms of the MIT License:
+--------------------------------------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+---------------------------------------------------------
+
+boostorg/boost, https://github.com/boostorg/boost
+
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+
+---------------------------------------------------------
+
+libb64/libb64, https://github.com/libb64/libb64
+
+Copyright-Only Dedication (based on United States law) or Public Domain Certification
+
+The person or persons who have associated work with this document (the "Dedicator" or "Certifier") hereby either (a) certifies that, to the best of his knowledge, the work of authorship identified is in the public domain of the country from which the work is published, or (b) hereby dedicates whatever copyright the dedicators holds in the work of authorship identified below (the "Work") to the public domain. A certifier, moreover, dedicates any copyright interest he may have in the associated work, and for these purposes, is described as a "dedicator" below.
+
+A certifier has taken reasonable steps to verify the copyright status of this work. Certifier recognizes that his good faith efforts may not shield him from liability if in fact the work certified is not in the public domain.
+
+Dedicator makes this dedication for the benefit of the public at large and to the detriment of the Dedicator's heirs and successors. Dedicator intends this dedication to be an overt act of relinquishment in perpetuity of all present and future rights under copyright law, whether vested or contingent, in the Work. Dedicator understands that such relinquishment of all rights includes the relinquishment of all rights to enforce (by lawsuit or otherwise) those copyrights in the Work.
+
+Dedicator recognizes that, once placed in the public domain, the Work may be freely reproduced, distributed, transmitted, used, modified, built upon, or otherwise exploited by anyone for any purpose, commercial or non-commercial, and in any way, including by methods that have not yet been invented or conceived.
+
+---------------------------------------------------------
+
+posix pthread library, https://sourceforge.net/projects/pthreads4w
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+---------------------------------------------------------
+
+Triton Inference Server & Client, https://github.com/triton-inference-server
+
+Copyright (c) 2022, NVIDIA CORPORATION. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+ * Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+ * Neither the name of NVIDIA CORPORATION nor the names of its
+   contributors may be used to endorse or promote products derived
+   from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS ``AS IS'' AND ANY
+EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR
+CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
+OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+microsoft/mimalloc, https://github.com/microsoft/mimalloc
+
+MIT License
+
+Copyright (c) 2018-2021 Microsoft Corporation, Daan Leijen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---------------------------------------------------------
+
+TensorFlow.js
+
+https://github.com/tensorflow/tfjs
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+——
+
+curl/curl
+
+https://github.com/curl
+
+COPYRIGHT AND PERMISSION NOTICE
+
+Copyright (C) Daniel Stenberg, <daniel@haxx.se>, and many
+contributors, see the THANKS file.
+
+All rights reserved.
+
+Permission to use, copy, modify, and distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright
+notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. IN
+NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE
+OR OTHER DEALINGS IN THE SOFTWARE.
+
+Except as contained in this notice, the name of a copyright holder shall not
+be used in advertising or otherwise to promote the sale, use or other dealings
+in this Software without prior written authorization of the copyright holder.
+
+---------------------------------------------------------
+
+Intel neural-compressor
+
+https://github.com/intel/neural-compressor
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   ============================================================================
+
+   Copyright 2016-2019 Intel Corporation
+   Copyright 2018 YANDEX LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   This distribution includes third party software ("third party programs").
+   This third party software, even if included with the distribution of
+   the Intel software, may be governed by separate license terms, including
+   without limitation, third party license terms, other Intel software license
+   terms, and open source software license terms. These separate license terms
+   govern your use of the third party programs as set forth in the
+   "THIRD-PARTY-PROGRAMS" file.
+
+---------------------------------------------------------
+
+FlashAttention, https://github.com/Dao-AILab/flash-attention
+
+BSD 3-Clause License
+
+Copyright (c) 2022, the respective contributors, as shown by the AUTHORS file.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+composable_kernel
+
+https://github.com/ROCmSoftwarePlatform/composable_kernel
+
+Copyright (c) 2018-    , Advanced Micro Devices, Inc. (Chao Liu, Jing Zhang)
+Copyright (c) 2019-    , Advanced Micro Devices, Inc. (Letao Qin, Qianfeng Zhang, Liang Huang, Shaojie Wang)
+Copyright (c) 2022-    , Advanced Micro Devices, Inc. (Anthony Chang, Chunyu Lai, Illia Silin, Adam Osewski, Poyen Chen, Jehandad Khan)
+Copyright (c) 2019-2021, Advanced Micro Devices, Inc. (Hanwen Chang)
+Copyright (c) 2019-2020, Advanced Micro Devices, Inc. (Tejash Shah)
+Copyright (c) 2020     , Advanced Micro Devices, Inc. (Xiaoyan Zhou)
+Copyright (c) 2021-2022, Advanced Micro Devices, Inc. (Jianfeng Yan)
+
+SPDX-License-Identifier: MIT
+Copyright (c) 2018-2023, Advanced Micro Devices, Inc. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---------------------------------------------------------
+
+neural-speed
+
+https://github.com/intel/neural-speed
+
+                                 Apache License
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   ============================================================================
+
+   Copyright 2016-2019 Intel Corporation
+   Copyright 2018 YANDEX LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   This distribution includes third party software ("third party programs").
+   This third party software, even if included with the distribution of
+   the Intel software, may be governed by separate license terms, including
+   without limitation, third party license terms, other Intel software license
+   terms, and open source software license terms. These separate license terms
+   govern your use of the third party programs as set forth in the
+   "THIRD-PARTY-PROGRAMS" file.
+
+---------------------------------------------------------
+
+dawn
+
+https://dawn.googlesource.com/dawn
+
+   BSD 3-Clause License
+
+   Copyright 2017-2023 The Dawn & Tint Authors
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions are met:
+
+   1. Redistributions of source code must retain the above copyright notice, this
+      list of conditions and the following disclaimer.
+
+   2. Redistributions in binary form must reproduce the above copyright notice,
+      this list of conditions and the following disclaimer in the documentation
+      and/or other materials provided with the distribution.
+
+   3. Neither the name of the copyright holder nor the names of its
+      contributors may be used to endorse or promote products derived from
+      this software without specific prior written permission.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+   AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+   IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+   DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+   FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+   DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+   SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+   CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+   OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+KleidiAI
+
+https://gitlab.arm.com/kleidi/kleidiai
+
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files.
+
+"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions:
+
+     (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and
+
+     (b) You must cause any modified files to carry prominent notices stating that You changed the files; and
+
+     (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and
+
+     (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License.
+
+     You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+Copyright 2024-2025 Arm Limited and/or its affiliates <open-source-office@arm.com>
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---------------------------------------------------------
+
+whichlang
+
+https://github.com/quickwit-oss/whichlang
+
+Copyright (c) 2023 by Quickwit Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+---------------------------------------------------------
+
+Snowball
+
+https://github.com/snowballstem/snowball/
+
+Copyright (c) 2001, Dr Martin Porter
+Copyright (c) 2004,2005, Richard Boulton
+Copyright (c) 2013, Yoshiki Shibukawa
+Copyright (c) 2006,2007,2009,2010,2011,2014-2019, Olly Betts
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+  1. Redistributions of source code must retain the above copyright notice,
+     this list of conditions and the following disclaimer.
+  2. Redistributions in binary form must reproduce the above copyright notice,
+     this list of conditions and the following disclaimer in the documentation
+     and/or other materials provided with the distribution.
+  3. Neither the name of the Snowball project nor the names of its contributors
+     may be used to endorse or promote products derived from this software
+     without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
\ No newline at end of file
diff --git a/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.ML-2.1.94-license.txt b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.ML-2.1.94-license.txt
new file mode 100644
index 0000000..d4e9f0e
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.ML-2.1.94-license.txt
@@ -0,0 +1,53 @@
+MICROSOFT SOFTWARE LICENSE TERMS 
+
+1. MICROSOFT WINDOWS APP SDK
+2. WINDOWS MACHINE LEARNING (ML)
+________________________________________
+IF YOU LIVE IN (OR ARE A BUSINESS WITH A PRINCIPAL PLACE OF BUSINESS IN) THE UNITED STATES, PLEASE READ THE “BINDING ARBITRATION AND CLASS ACTION WAIVER” SECTION BELOW. IT AFFECTS HOW DISPUTES ARE RESOLVED.
+________________________________________
+These license terms are an agreement between you and Microsoft Corporation (or one of its affiliates). They apply to the software named above and any Microsoft services or software updates (except to the extent such services or updates are accompanied by new or additional terms, in which case those different terms apply prospectively and do not alter your or Microsoft’s rights relating to pre-updated software or services). IF YOU COMPLY WITH THESE LICENSE TERMS, YOU HAVE THE RIGHTS BELOW. BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS.
+    1. INSTALLATION AND USE RIGHTS.
+        a) General. Subject to the terms of this agreement, you may install and use any number of copies of the software to develop and test your applications, solely for use on Windows. When building Generative AI applications follow the guidelines in https://learn.microsoft.com/windows/ai/rai.
+        b) Included Microsoft Applications. The software may include other Microsoft applications. These license terms apply to those included applications, if any, unless other license terms are provided with the other Microsoft applications.
+        c) Microsoft Platforms. The software may include components from Microsoft Windows. These components are governed by separate agreements and their own product support policies, as described in the license terms found in the installation directory for that component or in the “Licenses” folder accompanying the software.
+        d) Third Party Materials. The software may use or include source code, object code, or data available under an open source or open data license (“Open Source Materials”) or a proprietary license from a third party (with Open Source Materials, collectively, “Third Party Materials”) that are licensed under the specific license terms applicable to the Third Party Materials (an “Third Party License Agreement”). To the extent that any Third Party License Agreement requires that the corresponding Third Party Materials be licensed under terms that are different from the terms set forth in this Agreement, then such Third Party Materials are licensed under the terms of that Third Party License Agreement and the other terms and conditions in this Agreement will not apply with respect to those Third Party Materials. You (a) acknowledge that any such Third Party License Agreement is solely between Licensee and the applicable licensor of the Third Party Materials, and (b) will comply with the terms of any such Third Party License Agreement. Without limitation to the foregoing, the licenses referenced on this website (https://learn.microsoft.com/en-us/windows/ai/new-windows-ml/supported-execution-providers) are deemed to be “Third Party Materials.”
+    2. DATA.
+        a) Data Collection. The software may collect information about you and your use of the software, and send that to Microsoft. Microsoft may use this information to provide services and improve our products and services. You may opt-out of many of these scenarios, but not all, as described in the product documentation. There are also some features in the software that may enable you to collect data from users of your applications. If you use these features to enable data collection in your applications, you must comply with applicable law, including providing appropriate notices to users of your applications. You can learn more about data collection and use in the help documentation and the privacy statement at https://aka.ms/privacy. Your use of the software operates as your consent to these practices.
+        b) Processing of Personal Data. To the extent Microsoft is a processor or subprocessor of personal data in connection with the software, Microsoft makes the commitments in the European Union General Data Protection Regulation Terms of the Online Services Terms to all customers effective May 25, 2018, at https://docs.microsoft.com/en-us/legal/gdpr.
+    3. DISTRIBUTABLE CODE. The software may contain code you are permitted to distribute (i.e. make available for third parties) in applications you develop, as described in this Section.
+        a) Distribution Rights. The code and test files described below are distributable if included with the software.
+            i. Any files that are binplaced with your application by the WindowsAppSDK NuGet package are, by definition, permitted to be redistributed.  This applies to both framework package dependent and self-contained deployments.
+            ii. Image Library. You may copy and distribute images, graphics, and animations in the Image Library as described in the software documentation; and
+            iii. Third Party Distribution. You may permit distributors of your applications to copy and distribute any of this distributable code you elect to distribute with your applications.
+        b) Distribution Requirements. For any code you distribute, you must:
+            i. add significant primary functionality to it in your applications;
+            ii. require distributors and external end users to agree to terms that protect it and Microsoft at least as much as this agreement; and
+            iii. indemnify, defend, and hold harmless Microsoft from any claims, including attorneys’ fees, related to the distribution or use of your applications, except to the extent that any claim is based solely on the unmodified distributable code.
+        c) Distribution Restrictions. You may not:
+            i. use Microsoft’s trademarks or trade dress in your application in any way that suggests your application comes from or is endorsed by Microsoft; or
+            ii. modify or distribute the source code of any distributable code so that any part of it becomes subject to any license that requires that the distributable code, any other part of the software, or any of Microsoft’s other intellectual property be disclosed or distributed in source code form, or that others have the right to modify it.
+    4. SCOPE OF LICENSE. The software is licensed, not sold. Microsoft reserves all other rights. Unless applicable law gives you more rights despite this limitation, you will not (and have no right to):
+        a) work around any technical limitations in the software that only allow you to use it in certain ways;
+        b) reverse engineer, decompile or disassemble the software, or otherwise attempt to derive the source code for the software, except and to the extent required by third party licensing terms governing use of certain open source components that may be included in the software;
+        c) remove, minimize, block, or modify any notices of Microsoft or its suppliers in the software;
+        d) use the software in any way that is against the law or to create or propagate malware; or
+        e) share, publish, distribute, or lease the software (except for any distributable code, subject to the terms above), provide the software as a stand-alone offering for others to use, or transfer the software or this agreement to any third party.
+    5. EXPORT RESTRICTIONS. You must comply with all domestic and international export laws and regulations that apply to the software, which include restrictions on destinations, end users, and end use. For further information on export restrictions, visit https://aka.ms/exporting.
+    6. SUPPORT SERVICES. Microsoft is not obligated under this agreement to provide any support services for the software. Any support provided is “as is”, “with all faults”, and without warranty of any kind.
+    7. UPDATES. The software may periodically check for updates, and download and install them for you. You may obtain updates only from Microsoft or authorized sources. Microsoft may need to update your system to provide you with updates. You agree to receive these automatic updates without any additional notice. Updates may not include or support all existing software features, services, or peripheral devices.
+    8. BINDING ARBITRATION AND CLASS ACTION WAIVER. This Section applies if you live in (or, if a business, your principal place of business is in) the United States. If you and Microsoft have a dispute, you and Microsoft agree to try for 60 days to resolve it informally. If you and Microsoft can’t, you and Microsoft agree to binding individual arbitration before the American Arbitration Association under the Federal Arbitration Act (“FAA”), and not to sue in court in front of a judge or jury. Instead, a neutral arbitrator will decide. Class action lawsuits, class-wide arbitrations, private attorney-general actions, and any other proceeding where someone acts in a representative capacity are not allowed; nor is combining individual proceedings without the consent of all parties. The complete Arbitration Agreement contains more terms and is at https://aka.ms/arb-agreement-4. You and Microsoft agree to these terms.
+    9. ENTIRE AGREEMENT. This agreement, and any other terms Microsoft may provide for supplements, updates, or third-party applications, is the entire agreement for the software.
+    10. APPLICABLE LAW AND PLACE TO RESOLVE DISPUTES. If you acquired the software in the United States or Canada, the laws of the state or province where you live (or, if a business, where your principal place of business is located) govern the interpretation of this agreement, claims for its breach, and all other claims (including consumer protection, unfair competition, and tort claims), regardless of conflict of laws principles, except that the FAA governs everything related to arbitration. If you acquired the software in any other country, its laws apply, except that the FAA governs everything related to arbitration. If U.S. federal jurisdiction exists, you and Microsoft consent to exclusive jurisdiction and venue in the federal court in King County, Washington for all disputes heard in court (excluding arbitration). If not, you and Microsoft consent to exclusive jurisdiction and venue in the Superior Court of King County, Washington for all disputes heard in court (excluding arbitration).
+    11. CONSUMER RIGHTS; REGIONAL VARIATIONS. This agreement describes certain legal rights. You may have other rights, including consumer rights, under the laws of your state or country. Separate and apart from your relationship with Microsoft, you may also have rights with respect to the party from which you acquired the software. This agreement does not change those other rights if the laws of your state or country do not permit it to do so. For example, if you acquired the software in one of the below regions, or mandatory country law applies, then the following provisions apply to you:
+        a) Australia. You have statutory guarantees under the Australian Consumer Law and nothing in this agreement is intended to affect those rights.
+        b) Canada. If you acquired this software in Canada, you may stop receiving updates by turning off the automatic update feature, disconnecting your device from the Internet (if and when you re-connect to the Internet, however, the software will resume checking for and installing updates), or uninstalling the software. The product documentation, if any, may also specify how to turn off updates for your specific device or software.
+        c) Germany and Austria.
+            i. Warranty. The properly licensed software will perform substantially as described in any Microsoft materials that accompany the software. However, Microsoft gives no contractual guarantee in relation to the licensed software.
+            ii. Limitation of Liability. In case of intentional conduct, gross negligence, claims based on the Product Liability Act, as well as, in case of death or personal or physical injury, Microsoft is liable according to the statutory law.
+                Subject to the foregoing clause ii., Microsoft will only be liable for slight negligence if Microsoft is in breach of such material contractual obligations, the fulfillment of which facilitate the due performance of this agreement, the breach of which would endanger the purpose of this agreement and the compliance with which a party may constantly trust in (so-called "cardinal obligations"). In other cases of slight negligence, Microsoft will not be liable for slight negligence.
+    12. DISCLAIMER OF WARRANTY. THE SOFTWARE IS LICENSED “AS IS.” YOU BEAR THE RISK OF USING IT. MICROSOFT GIVES NO EXPRESS WARRANTIES, GUARANTEES, OR CONDITIONS. TO THE EXTENT PERMITTED UNDER APPLICABLE LAWS, MICROSOFT EXCLUDES ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
+    13. LIMITATION ON AND EXCLUSION OF DAMAGES. IF YOU HAVE ANY BASIS FOR RECOVERING DAMAGES DESPITE THE PRECEDING DISCLAIMER OF WARRANTY, YOU CAN RECOVER FROM MICROSOFT AND ITS SUPPLIERS ONLY DIRECT DAMAGES UP TO U.S. $5.00. YOU CANNOT RECOVER ANY OTHER DAMAGES, INCLUDING CONSEQUENTIAL, LOST PROFITS, SPECIAL, INDIRECT, OR INCIDENTAL DAMAGES.
+
+This limitation applies to (a) anything related to the software, services, content (including code) on third party Internet sites, or third party applications; and (b) claims for breach of contract, warranty, guarantee, or condition; strict liability, negligence, or other tort; or any other claim; in each case to the extent permitted by applicable law.
+
+It also applies even if Microsoft knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your state, province, or country may not allow the exclusion or limitation of incidental, consequential, or other damages.
diff --git a/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-NOTICE.txt b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-NOTICE.txt
new file mode 100644
index 0000000..2b0cb65
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-NOTICE.txt
@@ -0,0 +1,51 @@
+NOTICES AND INFORMATION
+Do Not Translate or Localize
+
+This software incorporates material from third parties.
+Microsoft makes certain open source code available at https://3rdpartysource.microsoft.com,
+or you may send a check or money order for US $5.00, including the product name,
+the open source component name, platform, and version number, to:
+
+Source Code Compliance Team
+Microsoft Corporation
+One Microsoft Way
+Redmond, WA 98052
+USA
+
+Notwithstanding any other terms, you may reverse engineer this software to the extent
+required to debug changes to any libraries licensed under the GNU Lesser General Public License.
+
+---------------------------------------------------------
+
+Newtonsoft.Json 13.0.1 - MIT
+
+
+Copyright James Newton-King 2008
+Copyright (c) 2007 James Newton-King
+Copyright (c) James Newton-King 2008
+Copyright James Newton-King 2008 Json.NET
+
+The MIT License (MIT)
+
+Copyright (c) 2007 James Newton-King
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+---------------------------------------------------------
+
diff --git a/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-tools-NOTICE.txt b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-tools-NOTICE.txt
new file mode 100644
index 0000000..e1193b1
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-tools-NOTICE.txt
@@ -0,0 +1,19 @@
+NOTICES AND INFORMATION
+Do Not Translate or Localize
+
+This software incorporates material from third parties. Microsoft makes certain
+open source code available at https://3rdpartysource.microsoft.com, or you may
+send a check or money order for US $5.00, including the product name, the open
+source component name, and version number, to:
+
+Source Code Compliance Team
+Microsoft Corporation
+One Microsoft Way
+Redmond, WA 98052
+USA
+
+Notwithstanding any other terms, you may reverse engineer this software to the
+extent required to debug changes to any libraries licensed under the GNU Lesser
+General Public License.
+
+-----
\ No newline at end of file
diff --git a/THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-LICENSE.TXT b/THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-LICENSE.TXT
new file mode 100644
index 0000000..fa3121d
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-LICENSE.TXT
@@ -0,0 +1,23 @@
+The MIT License (MIT)
+
+Copyright (c) .NET Foundation and Contributors
+
+All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-THIRD-PARTY-NOTICES.TXT b/THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-THIRD-PARTY-NOTICES.TXT
new file mode 100644
index 0000000..6c9991e
--- /dev/null
+++ b/THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-THIRD-PARTY-NOTICES.TXT
@@ -0,0 +1,1396 @@
+.NET Runtime uses third-party libraries or other resources that may be
+distributed under licenses different than the .NET Runtime software.
+
+In the event that we accidentally failed to list a required notice, please
+bring it to our attention. Post an issue or email us:
+
+           dotnet@microsoft.com
+
+The attached notices are provided for information only.
+
+License notice for ASP.NET
+-------------------------------
+
+Copyright (c) .NET Foundation. All rights reserved.
+Licensed under the Apache License, Version 2.0.
+
+Available at
+https://github.com/dotnet/aspnetcore/blob/main/LICENSE.txt
+
+License notice for Slicing-by-8
+-------------------------------
+
+http://sourceforge.net/projects/slicing-by-8/
+
+Copyright (c) 2004-2006 Intel Corporation - All Rights Reserved
+
+
+This software program is licensed subject to the BSD License,  available at
+http://www.opensource.org/licenses/bsd-license.html.
+
+
+License notice for Unicode data
+-------------------------------
+
+https://www.unicode.org/license.html
+
+Copyright © 1991-2022 Unicode, Inc. All rights reserved.
+Distributed under the Terms of Use in https://www.unicode.org/copyright.html.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Unicode data files and any associated documentation
+(the "Data Files") or Unicode software and any associated documentation
+(the "Software") to deal in the Data Files or Software
+without restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, and/or sell copies of
+the Data Files or Software, and to permit persons to whom the Data Files
+or Software are furnished to do so, provided that either
+(a) this copyright and permission notice appear with all copies
+of the Data Files or Software, or
+(b) this copyright and permission notice appear in associated
+Documentation.
+
+THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF
+ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT OF THIRD PARTY RIGHTS.
+IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS
+NOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL
+DAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
+DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THE DATA FILES OR SOFTWARE.
+
+Except as contained in this notice, the name of a copyright holder
+shall not be used in advertising or otherwise to promote the sale,
+use or other dealings in these Data Files or Software without prior
+written authorization of the copyright holder.
+
+License notice for zlib-ng
+-----------------------
+
+https://github.com/zlib-ng/zlib-ng/blob/d54e3769be0c522015b784eca2af258b1c026107/LICENSE.md
+
+(C) 1995-2024 Jean-loup Gailly and Mark Adler
+
+This software is provided 'as-is', without any express or implied
+warranty. In no event will the authors be held liable for any damages
+arising from the use of this software.
+
+Permission is granted to anyone to use this software for any purpose,
+including commercial applications, and to alter it and redistribute it
+freely, subject to the following restrictions:
+
+1. The origin of this software must not be misrepresented; you must not
+   claim that you wrote the original software. If you use this software
+   in a product, an acknowledgment in the product documentation would be
+   appreciated but is not required.
+
+2. Altered source versions must be plainly marked as such, and must not be
+   misrepresented as being the original software.
+
+3. This notice may not be removed or altered from any source distribution.
+
+License notice for LinuxTracepoints
+-----------------------------------
+
+https://github.com/microsoft/LinuxTracepoints/blob/main/LICENSE
+
+Copyright (c) Microsoft Corporation.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE
+
+License notice for Mono
+-------------------------------
+
+http://www.mono-project.com/docs/about-mono/
+
+Copyright (c) .NET Foundation Contributors
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software  and associated documentation files (the Software), to deal
+in the Software without restriction,  including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense,  and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so,  subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License notice for International Organization for Standardization
+-----------------------------------------------------------------
+
+Portions (C) International Organization for Standardization 1986:
+     Permission to copy in any form is granted for use with
+     conforming SGML systems and applications as defined in
+     ISO 8879, provided this notice is included in all copies.
+
+License notice for Intel
+------------------------
+
+"Copyright (c) 2004-2006 Intel Corporation - All Rights Reserved
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for Xamarin and Novell
+-------------------------------------
+
+Copyright (c) 2015 Xamarin, Inc (http://www.xamarin.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+Copyright (c) 2011 Novell, Inc (http://www.novell.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+Third party notice for W3C
+--------------------------
+
+"W3C SOFTWARE AND DOCUMENT NOTICE AND LICENSE
+Status: This license takes effect 13 May, 2015.
+This work is being provided by the copyright holders under the following license.
+License
+By obtaining and/or copying this work, you (the licensee) agree that you have read, understood, and will comply with the following terms and conditions.
+Permission to copy, modify, and distribute this work, with or without modification, for any purpose and without fee or royalty is hereby granted, provided that you include the following on ALL copies of the work or portions thereof, including modifications:
+The full text of this NOTICE in a location viewable to users of the redistributed or derivative work.
+Any pre-existing intellectual property disclaimers, notices, or terms and conditions. If none exist, the W3C Software and Document Short Notice should be included.
+Notice of any changes or modifications, through a copyright statement on the new code or document such as "This software or document includes material copied from or derived from [title and URI of the W3C document]. Copyright © [YEAR] W3C® (MIT, ERCIM, Keio, Beihang)."
+Disclaimers
+THIS WORK IS PROVIDED "AS IS," AND COPYRIGHT HOLDERS MAKE NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF THE SOFTWARE OR DOCUMENT WILL NOT INFRINGE ANY THIRD PARTY PATENTS, COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS.
+COPYRIGHT HOLDERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THE SOFTWARE OR DOCUMENT.
+The name and trademarks of copyright holders may NOT be used in advertising or publicity pertaining to the work without specific, written prior permission. Title to copyright in this work will at all times remain with copyright holders."
+
+License notice for Bit Twiddling Hacks
+--------------------------------------
+
+Bit Twiddling Hacks
+
+By Sean Eron Anderson
+seander@cs.stanford.edu
+
+Individually, the code snippets here are in the public domain (unless otherwise
+noted) — feel free to use them however you please. The aggregate collection and
+descriptions are © 1997-2005 Sean Eron Anderson. The code and descriptions are
+distributed in the hope that they will be useful, but WITHOUT ANY WARRANTY and
+without even the implied warranty of merchantability or fitness for a particular
+purpose.
+
+License notice for Brotli
+--------------------------------------
+
+Copyright (c) 2009, 2010, 2013-2016 by the Brotli Authors.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+compress_fragment.c:
+Copyright (c) 2011, Google Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+    * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+""AS IS"" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+decode_fuzzer.c:
+Copyright (c) 2015 The Chromium Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+""AS IS"" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."
+
+License notice for Json.NET
+-------------------------------
+
+https://github.com/JamesNK/Newtonsoft.Json/blob/master/LICENSE.md
+
+The MIT License (MIT)
+
+Copyright (c) 2007 James Newton-King
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License notice for vectorized base64 encoding / decoding
+--------------------------------------------------------
+
+Copyright (c) 2005-2007, Nick Galbreath
+Copyright (c) 2013-2017, Alfred Klomp
+Copyright (c) 2015-2017, Wojciech Mula
+Copyright (c) 2016-2017, Matthieu Darbois
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+- Redistributions of source code must retain the above copyright notice,
+  this list of conditions and the following disclaimer.
+
+- Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer in the
+  documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
+TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for vectorized hex parsing
+--------------------------------------------------------
+
+Copyright (c) 2022, Geoff Langdale
+Copyright (c) 2022, Wojciech Mula
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+- Redistributions of source code must retain the above copyright notice,
+  this list of conditions and the following disclaimer.
+
+- Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer in the
+  documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
+TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for RFC 3492
+---------------------------
+
+The punycode implementation is based on the sample code in RFC 3492
+
+Copyright (C) The Internet Society (2003).  All Rights Reserved.
+
+This document and translations of it may be copied and furnished to
+others, and derivative works that comment on or otherwise explain it
+or assist in its implementation may be prepared, copied, published
+and distributed, in whole or in part, without restriction of any
+kind, provided that the above copyright notice and this paragraph are
+included on all such copies and derivative works.  However, this
+document itself may not be modified in any way, such as by removing
+the copyright notice or references to the Internet Society or other
+Internet organizations, except as needed for the purpose of
+developing Internet standards in which case the procedures for
+copyrights defined in the Internet Standards process must be
+followed, or as required to translate it into languages other than
+English.
+
+The limited permissions granted above are perpetual and will not be
+revoked by the Internet Society or its successors or assigns.
+
+This document and the information contained herein is provided on an
+"AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
+TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
+BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
+HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
+MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
+
+Copyright(C) The Internet Society 1997. All Rights Reserved.
+
+This document and translations of it may be copied and furnished to others,
+and derivative works that comment on or otherwise explain it or assist in
+its implementation may be prepared, copied, published and distributed, in
+whole or in part, without restriction of any kind, provided that the above
+copyright notice and this paragraph are included on all such copies and
+derivative works.However, this document itself may not be modified in any
+way, such as by removing the copyright notice or references to the Internet
+Society or other Internet organizations, except as needed for the purpose of
+developing Internet standards in which case the procedures for copyrights
+defined in the Internet Standards process must be followed, or as required
+to translate it into languages other than English.
+
+The limited permissions granted above are perpetual and will not be revoked
+by the Internet Society or its successors or assigns.
+
+This document and the information contained herein is provided on an "AS IS"
+basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE
+DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO
+ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY
+RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A
+PARTICULAR PURPOSE.
+
+License notice for Algorithm from RFC 4122 -
+A Universally Unique IDentifier (UUID) URN Namespace
+----------------------------------------------------
+
+Copyright (c) 1990- 1993, 1996 Open Software Foundation, Inc.
+Copyright (c) 1989 by Hewlett-Packard Company, Palo Alto, Ca. &
+Digital Equipment Corporation, Maynard, Mass.
+Copyright (c) 1998 Microsoft.
+To anyone who acknowledges that this file is provided "AS IS"
+without any express or implied warranty: permission to use, copy,
+modify, and distribute this file for any purpose is hereby
+granted without fee, provided that the above copyright notices and
+this notice appears in all source code copies, and that none of
+the names of Open Software Foundation, Inc., Hewlett-Packard
+Company, Microsoft, or Digital Equipment Corporation be used in
+advertising or publicity pertaining to distribution of the software
+without specific, written prior permission. Neither Open Software
+Foundation, Inc., Hewlett-Packard Company, Microsoft, nor Digital
+Equipment Corporation makes any representations about the
+suitability of this software for any purpose."
+
+License notice for The LLVM Compiler Infrastructure
+---------------------------------------------------
+
+Developed by:
+
+    LLVM Team
+
+    University of Illinois at Urbana-Champaign
+
+    http://llvm.org
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal with
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+    * Redistributions of source code must retain the above copyright notice,
+      this list of conditions and the following disclaimers.
+
+    * Redistributions in binary form must reproduce the above copyright notice,
+      this list of conditions and the following disclaimers in the
+      documentation and/or other materials provided with the distribution.
+
+    * Neither the names of the LLVM Team, University of Illinois at
+      Urbana-Champaign, nor the names of its contributors may be used to
+      endorse or promote products derived from this Software without specific
+      prior written permission.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+CONTRIBUTORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS WITH THE
+SOFTWARE.
+
+License notice for Bob Jenkins
+------------------------------
+
+By Bob Jenkins, 1996.  bob_jenkins@burtleburtle.net.  You may use this
+code any way you wish, private, educational, or commercial.  It's free.
+
+License notice for Greg Parker
+------------------------------
+
+Greg Parker     gparker@cs.stanford.edu     December 2000
+This code is in the public domain and may be copied or modified without
+permission.
+
+License notice for libunwind based code
+----------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License notice for Printing Floating-Point Numbers (Dragon4)
+------------------------------------------------------------
+
+/******************************************************************************
+  Copyright (c) 2014 Ryan Juckett
+  http://www.ryanjuckett.com/
+
+  This software is provided 'as-is', without any express or implied
+  warranty. In no event will the authors be held liable for any damages
+  arising from the use of this software.
+
+  Permission is granted to anyone to use this software for any purpose,
+  including commercial applications, and to alter it and redistribute it
+  freely, subject to the following restrictions:
+
+  1. The origin of this software must not be misrepresented; you must not
+     claim that you wrote the original software. If you use this software
+     in a product, an acknowledgment in the product documentation would be
+     appreciated but is not required.
+
+  2. Altered source versions must be plainly marked as such, and must not be
+     misrepresented as being the original software.
+
+  3. This notice may not be removed or altered from any source
+     distribution.
+******************************************************************************/
+
+License notice for Printing Floating-point Numbers (Grisu3)
+-----------------------------------------------------------
+
+Copyright 2012 the V8 project authors. All rights reserved.
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+      copyright notice, this list of conditions and the following
+      disclaimer in the documentation and/or other materials provided
+      with the distribution.
+    * Neither the name of Google Inc. nor the names of its
+      contributors may be used to endorse or promote products derived
+      from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for xxHash
+-------------------------
+
+xxHash - Extremely Fast Hash algorithm
+Header File
+Copyright (C) 2012-2021 Yann Collet
+
+BSD 2-Clause License (https://www.opensource.org/licenses/bsd-license.php)
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+     notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+     copyright notice, this list of conditions and the following disclaimer
+     in the documentation and/or other materials provided with the
+     distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+You can contact the author at:
+  - xxHash homepage: https://www.xxhash.com
+  - xxHash source repository: https://github.com/Cyan4973/xxHash
+
+License notice for Berkeley SoftFloat Release 3e
+------------------------------------------------
+
+https://github.com/ucb-bar/berkeley-softfloat-3
+https://github.com/ucb-bar/berkeley-softfloat-3/blob/master/COPYING.txt
+
+License for Berkeley SoftFloat Release 3e
+
+John R. Hauser
+2018 January 20
+
+The following applies to the whole of SoftFloat Release 3e as well as to
+each source file individually.
+
+Copyright 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018 The Regents of the
+University of California.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+ 1. Redistributions of source code must retain the above copyright notice,
+    this list of conditions, and the following disclaimer.
+
+ 2. Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions, and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+ 3. Neither the name of the University nor the names of its contributors
+    may be used to endorse or promote products derived from this software
+    without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS", AND ANY
+EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE
+DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for xoshiro RNGs
+--------------------------------
+
+Written in 2018 by David Blackman and Sebastiano Vigna (vigna@acm.org)
+
+To the extent possible under law, the author has dedicated all copyright
+and related and neighboring rights to this software to the public domain
+worldwide. This software is distributed without any warranty.
+
+See <http://creativecommons.org/publicdomain/zero/1.0/>.
+
+License for fastmod (https://github.com/lemire/fastmod), ibm-fpgen (https://github.com/nigeltao/parse-number-fxx-test-data) and fastrange (https://github.com/lemire/fastrange)
+--------------------------------------
+
+   Copyright 2018 Daniel Lemire
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+License for sse4-strstr (https://github.com/WojciechMula/sse4-strstr)
+--------------------------------------
+
+   Copyright (c) 2008-2016, Wojciech Mula
+   All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions are
+   met:
+
+   1. Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+
+   2. Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+   IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+   TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+   PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+   HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
+   TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+   PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+   LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+   NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+   SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for The C++ REST SDK
+-----------------------------------
+
+C++ REST SDK
+
+The MIT License (MIT)
+
+Copyright (c) Microsoft Corporation
+
+All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+License notice for MessagePack-CSharp
+-------------------------------------
+
+MessagePack for C#
+
+MIT License
+
+Copyright (c) 2017 Yoshifumi Kawai
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+License notice for lz4net
+-------------------------------------
+
+lz4net
+
+Copyright (c) 2013-2017, Milosz Krajewski
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for Nerdbank.Streams
+-----------------------------------
+
+The MIT License (MIT)
+
+Copyright (c) Andrew Arnott
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+License notice for RapidJSON
+----------------------------
+
+Tencent is pleased to support the open source community by making RapidJSON available.
+
+Copyright (C) 2015 THL A29 Limited, a Tencent company, and Milo Yip. All rights reserved.
+
+Licensed under the MIT License (the "License"); you may not use this file except
+in compliance with the License. You may obtain a copy of the License at
+
+http://opensource.org/licenses/MIT
+
+Unless required by applicable law or agreed to in writing, software distributed
+under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied. See the License for the
+specific language governing permissions and limitations under the License.
+
+License notice for DirectX Math Library
+---------------------------------------
+
+https://github.com/microsoft/DirectXMath/blob/master/LICENSE
+
+                               The MIT License (MIT)
+
+Copyright (c) 2011-2020 Microsoft Corp
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this
+software and associated documentation files (the "Software"), to deal in the Software
+without restriction, including without limitation the rights to use, copy, modify,
+merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be included in all copies
+or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
+CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE
+OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License notice for ldap4net
+---------------------------
+
+The MIT License (MIT)
+
+Copyright (c) 2018 Alexander Chermyanin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License notice for vectorized sorting code
+------------------------------------------
+
+MIT License
+
+Copyright (c) 2020 Dan Shechter
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+License notice for musl
+-----------------------
+
+musl as a whole is licensed under the following standard MIT license:
+
+Copyright © 2005-2020 Rich Felker, et al.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+License notice for "Faster Unsigned Division by Constants"
+------------------------------
+
+Reference implementations of computing and using the "magic number" approach to dividing
+by constants, including codegen instructions. The unsigned division incorporates the
+"round down" optimization per ridiculous_fish.
+
+This is free and unencumbered software. Any copyright is dedicated to the Public Domain.
+
+
+License notice for mimalloc
+-----------------------------------
+
+MIT License
+
+Copyright (c) 2019 Microsoft Corporation, Daan Leijen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+License for remote stack unwind (https://github.com/llvm/llvm-project/blob/main/lldb/source/Symbol/CompactUnwindInfo.cpp)
+--------------------------------------
+
+Copyright 2019 LLVM Project
+
+Licensed under the Apache License, Version 2.0 (the "License") with LLVM Exceptions;
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://llvm.org/LICENSE.txt
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+License notice for Apple header files
+-------------------------------------
+
+Copyright (c) 1980, 1986, 1993
+   The Regents of the University of California.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+3. All advertising materials mentioning features or use of this software
+   must display the following acknowledgement:
+   This product includes software developed by the University of
+   California, Berkeley and its contributors.
+4. Neither the name of the University nor the names of its contributors
+   may be used to endorse or promote products derived from this software
+   without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGE.
+
+License notice for JavaScript queues
+-------------------------------------
+
+CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED HEREUNDER.
+
+Statement of Purpose
+The laws of most jurisdictions throughout the world automatically confer exclusive Copyright and Related Rights (defined below) upon the creator and subsequent owner(s) (each and all, an "owner") of an original work of authorship and/or a database (each, a "Work").
+Certain owners wish to permanently relinquish those rights to a Work for the purpose of contributing to a commons of creative, cultural and scientific works ("Commons") that the public can reliably and without fear of later claims of infringement build upon, modify, incorporate in other works, reuse and redistribute as freely as possible in any form whatsoever and for any purposes, including without limitation commercial purposes. These owners may contribute to the Commons to promote the ideal of a free culture and the further production of creative, cultural and scientific works, or to gain reputation or greater distribution for their Work in part through the use and efforts of others.
+For these and/or other purposes and motivations, and without any expectation of additional consideration or compensation, the person associating CC0 with a Work (the "Affirmer"), to the extent that he or she is an owner of Copyright and Related Rights in the Work, voluntarily elects to apply CC0 to the Work and publicly distribute the Work under its terms, with knowledge of his or her Copyright and Related Rights in the Work and the meaning and intended legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be protected by copyright and related or neighboring rights ("Copyright and Related Rights"). Copyright and Related Rights include, but are not limited to, the following:
+the right to reproduce, adapt, distribute, perform, display, communicate, and translate a Work;
+moral rights retained by the original author(s) and/or performer(s);
+publicity and privacy rights pertaining to a person's image or likeness depicted in a Work;
+rights protecting against unfair competition in regards to a Work, subject to the limitations in paragraph 4(a), below;
+rights protecting the extraction, dissemination, use and reuse of data in a Work;
+database rights (such as those arising under Directive 96/9/EC of the European Parliament and of the Council of 11 March 1996 on the legal protection of databases, and under any national implementation thereof, including any amended or successor version of such directive); and
+other similar, equivalent or corresponding rights throughout the world based on applicable law or treaty, and any national implementations thereof.
+2. Waiver. To the greatest extent permitted by, but not in contravention of, applicable law, Affirmer hereby overtly, fully, permanently, irrevocably and unconditionally waives, abandons, and surrenders all of Affirmer's Copyright and Related Rights and associated claims and causes of action, whether now known or unknown (including existing as well as future claims and causes of action), in the Work (i) in all territories worldwide, (ii) for the maximum duration provided by applicable law or treaty (including future time extensions), (iii) in any current or future medium and for any number of copies, and (iv) for any purpose whatsoever, including without limitation commercial, advertising or promotional purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each member of the public at large and to the detriment of Affirmer's heirs and successors, fully intending that such Waiver shall not be subject to revocation, rescission, cancellation, termination, or any other legal or equitable action to disrupt the quiet enjoyment of the Work by the public as contemplated by Affirmer's express Statement of Purpose.
+3. Public License Fallback. Should any part of the Waiver for any reason be judged legally invalid or ineffective under applicable law, then the Waiver shall be preserved to the maximum extent permitted taking into account Affirmer's express Statement of Purpose. In addition, to the extent the Waiver is so judged Affirmer hereby grants to each affected person a royalty-free, non transferable, non sublicensable, non exclusive, irrevocable and unconditional license to exercise Affirmer's Copyright and Related Rights in the Work (i) in all territories worldwide, (ii) for the maximum duration provided by applicable law or treaty (including future time extensions), (iii) in any current or future medium and for any number of copies, and (iv) for any purpose whatsoever, including without limitation commercial, advertising or promotional purposes (the "License"). The License shall be deemed effective as of the date CC0 was applied by Affirmer to the Work. Should any part of the License for any reason be judged legally invalid or ineffective under applicable law, such partial invalidity or ineffectiveness shall not invalidate the remainder of the License, and in such case Affirmer hereby affirms that he or she will not (i) exercise any of his or her remaining Copyright and Related Rights in the Work or (ii) assert any associated claims and causes of action with respect to the Work, in either case contrary to Affirmer's express Statement of Purpose.
+4. Limitations and Disclaimers.
+a. No trademark or patent rights held by Affirmer are waived, abandoned, surrendered, licensed or otherwise affected by this document.
+b. Affirmer offers the Work as-is and makes no representations or warranties of any kind concerning the Work, express, implied, statutory or otherwise, including without limitation warranties of title, merchantability, fitness for a particular purpose, non infringement, or the absence of latent or other defects, accuracy, or the present or absence of errors, whether or not discoverable, all to the greatest extent permissible under applicable law.
+c. Affirmer disclaims responsibility for clearing rights of other persons that may apply to the Work or any use thereof, including without limitation any person's Copyright and Related Rights in the Work. Further, Affirmer disclaims responsibility for obtaining any necessary consents, permissions or other rights required for any use of the Work.
+d. Affirmer understands and acknowledges that Creative Commons is not a party to this document and has no duty or obligation with respect to this CC0 or use of the Work.
+
+
+License notice for FastFloat algorithm
+-------------------------------------
+MIT License
+Copyright (c) 2021 csFastFloat authors
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+License notice for MsQuic
+--------------------------------------
+
+Copyright (c) Microsoft Corporation.
+Licensed under the MIT License.
+
+Available at
+https://github.com/microsoft/msquic/blob/main/LICENSE
+
+License notice for m-ou-se/floatconv
+-------------------------------
+
+Copyright (c) 2020 Mara Bos <m-ou.se@m-ou.se>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License notice for code from The Practice of Programming
+-------------------------------
+
+Copyright (C) 1999 Lucent Technologies
+
+Excerpted from 'The Practice of Programming
+by Brian W. Kernighan and Rob Pike
+
+You may use this code for any purpose, as long as you leave the copyright notice and book citation attached.
+
+Notice for Euclidean Affine Functions and Applications to Calendar
+Algorithms
+-------------------------------
+
+Aspects of Date/Time processing based on algorithm described in "Euclidean Affine Functions and Applications to Calendar
+Algorithms", Cassio Neri and Lorenz Schneider. https://arxiv.org/pdf/2102.06959.pdf
+
+License notice for amd/aocl-libm-ose
+-------------------------------
+
+Copyright (C) 2008-2020 Advanced Micro Devices, Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+1. Redistributions of source code must retain the above copyright notice,
+   this list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+3. Neither the name of the copyright holder nor the names of its contributors
+   may be used to endorse or promote products derived from this software without
+   specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
+OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+
+License notice for fmtlib/fmt
+-------------------------------
+
+Formatting library for C++
+
+Copyright (c) 2012 - present, Victor Zverovich
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License for Jb Evain
+---------------------
+
+Copyright (c) 2006 Jb Evain (jbevain@gmail.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+--- Optional exception to the license ---
+
+As an exception, if, as a result of your compiling your source code, portions
+of this Software are embedded into a machine-executable object form of such
+source code, you may redistribute such embedded portions in such object form
+without including the above copyright and permission notices.
+
+
+License for MurmurHash3
+--------------------------------------
+
+https://github.com/aappleby/smhasher/blob/master/src/MurmurHash3.cpp
+
+MurmurHash3 was written by Austin Appleby, and is placed in the public
+domain. The author hereby disclaims copyright to this source
+
+License for Fast CRC Computation
+--------------------------------------
+
+https://github.com/intel/isa-l/blob/33a2d9484595c2d6516c920ce39a694c144ddf69/crc/crc32_ieee_by4.asm
+https://github.com/intel/isa-l/blob/33a2d9484595c2d6516c920ce39a694c144ddf69/crc/crc64_ecma_norm_by8.asm
+
+Copyright(c) 2011-2015 Intel Corporation All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in
+    the documentation and/or other materials provided with the
+    distribution.
+  * Neither the name of Intel Corporation nor the names of its
+    contributors may be used to endorse or promote products derived
+    from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License for C# Implementation of Fast CRC Computation
+-----------------------------------------------------
+
+https://github.com/SixLabors/ImageSharp/blob/f4f689ce67ecbcc35cebddba5aacb603e6d1068a/src/ImageSharp/Formats/Png/Zlib/Crc32.cs
+
+Copyright (c) Six Labors.
+Licensed under the Apache License, Version 2.0.
+
+Available at
+https://github.com/SixLabors/ImageSharp/blob/f4f689ce67ecbcc35cebddba5aacb603e6d1068a/LICENSE
+
+License for the Teddy multi-substring searching implementation
+--------------------------------------
+
+https://github.com/BurntSushi/aho-corasick
+
+The MIT License (MIT)
+
+Copyright (c) 2015 Andrew Gallant
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+License notice for Avx512Vbmi base64 encoding / decoding
+--------------------------------------------------------
+
+Copyright (c) 2015-2018, Wojciech Muła
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
+TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+--------------------------------------------------------
+
+Aspects of base64 encoding / decoding are based on algorithm described in "Base64 encoding and decoding at almost the speed of a memory
+copy", Wojciech Muła and Daniel Lemire. https://arxiv.org/pdf/1910.05109.pdf
+
+License for FormatJS Intl.Segmenter grapheme segmentation algorithm
+--------------------------------------------------------------------------
+Available at https://github.com/formatjs/formatjs/blob/58d6a7b398d776ca3d2726d72ae1573b65cc3bef/packages/intl-segmenter/LICENSE.md
+
+MIT License
+
+Copyright (c) 2022 FormatJS
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License for SharpFuzz and related samples
+--------------------------------------
+
+https://github.com/Metalnem/sharpfuzz
+https://github.com/Metalnem/dotnet-fuzzers
+https://github.com/Metalnem/libfuzzer-dotnet
+
+MIT License
+
+Copyright (c) 2018 Nemanja Mijailovic
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/THIRD-PARTY-NOTICES.md b/THIRD-PARTY-NOTICES.md
new file mode 100644
index 0000000..b07a34a
--- /dev/null
+++ b/THIRD-PARTY-NOTICES.md
@@ -0,0 +1,254 @@
+# Third-party notices
+
+These notices accompany the libraries and platform components used by MarkdownViewr.
+
+## Markdig 1.4.0
+
+Source: <https://github.com/xoofx/markdig>
+
+Copyright (c) 2016-2026, Alexandre Mutel
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification
+, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+## HtmlSanitizer 9.2.1039
+
+Source: <https://github.com/mganss/HtmlSanitizer>
+
+The MIT License (MIT)
+
+Copyright (c) 2013-2016 Michael Ganss and HtmlSanitizer contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## AngleSharp 1.7.2
+
+Source: <https://github.com/AngleSharp/AngleSharp>
+
+The MIT License (MIT)
+
+Copyright (c) 2013 - 2026 AngleSharp
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## AngleSharp.Css 1.0.2
+
+Source: <https://github.com/AngleSharp/AngleSharp.Css>
+
+The MIT License (MIT)
+
+Copyright (c) 2013 - 2026 AngleSharp
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## markdownViewr resources, frontmatter and navigation behavior
+
+This Windows application is based on **Darin Kelkhoff's macOS markdownViewr**.
+Original project: [darinkelkhoff/markdownViewr](https://github.com/darinkelkhoff/markdownViewr).
+Author website: [kelkhoff.com](https://kelkhoff.com/). Windows issues and support
+belong to the Windows repository; this attribution does not imply endorsement.
+
+Per-window reading zoom bounds/steps and native minus/percentage/plus behavior are
+adapted from ContentView.swift and MarkdownViewrApp.swift. Font-size scaling is
+adapted from ThemeManager.swift; original theme JSON and line height stay unchanged.
+
+Frontmatter delimiter/metadata display behavior is adapted from MarkdownDocument.swift at the same pinned commit. Raw-HTML highlight/superscript/underline behavior and the metadata/body subscript boundary are also adapted from that file. Windows applies these patterns only to tokenizer-identified visible text, preserving attributes, comments, authored code and original source positions before passive sanitation. Named editor identities, list ordering/removal and file/folder opening semantics are adapted from EditorConfig.swift there; Windows uses bounded .exe choices and one literal process argument. Vim sequence/navigation, nested source folding and heading-anchor scroll interpolation semantics are adapted from Resources/template.html there, with native Windows Ctrl+F, literal source controls and input focus guards. The 20 original JSON themes are copied unchanged from Darin Kelkhoff's markdownViewr at commit 6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021.
+
+Source: <https://github.com/darinkelkhoff/markdownViewr/tree/6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021/markdownViewr/Resources/themes>
+
+MIT License
+
+Copyright (c) 2026 Darin Kelkhoff
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+The print defaults, Clean Printing palette and print-media layout rules in
+`Core/Printing/` and the native print adapter are adapted from Darin Kelkhoff's
+MIT-licensed markdownViewr (`6d08bc9`), with original/adaptation copyright headers
+retained. Actual PDF acceptance uses the built-in Windows PDF API; no additional
+PDF renderer/parser package is shipped.
+
+## Complete application and tooling inventory
+
+About → Components links each direct/transitive application dependency.
+Development/test tools are acknowledged separately and are not described as
+shipped application libraries. Microsoft SDK packages include their own binary
+license terms; they are not all labeled MIT. Inventory below was checked against
+restored package assets and packaged license metadata.
+
+| Component | Version | Scope | Project | License |
+| --- | --- | --- | --- | --- |
+| AngleSharp.Css | 1.0.2 | Application | [Project](https://github.com/AngleSharp/AngleSharp.Css) | [MIT](https://licenses.nuget.org/MIT) |
+| AngleSharp | 1.7.2 | Application | [Project](https://github.com/AngleSharp/AngleSharp) | [MIT](https://licenses.nuget.org/MIT) |
+| HtmlSanitizer | 9.2.1039 | Application | [Project](https://github.com/mganss/HtmlSanitizer) | [MIT](https://licenses.nuget.org/MIT) |
+| KofTwentyTwo.AppKit.Updates | 0.1.0 | Application | [Project](https://github.com/KofTwentyTwo/AppKit) | [MIT](https://licenses.nuget.org/MIT) |
+| KofTwentyTwo.AppKit.WinUI | 0.1.0 | Application | [Project](https://github.com/KofTwentyTwo/AppKit) | [MIT](https://licenses.nuget.org/MIT) |
+| KofTwentyTwo.AppKit | 0.1.0 | Application | [Project](https://github.com/KofTwentyTwo/AppKit) | [MIT](https://licenses.nuget.org/MIT) |
+| Markdig | 1.4.0 | Application | [Project](https://github.com/xoofx/markdig) | [BSD-2-Clause](https://licenses.nuget.org/BSD-2-Clause) |
+| Meziantou.Analyzer | 3.0.296 | Development | [Project](https://github.com/meziantou/Meziantou.Analyzer) | [MIT](https://licenses.nuget.org/MIT) |
+| Microsoft.Web.WebView2 | 1.0.3719.77 | Application | [Project](https://aka.ms/webview) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.Web.WebView2/1.0.3719.77/License) |
+| Microsoft.Windows.AI.MachineLearning | 2.1.74 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.Windows.AI.MachineLearning/2.1.74/License) |
+| Microsoft.Windows.SDK.BuildTools.MSIX | 1.7.251221100 | Development | [Project](https://aka.ms/WinSDKProjectURL) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.Windows.SDK.BuildTools.MSIX/1.7.251221100/License) |
+| Microsoft.Windows.SDK.BuildTools | 10.0.28000.2705 | Development | [Project](https://aka.ms/WinSDKProjectURL) | [Package license](https://www.nuget.org/packages/Microsoft.Windows.SDK.BuildTools/10.0.28000.2705/License) |
+| Microsoft.WindowsAppSDK.AI | 2.5.5 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.AI/2.5.5/License) |
+| Microsoft.WindowsAppSDK.Base | 2.0.4 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Base/2.0.4/License) |
+| Microsoft.WindowsAppSDK.DWrite | 2.1.0 | Application | [Project](https://aka.ms/WindowsAppSDK) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.DWrite/2.1.0/License) |
+| Microsoft.WindowsAppSDK.Foundation | 2.3.12 | Application | [Project](https://aka.ms/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Foundation/2.3.12/License) |
+| Microsoft.WindowsAppSDK.InteractiveExperiences | 2.1.9 | Application | [Project](https://aka.ms/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.InteractiveExperiences/2.1.9/License) |
+| Microsoft.WindowsAppSDK.ML | 2.1.94 | Application | [Project](https://github.com/microsoft/windowsml) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.ML/2.1.94/License) |
+| Microsoft.WindowsAppSDK.Runtime | 2.5.1 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Runtime/2.5.1/License) |
+| Microsoft.WindowsAppSDK.Search | 2.5.5 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Search/2.5.5/License) |
+| Microsoft.WindowsAppSDK.Widgets | 2.0.5 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Widgets/2.0.5/License) |
+| Microsoft.WindowsAppSDK.WinUI | 2.3.9 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK.WinUI/2.3.9/License) |
+| Microsoft.WindowsAppSDK | 2.5.1 | Application | [Project](https://github.com/microsoft/windowsappsdk) | [Microsoft package license](https://www.nuget.org/packages/Microsoft.WindowsAppSDK/2.5.1/License) |
+| System.Numerics.Tensors | 9.0.0 | Application | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| Velopack | 1.2.161 | Application | [Project](https://github.com/velopack/velopack) | [MIT](https://licenses.nuget.org/MIT) |
+| Microsoft.CodeCoverage | 18.10.1 | Development | [Project](https://github.com/microsoft/vstest) | [MIT](https://licenses.nuget.org/MIT) |
+| Microsoft.NET.Test.Sdk | 18.10.1 | Development | [Project](https://github.com/microsoft/vstest) | [MIT](https://licenses.nuget.org/MIT) |
+| Microsoft.TestPlatform.ObjectModel | 18.10.1 | Development | [Project](https://github.com/microsoft/vstest) | [MIT](https://licenses.nuget.org/MIT) |
+| Microsoft.TestPlatform.TestHost | 18.10.1 | Development | [Project](https://github.com/microsoft/vstest) | [MIT](https://licenses.nuget.org/MIT) |
+| coverlet.collector | 10.1.0 | Development | [Project](https://github.com/coverlet-coverage/coverlet) | [MIT](https://licenses.nuget.org/MIT) |
+| xunit.abstractions | 2.0.3 | Development | [Project](https://github.com/xunit/xunit) | [Package license](https://www.nuget.org/packages/xunit.abstractions/2.0.3/License) |
+| xunit.analyzers | 1.18.0 | Development | [Project](https://github.com/xunit/xunit.analyzers) | [Apache-2.0](https://licenses.nuget.org/Apache-2.0) |
+| xunit.assert | 2.9.3 | Development | [Project](https://github.com/xunit/xunit) | [Apache-2.0](https://licenses.nuget.org/Apache-2.0) |
+| xunit.core | 2.9.3 | Development | [Project](https://github.com/xunit/xunit) | [Apache-2.0](https://licenses.nuget.org/Apache-2.0) |
+| xunit.extensibility.core | 2.9.3 | Development | [Project](https://github.com/xunit/xunit) | [Apache-2.0](https://licenses.nuget.org/Apache-2.0) |
+| xunit.extensibility.execution | 2.9.3 | Development | [Project](https://github.com/xunit/xunit) | [Apache-2.0](https://licenses.nuget.org/Apache-2.0) |
+| xunit.runner.visualstudio | 4.0.0 | Development | [Project](https://github.com/xunit/visualstudio.xunit) | [Apache-2.0](https://licenses.nuget.org/Apache-2.0) |
+| xunit | 2.9.3 | Development | [Project](https://github.com/xunit/xunit) | [Apache-2.0](https://licenses.nuget.org/Apache-2.0) |
+| FlaUI.Core | 5.0.0 | Development | [Project](https://github.com/FlaUI/FlaUI) | [MIT](https://www.nuget.org/packages/FlaUI.Core/5.0.0/License) |
+| FlaUI.UIA3 | 5.0.0 | Development | [Project](https://github.com/FlaUI/FlaUI) | [MIT](https://www.nuget.org/packages/FlaUI.UIA3/5.0.0/License) |
+| Interop.UIAutomationClient | 10.19041.0 | Development | [Project](https://github.com/Roemer/UIAutomation-Interop) | [MIT](https://www.nuget.org/packages/Interop.UIAutomationClient/10.19041.0/License) |
+| Microsoft.Win32.SystemEvents | 8.0.0 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.CodeDom | 8.0.0 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Configuration.ConfigurationManager | 8.0.1 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Diagnostics.EventLog | 8.0.1 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Diagnostics.PerformanceCounter | 8.0.1 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Drawing.Common | 8.0.10 | Development | [Project](https://github.com/dotnet/winforms) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Management | 8.0.0 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Security.Cryptography.ProtectedData | 8.0.0 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Security.Permissions | 8.0.0 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| System.Windows.Extensions | 8.0.0 | Development | [Project](https://github.com/dotnet/runtime) | [MIT](https://licenses.nuget.org/MIT) |
+| .NET Runtime | 10 | Application platform | [Project](https://github.com/dotnet/runtime) | [MIT](https://github.com/dotnet/runtime/blob/main/LICENSE.TXT), [third-party notices](https://github.com/dotnet/runtime/blob/main/THIRD-PARTY-NOTICES.TXT) |
+
+Additional packaged license and notice files are retained verbatim under
+`THIRD-PARTY-LICENSES/` and copied to `ThirdPartyLicenses/` in application output.
+Identical texts shared by multiple SDK packages are stored once.
+
+- Microsoft.Web.WebView2 1.0.3719.77: [Microsoft.Web.WebView2-1.0.3719.77-LICENSE.txt](THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-LICENSE.txt)
+- Microsoft.Web.WebView2 1.0.3719.77: [Microsoft.Web.WebView2-1.0.3719.77-NOTICE.txt](THIRD-PARTY-LICENSES/Microsoft.Web.WebView2-1.0.3719.77-NOTICE.txt)
+- Microsoft.Windows.AI.MachineLearning 2.1.74: [Microsoft.Windows.AI.MachineLearning-2.1.74-ThirdPartyNotices.txt](THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-ThirdPartyNotices.txt)
+- Microsoft.Windows.AI.MachineLearning 2.1.74: [Microsoft.Windows.AI.MachineLearning-2.1.74-license.txt](THIRD-PARTY-LICENSES/Microsoft.Windows.AI.MachineLearning-2.1.74-license.txt)
+- Microsoft.WindowsAppSDK 2.5.1: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK 2.5.1: [Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt)
+- Microsoft.WindowsAppSDK.AI 2.5.5: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.Base 2.0.4: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.Base 2.0.4: [Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt)
+- Microsoft.WindowsAppSDK.DWrite 2.1.0: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.Foundation 2.3.12: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.InteractiveExperiences 2.1.9: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.ML 2.1.94: [Microsoft.WindowsAppSDK.ML-2.1.94-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.ML-2.1.94-license.txt)
+- Microsoft.WindowsAppSDK.Runtime 2.5.1: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.Runtime 2.5.1: [Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.Base-2.0.4-NOTICE.txt)
+- Microsoft.WindowsAppSDK.Search 2.5.5: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.Widgets 2.0.5: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.WinUI 2.3.9: [Microsoft.WindowsAppSDK.AI-2.5.5-license.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.AI-2.5.5-license.txt)
+- Microsoft.WindowsAppSDK.WinUI 2.3.9: [Microsoft.WindowsAppSDK.WinUI-2.3.9-NOTICE.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-NOTICE.txt)
+- Microsoft.WindowsAppSDK.WinUI 2.3.9: [Microsoft.WindowsAppSDK.WinUI-2.3.9-tools-NOTICE.txt](THIRD-PARTY-LICENSES/Microsoft.WindowsAppSDK.WinUI-2.3.9-tools-NOTICE.txt)
+- System.Numerics.Tensors 9.0.0: [System.Numerics.Tensors-9.0.0-LICENSE.TXT](THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-LICENSE.TXT)
+- System.Numerics.Tensors 9.0.0: [System.Numerics.Tensors-9.0.0-THIRD-PARTY-NOTICES.TXT](THIRD-PARTY-LICENSES/System.Numerics.Tensors-9.0.0-THIRD-PARTY-NOTICES.TXT)
+
+
+## Reference document stylesheet and containers
+
+The embedded `Themes/Document.css` and document container/navigation adaptations
+are based on Darin Kelkhoff's MIT-licensed markdownViewr at commit
+`6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021`. The original document rules, variable
+aliases and `#content` / `#content-inner` structure are retained with Windows
+sanitization, scrolling and print integration. Source files retain Darin's
+copyright and MIT identifiers; the full original MIT notice above accompanies
+the application. Original project: <https://github.com/darinkelkhoff/markdownViewr>.
+Author website: <https://kelkhoff.com/>.
diff --git a/build/GitHubRepository.Tests.ps1 b/build/GitHubRepository.Tests.ps1
index 9f7cb66..29fa31c 100644
--- a/build/GitHubRepository.Tests.ps1
+++ b/build/GitHubRepository.Tests.ps1
@@ -29,11 +29,11 @@ Describe 'Offline setup preview location' `
 
 Describe 'Required checks match standalone workflow jobs' `
 {
-   It 'requires the actual check names from both CI and script workflows' `
+   It 'requires the actual check names from CI, script and fuzz workflows' `
    {
       $plan = Get-GitHubRepositoryPlan -Repository 'Example/Notes'
       $workflowRoot = Join-Path (Split-Path -Parent $PSScriptRoot) '.github/workflows'
-      foreach($workflow in @('ci.yml', 'scripts.yml'))
+      foreach($workflow in @('ci.yml', 'scripts.yml', 'fuzz.yml'))
       {
          $names = @(Select-String -LiteralPath (Join-Path $workflowRoot $workflow) -Pattern '^    name: ')
          $names.Count | Should -BeGreaterThan 0
diff --git a/build/GitHubRepository.psm1 b/build/GitHubRepository.psm1
index 0e6923c..0fc0256 100644
--- a/build/GitHubRepository.psm1
+++ b/build/GitHubRepository.psm1
@@ -22,7 +22,7 @@ function Get-GitHubRepositoryPlan
    $contexts = @('pr / title', 'pr / dco', 'pr / dependency-review', 'security / secrets',
       'security / sca', 'security / workflows', 'codeql / analyze (csharp)',
       'codeql / analyze (actions)', 'codeql / analyze (javascript-typescript)',
-      'ci / build-test', 'ci / format', 'ci / ui-tests', 'installed-updates', 'powershell', 'javascript')
+      'ci / build-test', 'ci / format', 'ci / ui-tests', 'installed-updates', 'reader-regressions', 'fuzzing', 'powershell', 'javascript')
    if(Test-Path -LiteralPath (Join-Path (Split-Path -Parent $PSScriptRoot) 'templates/KofTwentyTwo.Templates.WindowsApp.csproj'))
    {
       $contexts += 'template'
diff --git a/build/InstalledUpdates.Tests.ps1 b/build/InstalledUpdates.Tests.ps1
index acaeebe..8038327 100644
--- a/build/InstalledUpdates.Tests.ps1
+++ b/build/InstalledUpdates.Tests.ps1
@@ -13,8 +13,26 @@ Describe 'Installed update smoke boundaries' `
       $script:SmokeArtifacts = Join-Path (Split-Path -Parent $PSScriptRoot) 'artifacts'
       $script:SmokeAppId = [regex]::Match((Get-Content -LiteralPath (Join-Path (Split-Path -Parent $PSScriptRoot) 'src/MarkdownViewr.Windows.Core/AppIdentity.cs') -Raw), '(?m)^\s*Id\s*=\s*"([a-z0-9][a-z0-9-]*)"').Groups[1].Value
       $ast = [Management.Automation.Language.Parser]::ParseFile($script:SmokeHarness, [ref]$null, [ref]$null)
-      $versionCheck = $ast.Find({ param($node) $node -is [Management.Automation.Language.FunctionDefinitionAst] -and $node.Name -eq 'Assert-SmokeCliVersion' }, $true)
-      . ([scriptblock]::Create($versionCheck.Extent.Text))
+      foreach($name in @('Assert-SmokeCliVersion', 'Get-SmokeDefaultChoiceSnapshot', 'Get-SmokeFileRegistration', 'Assert-SmokeFileRegistrationRemoved', 'Assert-SmokeInstallationOwner'))
+      {
+         $function = $ast.Find({ param($node) $node -is [Management.Automation.Language.FunctionDefinitionAst] -and $node.Name -eq $name }, $true)
+         . ([scriptblock]::Create($function.Extent.Text))
+      }
+   }
+
+   It 'requires an actual matching manifest inside the resolved artifact boundary before uninstall' `
+   {
+      $root = Join-Path $TestDrive 'artifacts'
+      $install = Join-Path $root 'owned installation'
+      New-Item -ItemType Directory -Path (Join-Path $install 'current') -Force | Out-Null
+      $manifest = Join-Path $install 'current/sq.version'
+      '<package><metadata><id>owned-stable</id><version>0.4.0</version></metadata></package>' | Set-Content -LiteralPath $manifest
+      { Assert-SmokeInstallationOwner -Install $install -PackageIdentity 'owned-stable' -ArtifactRoot $root } | Should -Not -Throw
+      { Assert-SmokeInstallationOwner -Install $install -PackageIdentity 'owned-dev' -ArtifactRoot $root } | Should -Throw '*unexpected application*'
+      { Assert-SmokeInstallationOwner -Install (Join-Path $root '../outside') -PackageIdentity 'owned-stable' -ArtifactRoot $root } | Should -Throw '*outside the smoke artifact boundary*'
+      { Assert-SmokeInstallationOwner -Install (Join-Path $TestDrive 'artifacts-other') -PackageIdentity 'owned-stable' -ArtifactRoot $root } | Should -Throw '*outside the smoke artifact boundary*'
+      { Assert-SmokeInstallationOwner -Install (Join-Path $root 'missing') -PackageIdentity 'owned-stable' -ArtifactRoot $root } | Should -Throw
+      $manifest | Should -Exist
    }
 
    It 'accepts CLI version without Git metadata outside a checkout' `
@@ -59,3 +77,106 @@ Describe 'Installed update smoke boundaries' `
       finally { Remove-Item -LiteralPath $output }
    }
 }
+
+
+Describe 'Actual registry readbacks for installed file types' `
+{
+   BeforeAll `
+   {
+      $ast = [Management.Automation.Language.Parser]::ParseFile((Join-Path $PSScriptRoot 'Test-InstalledUpdates.ps1'), [ref]$null, [ref]$null)
+      foreach($name in @('Get-SmokeDefaultChoiceSnapshot', 'Get-SmokeFileRegistration', 'Assert-SmokeFileRegistrationRemoved'))
+      {
+         $function = $ast.Find({ param($node) $node -is [Management.Automation.Language.FunctionDefinitionAst] -and $node.Name -eq $name }, $true)
+         . ([scriptblock]::Create($function.Extent.Text))
+      }
+   }
+
+   BeforeEach `
+   {
+      $script:FixtureRelative = 'Software\KofTwentyTwo\MarkdownViewr.Windows.SmokeRegistrationTests\' + [guid]::NewGuid().ToString('N')
+      $script:FixtureRoot = [Microsoft.Win32.Registry]::CurrentUser.CreateSubKey($script:FixtureRelative)
+      $script:Exe = Join-Path $TestDrive 'installed app/current/MarkdownViewr.Windows.exe'
+      $script:Identity = 'KofTwentyTwo.MarkdownViewr.stable.fixture'
+      $script:Capabilities = "Software\KofTwentyTwo\MarkdownViewr\FileAssociations\$script:Identity\Capabilities"
+      $key = $script:FixtureRoot.CreateSubKey('Software\RegisteredApplications')
+      $key.SetValue($script:Identity, $script:Capabilities)
+      $key.Dispose()
+      $key = $script:FixtureRoot.CreateSubKey("Software\Classes\$script:Identity\shell\open\command")
+      $key.SetValue('', '"' + $script:Exe + '" "%1"')
+      $key.Dispose()
+      $key = $script:FixtureRoot.CreateSubKey("$script:Capabilities\FileAssociations")
+      foreach($extension in @('.md', '.markdown', '.mdown', '.mkd', '.txt')) { $key.SetValue($extension, $script:Identity) }
+      $key.Dispose()
+      foreach($extension in @('.md', '.markdown', '.mdown', '.mkd', '.txt'))
+      {
+         $key = $script:FixtureRoot.CreateSubKey("Software\Classes\$extension")
+         $key.SetValue('', 'Other.Reader')
+         $key.Dispose()
+         $key = $script:FixtureRoot.CreateSubKey("Software\Classes\$extension\OpenWithProgids")
+         $key.SetValue($script:Identity, '')
+         $key.SetValue('Other.Reader', '')
+         $key.Dispose()
+         $key = $script:FixtureRoot.CreateSubKey("Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\$extension\UserChoice")
+         $key.SetValue('ProgId', 'Other.Reader')
+         $key.SetValue('Hash', 'existing-choice-fixture')
+         $key.Dispose()
+      }
+   }
+
+   AfterEach `
+   {
+      $script:FixtureRoot.Dispose()
+      [Microsoft.Win32.Registry]::CurrentUser.DeleteSubKeyTree($script:FixtureRelative)
+   }
+
+   It 'recognizes only the exact installed executable and channel without changing defaults' `
+   {
+      $before = Get-SmokeDefaultChoiceSnapshot -RegistryRoot $script:FixtureRoot | ConvertTo-Json -Depth 3 -Compress
+      $registration = Get-SmokeFileRegistration -Exe $script:Exe -Channel stable -RegistryRoot $script:FixtureRoot
+      $registration.ProgId | Should -BeExactly $script:Identity
+      $registration.ExtensionsVerified | Should -Be 5
+      { Get-SmokeFileRegistration -Exe $script:Exe -Channel dev -RegistryRoot $script:FixtureRoot } | Should -Throw '*exactly one*'
+      { Get-SmokeFileRegistration -Exe (Join-Path $TestDrive 'other.exe') -Channel stable -RegistryRoot $script:FixtureRoot } | Should -Throw '*exactly one*'
+      (Get-SmokeDefaultChoiceSnapshot -RegistryRoot $script:FixtureRoot | ConvertTo-Json -Depth 3 -Compress) | Should -BeExactly $before
+   }
+
+   It 'rejects a missing Open With registration for <MissingExtension>' -ForEach @(
+      @{ MissingExtension = '.md' }, @{ MissingExtension = '.markdown' }, @{ MissingExtension = '.mdown' }, @{ MissingExtension = '.mkd' }, @{ MissingExtension = '.txt' }
+   ) `
+   {
+      $key = $script:FixtureRoot.OpenSubKey("Software\Classes\$MissingExtension\OpenWithProgids", $true)
+      $key.DeleteValue($script:Identity)
+      $key.Dispose()
+      { Get-SmokeFileRegistration -Exe $script:Exe -Channel stable -RegistryRoot $script:FixtureRoot } | Should -Throw '*Open With extension*'
+   }
+
+   It 'rejects an advertised extension mapped to a different application' `
+   {
+      $key = $script:FixtureRoot.OpenSubKey("$script:Capabilities\FileAssociations", $true)
+      $key.SetValue('.txt', 'Other.Reader')
+      $key.Dispose()
+      { Get-SmokeFileRegistration -Exe $script:Exe -Channel stable -RegistryRoot $script:FixtureRoot } | Should -Throw '*Default Apps extension*'
+   }
+
+   It 'requires complete owned cleanup while leaving unrelated Open With and defaults intact' `
+   {
+      $before = Get-SmokeDefaultChoiceSnapshot -RegistryRoot $script:FixtureRoot | ConvertTo-Json -Depth 3 -Compress
+      $registration = Get-SmokeFileRegistration -Exe $script:Exe -Channel stable -RegistryRoot $script:FixtureRoot
+      { Assert-SmokeFileRegistrationRemoved -Registration $registration -RegistryRoot $script:FixtureRoot } | Should -Throw '*registration remains*'
+      $script:FixtureRoot.DeleteSubKeyTree("Software\Classes\$script:Identity")
+      $script:FixtureRoot.DeleteSubKeyTree($script:Capabilities)
+      $key = $script:FixtureRoot.OpenSubKey('Software\RegisteredApplications', $true)
+      $key.DeleteValue($script:Identity)
+      $key.Dispose()
+      { Assert-SmokeFileRegistrationRemoved -Registration $registration -RegistryRoot $script:FixtureRoot } | Should -Throw '*Open With entry remains*'
+      foreach($extension in @('.md', '.markdown', '.mdown', '.mkd', '.txt'))
+      {
+         $key = $script:FixtureRoot.OpenSubKey("Software\Classes\$extension\OpenWithProgids", $true)
+         $key.DeleteValue($script:Identity)
+         $key.GetValue('Other.Reader') | Should -BeExactly ''
+         $key.Dispose()
+      }
+      { Assert-SmokeFileRegistrationRemoved -Registration $registration -RegistryRoot $script:FixtureRoot } | Should -Not -Throw
+      (Get-SmokeDefaultChoiceSnapshot -RegistryRoot $script:FixtureRoot | ConvertTo-Json -Depth 3 -Compress) | Should -BeExactly $before
+   }
+}
diff --git a/build/Test-InstalledUpdates.ps1 b/build/Test-InstalledUpdates.ps1
index edf4e28..f9a52c2 100644
--- a/build/Test-InstalledUpdates.ps1
+++ b/build/Test-InstalledUpdates.ps1
@@ -42,8 +42,12 @@ Set-Content -LiteralPath $idFile -Value $packageId
 Set-Content -LiteralPath (Join-Path $outputRoot 'build-directory.txt') -Value $buildRoot
 $fixtureRoot = Join-Path $outputRoot 'fixture'
 $dataVariable = $AppId.ToUpperInvariant().Replace('-', '_') + '_DATA_DIR'
+$devDataVariable = ($AppId + '-dev').ToUpperInvariant().Replace('-', '_') + '_DATA_DIR'
 $oldDataDirectory = [Environment]::GetEnvironmentVariable($dataVariable)
+$oldDevDataDirectory = [Environment]::GetEnvironmentVariable($devDataVariable)
+$oldUiChannel = $env:K22_UITEST_CHANNEL
 $oldUiExe = $env:K22_UITEST_EXE
+$oldUiInstalled = $env:K22_UITEST_INSTALLED
 $versions = @(
    @{ channel = 'stable'; version = '0.1.0'; target = '0.4.0' },
    @{ channel = 'stable'; version = '0.4.0'; target = $null },
@@ -52,6 +56,92 @@ $versions = @(
 )
 $script:smokeProcessNumber = 0
 
+<#
+.SYNOPSIS
+Reads Windows default choices without changing them or retaining their private hashes in evidence.
+#>
+function Get-SmokeDefaultChoiceSnapshot
+{
+   param([Microsoft.Win32.RegistryKey]$RegistryRoot = [Microsoft.Win32.Registry]::CurrentUser)
+   foreach($extension in @('.md', '.markdown', '.mdown', '.mkd', '.txt'))
+   {
+      $choice = "$($RegistryRoot.Name)\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\$extension\UserChoice"
+      [ordered]@{
+         Extension        = $extension
+         ExtensionDefault = [Microsoft.Win32.Registry]::GetValue("$($RegistryRoot.Name)\Software\Classes\$extension", '', $null)
+         ProgId           = [Microsoft.Win32.Registry]::GetValue($choice, 'ProgId', $null)
+         Hash             = [Microsoft.Win32.Registry]::GetValue($choice, 'Hash', $null)
+      }
+   }
+}
+
+
+
+<#
+.SYNOPSIS
+Requires actual installer-owned Open With and Default Apps registration for all five advertised extensions.
+#>
+function Get-SmokeFileRegistration
+{
+   param(
+      [Parameter(Mandatory)][string]$Exe,
+      [Parameter(Mandatory)][ValidateSet('stable', 'dev')][string]$Channel,
+      [Microsoft.Win32.RegistryKey]$RegistryRoot = [Microsoft.Win32.Registry]::CurrentUser
+   )
+   $Exe = [IO.Path]::GetFullPath($Exe)
+   $applications = $RegistryRoot.OpenSubKey('Software\RegisteredApplications')
+   $found = @()
+   try
+   {
+      if($null -ne $applications)
+      {
+         foreach($identity in $applications.GetValueNames())
+         {
+            if(-not $identity.StartsWith("KofTwentyTwo.MarkdownViewr.$Channel.", [StringComparison]::Ordinal)) { continue }
+            $command = [Microsoft.Win32.Registry]::GetValue("$($RegistryRoot.Name)\Software\Classes\$identity\shell\open\command", '', $null)
+            if($command -cne ('"' + $Exe + '" "%1"')) { continue }
+            $capabilities = $applications.GetValue($identity)
+            if($capabilities -cne "Software\KofTwentyTwo\MarkdownViewr\FileAssociations\$identity\Capabilities") { throw 'The installed Default Apps capabilities are incorrect.' }
+            foreach($extension in @('.md', '.markdown', '.mdown', '.mkd', '.txt'))
+            {
+               if([Microsoft.Win32.Registry]::GetValue("$($RegistryRoot.Name)\$capabilities\FileAssociations", $extension, $null) -cne $identity) { throw 'An installed Default Apps extension is missing or incorrect.' }
+               if($null -eq [Microsoft.Win32.Registry]::GetValue("$($RegistryRoot.Name)\Software\Classes\$extension\OpenWithProgids", $identity, $null)) { throw 'An installed Open With extension is missing.' }
+            }
+            $found += [pscustomobject]@{ ProgId = $identity; Capabilities = $capabilities; ExtensionsVerified = 5 }
+         }
+      }
+   }
+   finally { if($null -ne $applications) { $applications.Dispose() } }
+   if($found.Count -ne 1) { throw 'Expected exactly one file registration for this installed executable and channel.' }
+   return $found[0]
+}
+
+
+
+<#
+.SYNOPSIS
+Requires uninstall to remove only the recorded installation's file-type registrations.
+#>
+function Assert-SmokeFileRegistrationRemoved
+{
+   param(
+      [Parameter(Mandatory)][object]$Registration,
+      [Microsoft.Win32.RegistryKey]$RegistryRoot = [Microsoft.Win32.Registry]::CurrentUser
+   )
+   foreach($path in @("Software\Classes\$($Registration.ProgId)", $Registration.Capabilities))
+   {
+      $key = $RegistryRoot.OpenSubKey($path)
+      if($null -ne $key) { $key.Dispose(); throw 'An uninstalled file-type registration remains.' }
+   }
+   if($null -ne [Microsoft.Win32.Registry]::GetValue("$($RegistryRoot.Name)\Software\RegisteredApplications", $Registration.ProgId, $null)) { throw 'An uninstalled Default Apps entry remains.' }
+   foreach($extension in @('.md', '.markdown', '.mdown', '.mkd', '.txt'))
+   {
+      if($null -ne [Microsoft.Win32.Registry]::GetValue("$($RegistryRoot.Name)\Software\Classes\$extension\OpenWithProgids", $Registration.ProgId, $null)) { throw 'An uninstalled Open With entry remains.' }
+   }
+}
+
+
+
 <#
 .SYNOPSIS
 Runs one process with literal arguments, bounded duration and checked exit status.
@@ -77,15 +167,17 @@ function Invoke-SmokeProcess
    $stderr = $process.StandardError.ReadToEndAsync()
    try
    {
-      if(-not $process.WaitForExit($TimeoutSeconds * 1000))
+      $timedOut = -not $process.WaitForExit($TimeoutSeconds * 1000)
+      if($timedOut)
       {
          $process.Kill($true)
-         throw "Process timed out: $File"
+         if(-not $process.WaitForExit(10000)) { throw "Timed-out process did not terminate: $File" }
       }
       $script:smokeProcessNumber++
       $log = Join-Path $outputRoot "process-$script:smokeProcessNumber.log"
       $text = $stdout.GetAwaiter().GetResult() + $stderr.GetAwaiter().GetResult()
       Set-Content -LiteralPath $log -Value $text
+      if($timedOut) { throw "Process timed out: $File. Log: $log" }
       if($process.ExitCode -ne 0) { throw "Process failed ($($process.ExitCode)): $File. Log: $log`n$text" }
    }
    finally { $process.Dispose() }
@@ -142,12 +234,170 @@ function Stop-SmokeApp
    }
 }
 
+<#
+.SYNOPSIS
+Waits for a real window from the exact owned executable, optionally with an exact document title.
+#>
+function Get-SmokeReaderWindow
+{
+   param([string]$Exe, [string]$Title)
+   $deadline = [DateTime]::UtcNow.AddSeconds(30)
+   do
+   {
+      foreach($process in @(Get-Process -Name $name -ErrorAction SilentlyContinue))
+      {
+         try
+         {
+            if($process.Path -eq $Exe -and $process.MainWindowHandle -ne 0 -and ([string]::IsNullOrEmpty($Title) -or $process.MainWindowTitle -ceq $Title))
+            {
+               return [pscustomobject]@{ ProcessId = $process.Id; Title = $process.MainWindowTitle }
+            }
+         }
+         finally { $process.Dispose() }
+      }
+      Start-Sleep -Milliseconds 250
+   } while([DateTime]::UtcNow -lt $deadline)
+   throw 'The exact installed reader did not show its expected native window.'
+}
+
+
+
+<#
+.SYNOPSIS
+Requires manifest identity and the resolved artifact boundary before any owned uninstall.
+#>
+function Assert-SmokeInstallationOwner
+{
+   param([string]$Install, [string]$PackageIdentity, [string]$ArtifactRoot)
+   $resolved = [IO.Path]::GetFullPath($Install)
+   $boundary = [IO.Path]::GetFullPath($ArtifactRoot).TrimEnd([IO.Path]::DirectorySeparatorChar) + [IO.Path]::DirectorySeparatorChar
+   if(-not $resolved.StartsWith($boundary, [StringComparison]::OrdinalIgnoreCase)) { throw 'Refusing to uninstall outside the smoke artifact boundary.' }
+   $manifest = [xml](Get-Content -LiteralPath (Join-Path $resolved 'current/sq.version') -Raw -ErrorAction Stop)
+   if($manifest.package.metadata.id -cne $PackageIdentity) { throw 'Refusing to uninstall an unexpected application.' }
+}
+
+
+
+<#
+.SYNOPSIS
+Uninstalls only a verified owned fixture and requires its registration cleanup without changing user defaults.
+#>
+function Remove-SmokeInstallation
+{
+   [CmdletBinding(SupportsShouldProcess)]
+   param([object]$State, [string]$DefaultChoices)
+   if(-not (Test-Path -LiteralPath $State.Install)) { return }
+   Assert-SmokeInstallationOwner -Install $State.Install -PackageIdentity $State.PackageId -ArtifactRoot $allowedRoot
+   if(-not $PSCmdlet.ShouldProcess($State.Install, 'Uninstall owned simultaneous-channel fixture')) { return }
+   Stop-SmokeApp -Exe $State.Exe -Confirm:$false
+   Invoke-SmokeProcess -File (Join-Path $State.Install 'Update.exe') -Arguments @('--silent', '--rootDir', $State.Install, 'uninstall')
+   $deadline = [DateTime]::UtcNow.AddSeconds(10)
+   while((Test-Path -LiteralPath $State.Install) -and [DateTime]::UtcNow -lt $deadline) { Start-Sleep -Milliseconds 200 }
+   if(Test-Path -LiteralPath $State.Install) { throw 'The owned simultaneous-channel installation remains after uninstall.' }
+   if(Test-Path -LiteralPath "HKCU:/Software/Microsoft/Windows/CurrentVersion/Uninstall/$($State.PackageId)") { throw 'The owned uninstall registry entry remains.' }
+   if($null -ne $State.Registration) { Assert-SmokeFileRegistrationRemoved -Registration $State.Registration }
+   if($DefaultChoices -cne (Get-SmokeDefaultChoiceSnapshot | ConvertTo-Json -Depth 3 -Compress)) { throw 'Simultaneous-channel uninstall changed Windows defaults.' }
+}
+
+
+
+<#
+.SYNOPSIS
+Keeps both real editions installed and open while updating and uninstalling each without disturbing its sibling.
+#>
+function Test-SmokeCoexistingChannel
+{
+   $states = [Collections.Generic.List[object]]::new()
+   $defaultChoices = Get-SmokeDefaultChoiceSnapshot | ConvertTo-Json -Depth 3 -Compress
+   try
+   {
+      foreach($initial in @($versions[0], $versions[2]))
+      {
+         $channel = $initial.channel
+         $install = Join-Path $outputRoot "coexisting-$channel"
+         $data = Join-Path $outputRoot "coexisting-data-$channel"
+         if((Test-Path -LiteralPath $install) -or (Test-Path -LiteralPath $data)) { throw 'Simultaneous-channel fixtures must be fresh.' }
+         New-Item -ItemType Directory -Path $data | Out-Null
+         [ordered]@{ ShowSplashScreen = $false; CheckForUpdatesOnStartup = $false; DocumentTheme = $(if($channel -eq 'dev') { 'GitHub Light' } else { 'Catppuccin Mocha' }) } | ConvertTo-Json | Set-Content -LiteralPath (Join-Path $data 'settings.json')
+         [Environment]::SetEnvironmentVariable($(if($channel -eq 'dev') { $devDataVariable } else { $dataVariable }), $data)
+         $state = [pscustomobject]@{ Channel = $channel; Install = $install; Data = $data; PackageId = "$packageId-$channel"; Exe = (Join-Path $install "current/$mainExe"); Target = $initial.target; Registration = $null; Window = $null }
+         $states.Add($state)
+         $setup = Join-Path $fixtureRoot "$($initial.version)/$($state.PackageId)-$channel-Setup.exe"
+         Invoke-SmokeProcess -File $setup -Arguments @('--silent', '--installto', $install, '--log', (Join-Path $outputRoot "coexisting-install-$channel.log"))
+         $state.Registration = Get-SmokeFileRegistration -Exe $state.Exe -Channel $channel
+         Assert-SmokeInstallationOwner -Install $install -PackageIdentity $state.PackageId -ArtifactRoot $allowedRoot
+      }
+      if($states[0].Registration.ProgId -ceq $states[1].Registration.ProgId) { throw 'Stable and dev share a file-type owner.' }
+      foreach($state in $states)
+      {
+         Stop-SmokeApp -Exe $state.Exe -Confirm:$false
+         $document = Join-Path $state.Data "$($state.Channel).md"
+         '# Simultaneous channel fixture' | Set-Content -LiteralPath $document
+         $start = [Diagnostics.ProcessStartInfo]::new($state.Exe)
+         $start.UseShellExecute = $false
+         $start.ArgumentList.Add($document)
+         $process = [Diagnostics.Process]::Start($start)
+         $process.Dispose()
+         $displayName = if($state.Channel -eq 'dev') { 'MarkdownViewr (dev)' } else { 'MarkdownViewr' }
+         $state.Window = Get-SmokeReaderWindow -Exe $state.Exe -Title ("$($state.Channel).md " + [char]0x2014 + " $displayName")
+         $logPrefix = if($state.Channel -eq 'dev') { "$AppId-dev" } else { $AppId }
+         $logs = @(Get-ChildItem -LiteralPath (Join-Path $state.Data 'logs') -Filter "$logPrefix-*.log")
+         if($logs.Count -eq 0 -or -not ((Get-Content -LiteralPath $logs.FullName -Raw) -match 'Opened a Markdown document')) { throw 'The actual reader did not use its own edition profile/log prefix.' }
+      }
+      if($states[0].Window.ProcessId -eq $states[1].Window.ProcessId) { throw 'Stable and dev incorrectly share one process.' }
+      foreach($state in $states)
+      {
+         $sibling = @($states | Where-Object Channel -NE $state.Channel)[0]
+         $siblingWindow = Get-SmokeReaderWindow -Exe $sibling.Exe
+         $siblingHash = (Get-FileHash -LiteralPath (Join-Path $sibling.Install "current/$name.dll") -Algorithm SHA256).Hash
+         $siblingSettings = (Get-FileHash -LiteralPath (Join-Path $sibling.Data 'settings.json') -Algorithm SHA256).Hash
+         Stop-SmokeApp -Exe $state.Exe -Confirm:$false
+         $before = Get-SmokeResult -Exe (Join-Path $state.Install "current/$probeExe") -ResultPath (Join-Path $outputRoot "coexisting-$($state.Channel)-before.json") -Mode 'apply'
+         if($before.Channel -cne $state.Channel -or $before.UpdateVersion -cne $state.Target) { throw 'The simultaneous edition received an incorrect update offer.' }
+         $deadline = [DateTime]::UtcNow.AddSeconds(90)
+         do
+         {
+            Start-Sleep -Milliseconds 300
+            $manifestPath = Join-Path $state.Install 'current/sq.version'
+            $manifest = if(Test-Path -LiteralPath $manifestPath) { [xml](Get-Content -LiteralPath $manifestPath -Raw) } else { $null }
+         } while(($null -eq $manifest -or $manifest.package.metadata.version -cne $state.Target) -and [DateTime]::UtcNow -lt $deadline)
+         if($null -eq $manifest -or $manifest.package.metadata.version -cne $state.Target) { throw 'The simultaneous edition did not install its target update.' }
+         Assert-SmokeInstallationOwner -Install $state.Install -PackageIdentity $state.PackageId -ArtifactRoot $allowedRoot
+         $state.Window = Get-SmokeReaderWindow -Exe $state.Exe
+         $targetHash = (Get-FileHash -LiteralPath (Join-Path $buildRoot "publish/$($state.Target)/$name.dll") -Algorithm SHA256).Hash
+         if((Get-FileHash -LiteralPath (Join-Path $state.Install "current/$name.dll") -Algorithm SHA256).Hash -cne $targetHash) { throw 'The simultaneous target bytes do not match the published assembly.' }
+         $registration = Get-SmokeFileRegistration -Exe $state.Exe -Channel $state.Channel
+         if($registration.ProgId -cne $state.Registration.ProgId) { throw 'The simultaneous update changed its file-type identity.' }
+         $after = Get-SmokeResult -Exe (Join-Path $state.Install "current/$probeExe") -ResultPath (Join-Path $outputRoot "coexisting-$($state.Channel)-after.json")
+         if($after.Channel -cne $state.Channel -or $after.Version -cne $state.Target -or $after.AppKitVersion -cne $state.Target -or $null -ne $after.UpdateVersion) { throw 'The simultaneous edition has an incorrect post-update identity.' }
+         if((Get-SmokeReaderWindow -Exe $sibling.Exe).ProcessId -ne $siblingWindow.ProcessId -or (Get-FileHash -LiteralPath (Join-Path $sibling.Install "current/$name.dll") -Algorithm SHA256).Hash -cne $siblingHash -or (Get-FileHash -LiteralPath (Join-Path $sibling.Data 'settings.json') -Algorithm SHA256).Hash -cne $siblingSettings) { throw 'Updating an edition disturbed its live sibling or preferences.' }
+         if((Get-SmokeFileRegistration -Exe $sibling.Exe -Channel $sibling.Channel).ProgId -cne $sibling.Registration.ProgId) { throw 'Updating an edition changed its sibling registration.' }
+         if($defaultChoices -cne (Get-SmokeDefaultChoiceSnapshot | ConvertTo-Json -Depth 3 -Compress)) { throw 'Simultaneous installation/update changed Windows defaults.' }
+      }
+      $devWindow = Get-SmokeReaderWindow -Exe $states[1].Exe
+      Remove-SmokeInstallation -State $states[0] -DefaultChoices $defaultChoices -Confirm:$false
+      if((Get-SmokeReaderWindow -Exe $states[1].Exe).ProcessId -ne $devWindow.ProcessId -or (Get-SmokeFileRegistration -Exe $states[1].Exe -Channel 'dev').ProgId -cne $states[1].Registration.ProgId) { throw 'Uninstalling stable disturbed the installed running dev edition.' }
+      [ordered]@{ SimultaneousWindows = $true; DistinctProfiles = $true; IsolatedUpdates = $true; StableUninstallPreservedDev = $true; ExistingDefaultsPreserved = $true; Editions = @($states | Select-Object Channel, PackageId, Target, Registration, Window) } | ConvertTo-Json -Depth 5 | Set-Content -LiteralPath (Join-Path $outputRoot 'coexisting-channels.json')
+   }
+   finally
+   {
+      $cleanupFailures = [Collections.Generic.List[string]]::new()
+      foreach($state in $states)
+      {
+         try { Remove-SmokeInstallation -State $state -DefaultChoices $defaultChoices -Confirm:$false }
+         catch { $cleanupFailures.Add($_.Exception.Message) }
+      }
+      if($cleanupFailures.Count -gt 0) { throw ($cleanupFailures -join '; ') }
+   }
+}
+
 $records = [Collections.Generic.List[object]]::new()
 try
 {
    foreach($release in $versions)
    {
       $version = $release.version
+      $releasePackageId = $packageId + '-' + $release.channel
       Write-Output "Packaging $version ($($release.channel))"
       $publish = Join-Path $buildRoot "publish/$version"
       $probe = Join-Path $buildRoot "probe/$version"
@@ -165,8 +415,8 @@ try
          $versionOutput = Get-Content -LiteralPath (Join-Path $outputRoot "process-$script:smokeProcessNumber.log") -Raw
          Assert-SmokeCliVersion -Output $versionOutput -Version $version
       }
-      Invoke-SmokeProcess -File $vpk -Arguments @('pack', '--runtime', 'win-x64', '--packId', $packageId, '--packVersion', $version, '--packDir', $publish, '--mainExe', $mainExe, '--channel', $release.channel, '--outputDir', (Join-Path $fixtureRoot $version), '--shortcuts', 'None', '--delta', 'None', '--skip-updates', '--yes') -TimeoutSeconds 300
-      & "$PSScriptRoot/Assert-PackageBytes.ps1" -PublishDirectory $publish -PortableArchive (Join-Path $fixtureRoot "$version/$packageId-$($release.channel)-Portable.zip") -FullPackage (Join-Path $fixtureRoot "$version/$packageId-$version-$($release.channel)-full.nupkg")
+      Invoke-SmokeProcess -File $vpk -Arguments @('pack', '--runtime', 'win-x64', '--packId', $releasePackageId, '--packVersion', $version, '--packDir', $publish, '--mainExe', $mainExe, '--channel', $release.channel, '--outputDir', (Join-Path $fixtureRoot $version), '--shortcuts', 'None', '--delta', 'None', '--skip-updates', '--yes') -TimeoutSeconds 300
+      & "$PSScriptRoot/Assert-PackageBytes.ps1" -PublishDirectory $publish -PortableArchive (Join-Path $fixtureRoot "$version/$releasePackageId-$($release.channel)-Portable.zip") -FullPackage (Join-Path $fixtureRoot "$version/$releasePackageId-$version-$($release.channel)-full.nupkg")
    }
    $releases = foreach($release in $versions)
    {
@@ -182,12 +432,15 @@ try
    $loose = Get-SmokeResult -Exe (Join-Path $buildRoot "publish/0.1.0/$probeExe") -ResultPath (Join-Path $outputRoot 'loose.json')
    if($loose.Installed -or $loose.AppKitSupported -or $null -ne $loose.Version) { throw 'Loose publish output unexpectedly supports updates.' }
    $records.Add(@{ kind = 'loose'; result = $loose })
+   $env:K22_UITEST_CHANNEL = 'stable'
+   $env:K22_UITEST_INSTALLED = '0'
    $env:K22_UITEST_EXE = Join-Path $buildRoot "publish/0.1.0/$mainExe"
-   Invoke-SmokeProcess -File 'dotnet' -Arguments @('test', "$repositoryRoot/tests/$name.UiTests", '--no-build', '--logger', 'trx;LogFileName=published-ui.trx', '--results-directory', $outputRoot) -TimeoutSeconds 180
+   Invoke-SmokeProcess -File 'dotnet' -Arguments @('test', "$repositoryRoot/tests/$name.UiTests", '--no-build', '--logger', 'console;verbosity=normal', '--logger', 'trx;LogFileName=published-ui.trx', '--results-directory', $outputRoot) -TimeoutSeconds 600
    foreach($initial in @($versions[0], $versions[2]))
    {
+      $initialPackageId = $packageId + '-' + $initial.channel
       $portableDirectory = Join-Path $outputRoot "portable-$($initial.channel)"
-      [IO.Compression.ZipFile]::ExtractToDirectory((Join-Path $fixtureRoot "$($initial.version)/$packageId-$($initial.channel)-Portable.zip"), $portableDirectory)
+      [IO.Compression.ZipFile]::ExtractToDirectory((Join-Path $fixtureRoot "$($initial.version)/$initialPackageId-$($initial.channel)-Portable.zip"), $portableDirectory)
       $portable = Get-SmokeResult -Exe (Join-Path $portableDirectory "current/$probeExe") -ResultPath (Join-Path $outputRoot "$($initial.channel)-portable.json")
       if(-not $portable.Installed -or -not $portable.IsPortable -or -not $portable.AppKitSupported -or $portable.Channel -ne $initial.channel -or $portable.UpdateVersion -ne $initial.target) { throw 'Portable bundle identity/update behavior is incorrect.' }
       $records.Add(@{ kind = 'portable'; result = $portable })
@@ -195,17 +448,25 @@ try
    foreach($initial in @($versions[0], $versions[2]))
    {
       $channel = $initial.channel
+      $initialPackageId = $packageId + '-' + $channel
+      $env:K22_UITEST_CHANNEL = $channel
       $install = Join-Path $outputRoot "installed-$channel"
       if(Test-Path -LiteralPath $install) { throw "Existing installation requires investigation: $install" }
-      $setup = Join-Path $fixtureRoot "$($initial.version)/$packageId-$channel-Setup.exe"
+      $setup = Join-Path $fixtureRoot "$($initial.version)/$initialPackageId-$channel-Setup.exe"
       $data = Join-Path $outputRoot "data-$channel"
       New-Item -ItemType Directory -Path $data -Force | Out-Null
       '{"ShowSplashScreen":false,"CheckForUpdatesOnStartup":false}' | Set-Content -LiteralPath (Join-Path $data 'settings.json')
       [Environment]::SetEnvironmentVariable($dataVariable, $data)
+      [Environment]::SetEnvironmentVariable($devDataVariable, $data)
+      $defaultChoices = Get-SmokeDefaultChoiceSnapshot | ConvertTo-Json -Depth 3 -Compress
+      $registration = $null
       Invoke-SmokeProcess -File $setup -Arguments @('--silent', '--installto', $install, '--log', (Join-Path $outputRoot "install-$channel.log"))
       try
       {
          $currentExe = Join-Path $install "current/$mainExe"
+         $registration = Get-SmokeFileRegistration -Exe $currentExe -Channel $channel
+         if($defaultChoices -cne (Get-SmokeDefaultChoiceSnapshot | ConvertTo-Json -Depth 3 -Compress)) { throw 'Installation changed existing Windows default choices.' }
+         $registration | ConvertTo-Json | Set-Content -LiteralPath (Join-Path $outputRoot "$channel-registration-before.json")
          $installedProbe = Join-Path $install "current/$probeExe"
          $before = Get-SmokeResult -Exe $installedProbe -ResultPath (Join-Path $outputRoot "$channel-before.json") -Mode 'apply'
          if(-not $before.Installed -or -not $before.AppKitSupported -or $before.IsPortable -or $before.Version -ne $initial.version -or $before.AppKitVersion -ne $initial.version -or $before.Channel -ne $channel -or $before.UpdateVersion -ne $initial.target -or $before.IncludePrereleases -ne ($channel -eq 'dev')) { throw "Incorrect $channel installed update offer." }
@@ -233,8 +494,13 @@ try
          Stop-SmokeApp -Exe $currentExe -Confirm:$false
          $after = Get-SmokeResult -Exe $installedProbe -ResultPath (Join-Path $outputRoot "$channel-after.json")
          if($after.Version -ne $initial.target -or $after.Channel -ne $channel -or $null -ne $after.UpdateVersion -or $after.AppKitVersion -ne $initial.target) { throw 'Post-upgrade identity or channel is incorrect.' }
+         $updatedRegistration = Get-SmokeFileRegistration -Exe $currentExe -Channel $channel
+         if($updatedRegistration.ProgId -cne $registration.ProgId) { throw 'Update changed the stable file-type owner identity.' }
+         if($defaultChoices -cne (Get-SmokeDefaultChoiceSnapshot | ConvertTo-Json -Depth 3 -Compress)) { throw 'Update changed existing Windows default choices.' }
+         $updatedRegistration | ConvertTo-Json | Set-Content -LiteralPath (Join-Path $outputRoot "$channel-registration-after.json")
+         $env:K22_UITEST_INSTALLED = '1'
          $env:K22_UITEST_EXE = $currentExe
-         Invoke-SmokeProcess -File 'dotnet' -Arguments @('test', "$repositoryRoot/tests/$name.UiTests", '--no-build', '--filter', 'FullyQualifiedName!~CheckForUpdates_InALooseBuild', '--logger', "trx;LogFileName=installed-$channel-ui.trx", '--results-directory', $outputRoot) -TimeoutSeconds 180
+         Invoke-SmokeProcess -File 'dotnet' -Arguments @('test', "$repositoryRoot/tests/$name.UiTests", '--no-build', '--filter', 'FullyQualifiedName!~CheckForUpdates_InALooseBuild', '--logger', 'console;verbosity=normal', '--logger', "trx;LogFileName=installed-$channel-ui.trx", '--results-directory', $outputRoot) -TimeoutSeconds 600
          $records.Add(@{ kind = 'installed'; channel = $channel; before = $before; after = $after; restarted = $true; appSha256 = $installedHash })
       }
       finally
@@ -243,22 +509,30 @@ try
          $updater = Join-Path $install 'Update.exe'
          if(Test-Path -LiteralPath $updater)
          {
-            $manifestPath = Join-Path $install 'current/sq.version'
-            $manifestValue = [xml](Get-Content -LiteralPath $manifestPath -Raw)
-            if(-not $install.StartsWith($allowedRoot, [StringComparison]::OrdinalIgnoreCase) -or $manifestValue.package.metadata.id -ne $packageId) { throw 'Refusing to uninstall an unexpected application.' }
+            Assert-SmokeInstallationOwner -Install $install -PackageIdentity $initialPackageId -ArtifactRoot $allowedRoot
             Invoke-SmokeProcess -File $updater -Arguments @('--silent', '--rootDir', $install, 'uninstall')
             $deadline = [DateTime]::UtcNow.AddSeconds(10)
             while((Test-Path -LiteralPath $install) -and [DateTime]::UtcNow -lt $deadline) { Start-Sleep -Milliseconds 200 }
             if(Test-Path -LiteralPath $install) { throw "Smoke installation was not removed: $install" }
-            if(Test-Path -LiteralPath "HKCU:/Software/Microsoft/Windows/CurrentVersion/Uninstall/$packageId") { throw 'Smoke uninstall registry entry remains.' }
+            if(Test-Path -LiteralPath "HKCU:/Software/Microsoft/Windows/CurrentVersion/Uninstall/$initialPackageId") { throw 'Smoke uninstall registry entry remains.' }
+            if($null -ne $registration)
+            {
+               Assert-SmokeFileRegistrationRemoved -Registration $registration
+               if($defaultChoices -cne (Get-SmokeDefaultChoiceSnapshot | ConvertTo-Json -Depth 3 -Compress)) { throw 'Uninstall changed existing Windows default choices.' }
+               [ordered]@{ ProgId = $registration.ProgId; Removed = $true; ExistingDefaultsPreserved = $true } | ConvertTo-Json | Set-Content -LiteralPath (Join-Path $outputRoot "$channel-registration-removed.json")
+            }
          }
       }
    }
+   Test-SmokeCoexistingChannel
    ConvertTo-Json -InputObject @($records) -Depth 10 | Set-Content -LiteralPath (Join-Path $outputRoot 'results.json')
    Write-Output "Installed stable/dev smoke passed: $outputRoot/results.json"
 }
 finally
 {
    [Environment]::SetEnvironmentVariable($dataVariable, $oldDataDirectory)
+   [Environment]::SetEnvironmentVariable($devDataVariable, $oldDevDataDirectory)
+   $env:K22_UITEST_CHANNEL = $oldUiChannel
    $env:K22_UITEST_EXE = $oldUiExe
+   $env:K22_UITEST_INSTALLED = $oldUiInstalled
 }
diff --git a/docs/PRODUCT.md b/docs/PRODUCT.md
index 2487de2..754180c 100644
--- a/docs/PRODUCT.md
+++ b/docs/PRODUCT.md
@@ -2,30 +2,43 @@
 
 Build a Windows counterpart to [Darin Kelkhoff's markdownViewr](https://github.com/darinkelkhoff/markdownViewr), using the KofTwentyTwo AppKit foundations and standards. The agreed display name is MarkdownViewr, repository MarkdownViewr.Windows, and permanent application ID markdownviewr-windows.
 
-The current tree is a generated, building AppKit scaffold. Its greeting screen remains a sample; it is not yet a Markdown viewer. The following features are requirements, not implemented claims.
+The reader implements passive GFM, bounded local images, save/replacement/deletion recovery, the original20 themes and editable overrides, frontmatter, outline/collapse, literal synchronized source, paired find, vim commands, named editors and per-window zoom. Clean baseline `300e145` / CI38126078284 passes52 native/published and51 installed stable/dev tests with no failures/skips, including original3 native printing/PDF cases. Both actual AppKit update/apply/restart probes pass; fixtures are unsigned.
+
+Full `bf4fcdc` / CI38128311242 passes54 native/published and53 installed stable/dev tests, zero skips: all5 print cases, real font/padding/width/border/background/image output and preserved source/find/reading state. Twenty-four generated PDFs and both actual AppKit apply/restart probes are retained; fixtures remain unsigned. Multiple native document windows, modern multiple-file picking, bounded private recent files and sibling-safe settings merging are implemented locally with376 core tests/100% measured lines; hosted lifecycle acceptance remains pending. Windows associations/activation and the remaining reference features below are still required. This is not a completed port.
+
+Windows file registration and activation are now implemented locally (ADR-0005):
+installed channel/executable identities, preserved defaults, SDK primary selection
+and current-user bounded literal-path delivery. Nine real isolated boundary tests
+pass, and the corrected entry point publishes/packs with all 543 published files verified
+byte-for-byte in both archives. Real Explorer/installed lifecycle and two prepared
+secondary-process/profile/duplicate/watcher cases remain unverified; this does
+not complete the port or establish production signatures.
 
 ## Reference and feature scope
 
+Credit the original macOS app and Darin Kelkhoff in About and public documentation, linking to [his repository](https://github.com/darinkelkhoff/markdownViewr) and [website](https://kelkhoff.com/); retain distributed MIT notices. Windows issues/support must remain in the Windows repository.
+
 Reference source inspected at commit `6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021`. Preserve Darin's MIT copyright/license when adapting his rendering resources or other code. macOS SwiftUI/WebKit and Sparkle integrations require Windows equivalents.
 
 | Area | Required Windows behavior |
 | --- | --- |
-| Documents | Open Markdown through a picker and Windows file activation; multiple document windows; recent files; clear missing/unreadable-file errors |
-| Rendering | GitHub Flavored Markdown, tables, tasks, strikethrough, fenced code, local images and links |
+| Documents | Open `.md`, `.markdown`, `.mdown`, `.mkd` and plain text through a multiple-file picker and Windows activation; independent document windows; recent files/clear history; clear missing/unreadable-file errors |
+| Rendering | GitHub Flavored Markdown, tables, tasks, strikethrough, fenced code, local images/links; independently configurable highlight, superscript, subscript and underline extensions |
 | Reload | Watch saves, including atomic replacements; debounce changes, preserve scroll, report deletion/recovery |
-| Themes | Built-in themes, editable user themes, custom CSS, code font/size and persistent settings |
-| Navigation | Resizable table of contents, depth control, heading jumps and collapsible sections |
-| Source | Optional source pane, synchronized headings/scroll and collapse state |
+| Themes | 20 built-ins; editable body/heading/code fonts, sizes and palette; theme/global CSS; content width; theme order, enable/disable/delete/restore and cycling; JSON import/export with overwrite/keep-both/skip conflicts; persistent settings |
+| Navigation | Resizable table of contents, depth control, configurable wrapping or ellipsis/full-title tooltip, optional heading-depth markers, heading jumps, collapsible sections and per-window font zoom (30–500%, Ctrl+plus/minus/0) |
+| Source | Optional source pane, synchronized headings/scroll and collapse state; theme-aware syntax highlighting; draggable split opening at50/50 (#16/#17) |
 | Find | Match counts, next/previous matches, search in both panes and vim-style shortcuts |
 | Keys | j/k, Ctrl+d/u, gg/G, ]]/[[, /, n/N; Windows Ctrl-based equivalents for native commands |
 | Frontmatter | Hide YAML, display metadata or render it as Markdown |
 | Editor | Configurable external editor with safe literal file arguments |
-| Print | Native printing, theme/layout options and restoration of screen state afterwards |
-| Foundation | AppKit About, activity log, theme/settings, crash handling, stable/dev updates, tests and release controls |
+| Print | Native printing, theme/layout options, readable PDF export with optional PDF/folder opening, and restoration of screen state afterwards (#22/#23) |
+| Toolbar/settings | Mac toolbar action parity (#18), native Settings pages for General, themes, editors, Printing defaults and Advanced startup options (#21); deliberate Apply/Restore for print/CSS drafts, independent pane defaults and shared saved preferences |
+| Foundation | AppKit About with original-author credit, repository/issues/community Help links, activity log, crash handling, stable/dev updates, tests and release controls |
 
 ## Proposed implementation for discussion
 
-Use a WinUI 3 shell with a WebView2 document surface, a pure .NET core for document/rendering state, and thin Windows adapters for file activation, watching, editor launch and printing. Evaluate a maintained .NET Markdown parser against the original's actual output before choosing it. Reuse compatible original HTML/CSS/navigation resources where useful, retaining attribution and replacing the macOS message bridge.
+Use a WinUI 3 shell with a WebView2 document surface, a pure .NET core for document/rendering state, and thin Windows adapters for file activation, watching, editor launch and printing. Markdig and HtmlSanitizer implement the first GFM and passive-markup boundary; see ADR-0002. Reuse compatible original HTML/CSS/navigation resources where useful, retaining attribution and replacing the macOS message bridge.
 
 Treat document Markdown, HTML, images, CSS, links and web messages as untrusted. Document content must not execute arbitrary script or gain access to native host commands. Local-resource access must remain bounded to explicitly allowed document resources; remote navigation and external editor launch require deliberate user actions. Define and test the renderer policy before loading user files.
 
diff --git a/docs/RELEASING.md b/docs/RELEASING.md
index 1376a53..5e21c05 100644
--- a/docs/RELEASING.md
+++ b/docs/RELEASING.md
@@ -1,6 +1,5 @@
 # Releasing MarkdownViewr
 
-
 Releases follow the
 [KofTwentyTwo release standard](https://github.com/KofTwentyTwo/standards/blob/main/standards/releases.md).
 Pushing a protected `v*` tag on `main` runs [`.github/workflows/release.yml`](../.github/workflows/release.yml),
@@ -8,7 +7,7 @@ which calls the shared `release-velopack.yml` workflow in KofTwentyTwo/standards
 
 ## Workflow baseline
 
-Shared workflows are pinned to published standards v0.1.2. The release caller checks main ancestry and reruns build, coverage, formatting, UI tests, security scans and CodeQL before publication.
+The signing release builder is pinned to standards v1.1.0 (`93b1d6163a4c466ae443e98b62786fc4d80d33bd`); other shared gates retain v0.1.2. The release caller checks main ancestry and reruns build, coverage, formatting, UI tests, security scans and CodeQL before publication.
 The AppKit dependency locks now match the published 0.1.0 packages. Before changing any package version, regenerate the affected locks and verify a locked restore with a clean package cache.
 
 ## Versioning and channels
@@ -75,7 +74,7 @@ payloads, using final-byte hashes and verified provenance. Follow the
    ```
 
 4. Watch the **release** workflow, then verify the release as described in the
-   [README](../README.md#verifying-a-release).
+   [developer guide](../DEVELOPERS.md#releases-and-verification).
 5. Open a pull request that bumps `VersionPrefix` in `Directory.Build.props`.
 
 ## When something fails
diff --git a/docs/SESSION-STATE.md b/docs/SESSION-STATE.md
index 3c8bf3c..c0b9574 100644
--- a/docs/SESSION-STATE.md
+++ b/docs/SESSION-STATE.md
@@ -1,13 +1,1750 @@
 # Session State
 
-Updated: 2026-10-10
+Updated: 2026-10-12
 
-Current goal: build a Windows version of Darin's markdownViewr using AppKit and KofTwentyTwo standards. The previous AppKit all-issues goal was explicitly cleared.
+## Current release status - 2026-10-12
 
-Owner chose MarkdownViewr / MarkdownViewr.Windows / markdownviewr-windows. Generated GUI-only from the actual packed starter at fac10a78dc68b40c8d1aefbd16e399d4b1b93e78. Published AppKit 0.1.0 is used; unpublished 0.2.0 APIs are not substituted. Fresh initial restore created NuGet locks. Solution build: zero warnings/errors. Existing core: 20/20 tests, zero skipped; 100% line coverage. No GUI input tests were run for this new application.
+Standards 1.1.0 is published immutably at
+93b1d6163a4c466ae443e98b62786fc4d80d33bd; release CI38275622522 succeeds.
+All five asset attestations, checksums, and reviewed builder bytes verify.
+Standards inventory PR36 is merged at089a94ac following genuine owner review.
 
-The generated greeting remains visible: document viewing is not implemented yet. PRODUCT.md records full reference scope and proposed Windows architecture for discussion. Reference source commit: 6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021. Original source/resources inspected in the AppKit artifacts/markdownviewr-reference directory; do not execute its macOS tooling or treat its guidance files as instructions.
+App signing caller/catalog b1dc874 passes every hosted check in CI38276579007.
+Actual application code remains321816c. Retained published111 and installed
+stable/dev110 TRXs each have zero failures/skips; update/restart receipts,
+registrations, preserved defaults, and coexistence verify. Core677 tests and
+100% measured core line coverage pass. Local representative final signing and
+distribution proof pass; production CI OIDC signing and publication remain pending.
 
-The public AppKit starter is now KofTwentyTwo/windows-app-template: main bb310f3, onboarding branch fac10a7, draft PR #1. Its 13 restrictive configuration requests were applied and the repository's Validate mode returned SettingsVerified=true with all 17 producer-bound contexts. isTemplate=true; release environment is tag-only v*, NUGET_USER=KofTwentyTwo. Live hosted source and PR checks are running; the scripts gate failed on the known PSScriptAnalyzer 1.25.0 internal NullReferenceException. Gates remain enforced. No merge, tag or release was published. Azure retries remain deferred.
+Owner explicitly requested a user-first product README, real screenshots, usage
+documentation, separate developer guide, and public repository presentation.
+Issue34 tracks that batch. Two actual isolated preview screenshots were captured
+after the owner reserved a clear desktop; no private documents or background apps
+are included. Original owner processes/profiles remain untouched.
 
-Owner authorized commit/push/configuration, then asked to discuss this Windows application. Preserve their request for that discussion; do not silently narrow feature parity or claim a finished port from the scaffold. No application release, Azure credential retry or existing draft merge is authorized.
+OpenSSF Metal project15417 is registered for this Windows repository, initially
+18% complete after provider import. Actual URL and progress badge are recorded;
+no passing badge or completed operating-practice assessment is claimed.
+
+Next: finish this documentation candidate, obtain genuine final-head app review
+record, pass required checks, apply/read back the planned fuzzing context, merge,
+and publish signed1.0.0-beta.1/dev plus1.0.0/stable with exact asset verification.
+Issue33 is the release checklist. No new features or repeated unchanged local
+acceptance are needed. Existing publication authorization remains valid.
+
+## Azure configured and representative local signatures verified - 2026-10-12
+
+Browser login completes successfully. Authenticated account/ARM readback verifies
+the provided subscription, actual tenant4ebeb0ad-5782-487a-a1b4-5080255774cf,
+East US endpoint, existingkof22signing and releases Active/PublicTrust profile.
+Issued certificates expose full subjectCN=James Maes, O=James Maes, L=Chester,
+S=il, C=US. Existing gclo and every preexisting assignment are preserved.
+
+Created separate secretless MarkdownViewr application/client
+`8f51ec7a-5d91-45db-a374-c628566fc383`, its service principal and exact immutable
+release-environment federation. Granted only Certificate Profile Signer at releases scope; readback
+confirms federation and role. Set/read back all seven non-secret GitHub release
+variables; release environment remains v* tags only. No tenant/security/device
+configuration was altered; no administrative credentials or client secrets in CI.
+
+Signed six disposable owned binaries from321816c with verified Microsoft client
+1.0.146 using the administrator's existing Azure CLI signer authority. SHA256 and
+RFC3161 SHA256 timestamps applied. Every binary passes SignTool /pa /all /v with
+zero warnings/errors and the expected publisher/trust/timestamp; strict existing
+helper also verifies SHA256 digests. Retain artifacts/signing-proof-321816c.
+OwnerPID48976/127248 previews and profiles are untouched. This is real local
+signing proof, not CI OIDC, installer/distribution proof or a published release.
+Standards31 reviewed/published builder, final actual CI signing/distribution,
+genuine human final-head review and enrollment/owner acceptance remain required.
+
+## Exact tooltip head accepted on every channel - 2026-10-12
+
+Exact321816c CI38238385482 is terminal success: focused29/native111,
+published111/111, installed stable110/110 and dev110/110, zero failures/skips.
+The strengthened physical-hover/editor/print case passes all three distributed
+variants. Actual AppKit apply/restart receipts, coexisting windows/profiles,
+isolated updates, five-extension registration, stable uninstall/dev preservation
+and existing defaults preservation pass. Retain actual TRXs/receipts under
+artifacts/current-installed-evidence-38238385482; fixtures remain unsigned.
+No local automated mouse/keyboard tests ran; computer-use helper is unavailable.
+
+Authentication recovery is complete: owner explicitly overrides prior deferral
+and requests a retry. Device-code flow receives Security Defaults error530035;
+native account-picker login is canceled after passkey incompatibility. Supported
+browser authentication succeeds with process-only broker setting and owner MFA.
+Do not repeat the denied device flow or weaken tenant protections.
+
+## Owner review launched; disabled-editor hover bug prepared - 2026-10-12
+
+User asks to finish the release work and run the latest build. No production1.0
+exists. Fresh self-containedde70220 local1.0.0-dev is running asPID127248 from
+owner-latest-de70220-publish, with Review-latest-de70220.md and its own
+owner-latest-de70220-profile. Preserve this instance, settings and binaries while
+the owner tests. Process/window metadata confirms responding; computer-use helper
+fails its required retry/reset recovery (native pipe/sandbox setup unavailable).
+No local physical-input tests ran. The expanded instruction authorizes remaining
+release actions, subject to unchanged gates and genuine maintainer review; never
+post a human acknowledgement on the owner's behalf.
+
+Owner supplies actual ToolTip.IsOpen NullReferenceException from the hover timer
+(line36 in de70220). App issue32 records sanitized evidence. The manual tooltip
+was a different object from the one registered with ToolTipService. Candidate
+attaches the same object, requires the current loaded target/XamlRoot before
+opening, and closes only an open popup. The original editor/printing case now
+requires actual physical hover/text/mouse exit and no unhandled UI log errors;
+include it in the focused suite (29 cases), retaining every original assertion
+and all111 native/published /110 installed cases and deadlines. No GUI-runtime
+fix is yet claimed. Full isolated Release0 warnings/errors and workflow syntax/
+security, formatting and two-document Markdown lint checks pass; fresh hosted
+acceptance still required.
+
+Temporary timing instrumentation is removed by restoring the exact prior fixture
+code; retainedde70220 all-channel evidence remains below. Final signing authority,
+shared reviews/publication, enrollment/inventory, exact-head acknowledgement and
+owner layout/default-chooser acceptance remain required before production release.
+
+## Exact diagnostics head accepted on every channel - 2026-10-12
+
+Exact signedde70220 / CI38209503930 is terminal success: core677/100% measured
+lines, native/published111/111, focused28/28, installed stable/dev110/110 each,
+fuzz9+2; zero failures/skips. Actual TRXs and lifecycle/update receipts retained
+under current-installed-evidence-38209503930, reader-regressions-38209503930,
+current-fuzz-evidence-38209503440 and current-native-de70220.log. Both actual
+AppKit apply/restart receipts and target SHA256 assertions pass; simultaneous
+windows, distinct profiles, isolated updates, five-extension registration and
+stable uninstall/default preservation all pass. Fixtures remain unsigned.
+Published elapsed572.71 seconds; stable496.38 and dev574.75. All three actual
+Appearance/PDF cases complete; no blocked operation is established. Retain timings
+for comparison, remove temporary DEBUG-ui-timing instrumentation and verify final
+head without changing assertions/cases/deadlines. No production defect is inferred
+from the earlier aggregate timeout.
+
+Current review / automated fails because no maintainer-owned current-head record
+exists. The configuration Apply guard includes that genuine review context, so
+prepared fuzz addition17-to18 remains unapplied, preserving every existing rule.
+Support discussions are enabled; release environment permits only v* tags. Shared
+signing/template/help/inventory/license decisions, actual Best Practices enrollment,
+verified Azure resource/identity/role and final shipped signatures, owner visual/
+scaling/default-chooser review and final-head acknowledgement still remain. No
+production publication or shared merge is claimed.
+
+## Published acceptance timing investigation - 2026-10-12
+
+Exact d0526ef / CI38207252597 is terminal failure only in installed-updates.
+Core677/100% measured lines, focused28, native111 and fuzz9+2 pass, zero skips.
+Published process15 records110/111 passes, including native picker cancellation,
+with no assertion failure or final TRX before the unchanged600-second bound.
+The only uncompleted case is Appearance_WidthCssAndPrint. Prior822 published
+109/109 took590.96 seconds, including13.07 seconds for that unchanged case;
+three current fixture close fallbacks versus four in the prior passing run do
+not establish a new close regression. Native111 takes9m55. Retain actual logs
+and distinguish aggregate runtime from an operation hang; installed lifecycle
+was not reached.
+
+Prepare temporary hosted fixture timings for launch readiness, waits lasting
+at least2 seconds, owned-window closure and exact Appearance/PDF phases, retained
+in existing installed-smoke-ui session logs even if the outer process is stopped.
+No cases, assertions, waits/deadlines, source behavior or release gates change.
+Local isolated full Release passes with0 warnings/errors; formatting and direct
+Markdown lint of both changed documents pass.
+Full hosted proof is still required; remove DEBUG-ui-timing once the cause is
+measured and the original acceptance passes. Current required fuzz context remains
+unapplied. Shared approvals, actual enrollment/inventory, Azure verification/
+identity and shipped signatures, genuine final-head acknowledgement and owner
+visual/default-chooser acceptance remain open; no signing/release is claimed.
+
+## Assurance push accepted natively; published picker failure investigated - 2026-10-12
+
+Signed/DCOe6fd281 is pushed. Hosted fuzz38204215912 passes core9/9 and activation2/2,
+zero skips; actual TRXs/log retained under current-fuzz-evidence-38204215912 and
+current-fuzz-e6fd281.log. ExactCI38204216325 passes677 core/100%, focused28/28,
+full native111/111 and format/scripts/security/CodeQL; retain current-native-
+e6fd281.log and reader-regressions-38204216325. Native duration10m11; do not infer
+published or installed acceptance from that result.
+
+Distributed job114664001461 fails: published process reaches its unchanged600-
+second bound with no final TRX. Actual ThemeTransfer_NativePickerCancels fails
+waiting10 seconds for exact native filename1148; owned-window evidence shows
+only Settings/main and blank SettingsStatus, with both app windows inactive in
+the retained screenshot. No installed phase/lifecycle is reached. Preserve
+current-installed-evidence-38204216325/process-15.log and installed job log.
+No signing/publication/required-check addition is inferred from partial success.
+
+A candidate activates the exact owned Settings window and focuses its actual
+native action before UIA invocation; prior helper did neither. Preserve original
+selector/assertions/cases/deadlines, add LastInvocation/LastMouseInput to timeout
+evidence. Full isolated Release0 warnings/errors and format pass; actual hosted
+validation still required. Inactive-owner causation remains a hypothesis until
+that evidence, not an established app defect. No production source changes.
+
+Current ruleset24859282 still requires the genuine review check and every prior
+context. Prepared ruleset-add-fuzz.json adds only Actions-bound fuzzing; do not
+apply until all required automated bootstrap gates pass. Shared31 signing approval,
+Azure resource/identity/profile verification and final signatures, actual Best
+Practices enrollment/shared inventory, final-head acknowledgement and owner
+layout/chooser acceptance remain required. No local GUI input, Azure login retry,
+shared merge, release tag or publication.
+
+## Current standards delta prepared; preceding checkpoint fully accepted - 2026-10-11
+
+Fresh published-standards checker at1cc9d01 identifies mandatory assurance record,
+parser campaigns and public Product enrollment missing in this app (35 PASS,
+3 FAIL,3 REVIEW); prior34/1 assessment is stale. Issues30/31 created. Implement
+five real seeded property targets (Markdown/HTML/frontmatter/extensions, source/
+folds, URLs, theme JSON, generated activation schema), a PR/main/weekly/release
+fuzz workflow and planned required context; prepare honest badge assessment with
+required scope/null project URL, never an invented badge or exception. Remove
+obsolete unsigned-release guidance from SECURITY.md; signing remains fail-closed.
+
+Local core campaigns9/9 cover80000 inputs plus the minimized regression;
+activation2/2 covers20000 envelopes; zero failures/skips. Full core677/100%
+measured lines, isolated full Release0 warnings/errors, format,23 setup tests and all64 script tests
+pass. A campaign oracle failure treated browser-relative backslashes as Windows
+file URIs; preserve failed TRXs, use actual browser URL semantics and require the
+minimized foreign-image denial regression. No production defect inferred and
+no existing assertion/case/deadline removed. New native assembly expectation111
+and installed110 per channel; fresh hosted proof not yet available.
+
+Exact82256f3/CI38201379210 is now terminal success:668 core/100%, focused28/28,
+native/published109/109, installed stable/dev108/108 each; zero failures/skips.
+Actual TRXs, coexisting-channel/registration JSON and native log retained under
+current-installed-evidence-38201379210, reader-regressions-38201379210 and
+current-native-82256f3.log. All actual lifecycle booleans pass; fixtures are unsigned.
+The reviewed next assurance push may proceed without cancelling this evidence;
+require fresh fuzzing and all original gates and add/read back the new context. Production source blobs remain unchanged. Shared signing31 approval,
+Azure resource authority/final signatures, actual enrollment/inventory, final-head
+human acknowledgement and owner design/chooser acceptance still required. No
+Azure login retry, local GUI input, shared merge, release tag or publication.
+
+## Application source review finished; next hosted checkpoint - 2026-10-11
+
+All105 application C# files (41 core/64 native), native markup/project configuration
+and relevant CI/release/installed-lifecycle paths are reviewed. Inventory with
+blob hashes and review scope are retained in artifacts/final-pr-review-progress.json
+and application-review-3b01199.md. Test implementation review was focused; this
+is not final production assessment or genuine maintainer acknowledgement.
+The six reserved filename corrections remain the only new source finding;668
+core tests/100% measured lines and format pass. No further blocking source
+defect established. Consolidate this checkpoint with the held signed fix and
+push for fresh hosted gates; preserve all cases/deadlines.
+
+Correction to the earlier screenshot comparison: ThemeManagementDialog, ThemeEditor
+and EditorConfigurationDialog already route through ShowEditorAsync in Settings;
+old class names do not imply separate modal windows. Owner visual/scaling review
+remains pending. Private screenshot/document contents stay private.
+
+Live PR3 still shows b542dcd automated gates passed (native/published109, focused28,
+installed108 per channel, zero skips); its genuine review check is unsatisfied.
+Shared signing31 remains an unmerged draft without approval, protected release
+variables are empty and signing preflight correctly blocks publication. Pending
+shared merge/publication approval was not answered; no Azure login retry. Actual
+OS chooser/Explorer and owner design acceptance, shared inventory/license decisions,
+repository signing authority and exact shipped SignTool proof remain required.
+No preview55472 changes, local input, shared merge, tag or release publication.
+
+## All-channel acceptance retained; final PR review in progress - 2026-10-11
+
+Exactb542dcd CI38197169201 is terminal success: native/published109/109,
+focused28/28 and installed stable/dev108/108 each, zero failures/skips. Actual
+TRXs/JSON retained at current-installed-evidence-38197169201; simultaneous profiles,
+windows, isolated updates/restarts/target hashes and five-extension registration/
+sibling-preserving uninstall/default preservation pass. Unsigned fixture evidence
+is not production signing or actual OS chooser/Explorer selection.
+
+Full final PR review has inspected18 source files covering core identity/editor/
+theme/settings and activation/registration/startup authority. Progress/remaining
+coverage is in artifacts/final-pr-review-progress.json; the existing incremental
+packet alone must not be called a full review. One actual finding: theme-export
+suggestions omitted reserved COM/LPT superscript device names. Prefix those six
+names consistently with the existing ASCII/device rule;668 core tests/100% measured
+lines and format pass. Local signed correction is held until the review is complete.
+No new native case or changing deadlines is needed for this filename-only fix.
+
+Remaining review: remaining core/renderer/source/navigation/printing models, native
+UI/preferences/browser, build/release policy and final combined diff. Do not infer
+completion from tests or fabricate maintainer acknowledgement. Existing Azure
+account query still reports no authentication; no login retry. Shared31 merge/
+publication approval unanswered; protected signing variables absent. Owner design/
+scaling and chooser, actual signing and final-head human review remain required.
+No GUI input, preview55472 changes, shared merge, tag or release publication.
+
+## Bounded native local links prepared; renderer checkpoint fully verified - 2026-10-11
+
+Exact4d34656 / CI38193736344 is terminal success: focused27/27,
+native/published106/106, installed stable/dev105/105 each; zero failures/skips.
+Actual extended raw-heading/inline/block-code browser case and all registration/
+coexistence/AppKit-update assertions pass. Retain current-native-4d34656.log and
+actual TRXs/JSON at current-installed-evidence-38193736344. Fixtures are unsigned.
+
+Local Markdown/text links previously remained blocked. They now require actual
+user initiation, current namespace/no query/supported type and once-decoded safe
+segments. Source physical root comes from its opened snapshot; the target handle
+is checked before reading. Native child windows retain the scope on every reload,
+focus only matching already-committed inside snapshots and preserve source/window
+watching. No OS shell/arbitrary protocol/executable dispatch.662 core tests/100%
+lines,10 real filesystem tests, zero-warning isolated Release/full format pass.
+A diagnosed test junction teardown failure is corrected with explicit removal of
+only the link before fixture cleanup; containment assertions remain. New physical
+browser/duplicate/watcher/junction-reload case compiled;109 native cases discovered,
+fresh hosted proof required. Original cases/deadlines retained; no local GUI input.
+
+Prior CI is terminal, so the authorized next push can proceed after signed review.
+Shared signing31 approval request unanswered; do not assume permission. Azure/
+shipped signing, actual chooser/Explorer, owner design/scaling and genuine final-
+head review remain required. No preview55472 change, login retry, shared merge,
+release tag or publication. Original upstream/native compatibility limits recorded.
+
+## Authored HTML fidelity corrected locally; preceding run fully green - 2026-10-11
+
+Exactc3c735e / CI38190828814 is terminal success. Actual TRX native/published106/106,
+focused26/26, installed stable/dev105/105 each, zero failures/skips. Both AppKit
+updates/restarts/target hashes and actual concurrent-channel registration/profile/
+isolation/sibling-preserving uninstall pass; retain
+artifacts/current-installed-evidence-38190828814 actual TRXs and JSON. Unsigned
+fixtures do not establish chooser/Explorer or production signatures.
+
+Immutable original MarkdownDocument/MarkdownExtensions/ImageInliner blobs are
+Git-hash verified. Four actual pre-fix cases reproduce authored inline code being
+formatted. Existing boundary handling now tracks true code/pre tags and real
+closing tags across blocks. Raw block extensions apply only to tokenizer-visible
+text after source positions are recorded, preserving attributes/comments/code and
+entity spelling; metadata matches body-only subscript preprocessing.642 core
+cases/100% measured lines and isolated-output zero-warning Release/full format
+pass. Original MIT attribution retained and renderer boundary documented. Extended
+existing actual browser case/focused filter is compiled; fresh runtime required.
+
+Prior CI is terminal, so the next authorized push may include the held signed docs
+and this correction without cancelling evidence. Shared signing31 approval request
+still pending; no reply or merge assumed. Protected Azure variables remain empty;
+no login retry, local GUI input, owner preview55472 change, tag or publication.
+
+## Placement screenshots verified; shared builder decision requested - 2026-10-11
+
+Read-only gclo v1.1.0 reference archive matches published SHA256SUMS. Extracted
+only gclo.exe to the explicit workspace path; no application execution. Installed
+Microsoft SignTool verify/pa/all/v succeeds, one signature, zero warnings/errors,
+exact subject CN=James Maes, O=James Maes, L=Chester, S=il, C=US and Microsoft
+Public RSA timestamp chain. Retain artifacts/gclo-signing-reference/verify.log.
+This corroborates the shipped recipe/publisher, not deployed profile mapping or
+MarkdownViewr OIDC/signing permission. No Azure changes or copied CI client ID.
+
+Exactc3c735e / CI38190828814 focused26/26 passes, zero failures/skips. Inspected
+actual native theme-manager and Printing screenshots in
+artifacts/reader-regressions-38190828814: complete window fits the hosted monitor;
+native scrollable Printing content and theme Save/Cancel remain within it. Full
+native114623032163 is terminal106/106, zero skips,8m6; retain current-native-
+c3c735e.log. Installed114623032253 is live; do not push local docs yet.
+Core/build/format/scripts/security pass; final-head review acknowledgement absent.
+
+Add a current evidence-backed release checklist above historical tasks, preserving
+full PRODUCT scope and every old item. Passed published/installed case names prove
+source/Contents/Printing/theme/editor/reload/window/footer/attribution acceptance;
+chooser/Explorer, owner scaling/layout/icon and remaining fidelity review are
+still required. Rechecked shared signing31 and license32: all applicable checks
+green, both unmerged drafts. Requested explicit owner approval for signing31
+merge/publication only; prior authorization remains draft-only until reply.
+No assumption of approval and no Azure login retry, changes, local input or release.
+
+## Complete distributed checkpoint; placement fix pushed - 2026-10-11
+
+Exact9d5c0d1 CI38188145397 is terminal success. Actual TRX: native/published106/106,
+focused26/26, installed stable/dev105/105 each; zero failures/skips. Retain actual
+installed TRXs/results/coexisting-channels JSON under
+artifacts/current-installed-evidence-38188145397. Both real AppKit updates restart
+at the expected target with verified application hashes. Concurrent stable/dev
+windows, distinct profiles, isolated updates, five registered extensions and
+sibling-preserving uninstall pass. Fixtures are unsigned; OS chooser/Explorer and
+production signing are still not established.
+
+Signed/DCO c3c735e now pushed: centers the bounded Settings window in its actual
+monitor work area and adds independent desktop containment to the existing layout
+case. Exact CI38190828814 is running. Inspect complete Settings screenshots and
+retain fresh distributed results; do not push more changes while it is live.
+Public Microsoft OpenID discovery resolves the supplied directory to GUID
+4ebeb0ad-5782-487a-a1b4-5080255774cf, but signing-resource tenancy/profile/subject
+still require authenticated Azure inspection. No login retry/configuration change.
+
+Shared draft PRs and the license exception need their required maintainer decision;
+current-head review requires a genuine acknowledgement. No shared merges, local GUI
+input, preview55472 changes, tags or release publication. Latest snapshot below is
+historical where superseded by this checkpoint.
+
+## Exact9d5c0d1 native acceptance passes; Settings placement corrected locally - 2026-10-11
+
+Exact CI38188145397 focused26/26 and full native106/106 pass, zero failures/skips.
+Actual TRX proves repeated physical Contents/source synchronization, offscreen
+Nord palette/default pixel/save/reopen, future-schema export, trimmed full-title
+hover/click, both Printing cases and raw-inline provenance. Retain current-focused-
+9d5c0d1.log/current-native-9d5c0d1.log and reader-regressions-38188145397 actual
+TRX/screenshots. Full native duration9m45. Installed114614880391 is live; no
+current published/installed/coexistence/signature result inferred.
+
+Inspect actual theme-manager and Printing Settings screenshots. Controls/palettes
+are native and explicit, but default OS cascading position pushes right/bottom
+edges beyond the hosted monitor. FitWindow previously constrained size only;
+MoveAndResize now centers the complete resized window inside its actual monitor
+work area. Extend the existing native layout case with independent virtual-
+desktop containment, preserving its resizing/draft checks. Zero-warning Release
+and full formatting pass locally; fresh runtime/screenshots required. Hold the
+next push until current full installed execution is terminal.
+
+Review gate currently fails because no maintainer-owned automated review record
+exists for the exact head; never fabricate acknowledgement. Shared signing/
+license/inventory/AppKit Help/template Help PRs31/32/36/29/4 remain unmerged drafts
+with no reviews, actual starter remotewindows-app-template. Protected release
+environment has no signing variables. User-selected OS defaults/Explorer, owner
+layout feedback, reviewed shared/license requirements, genuine current-head
+review and deployed Azure/shipped signing remain required. No Azure retry, local
+input, preview55472 changes, shared merge, tags or production publication.
+
+## Exact1bfab22 terminal evidence retained; corrective candidate ready - 2026-10-11
+
+CI38187115859 is terminal: focused23/26 and native102/106 fail, zero skips.
+Failures are offscreen Nord palette/default and copied-draft lookups, Owned future
+import/export lookup, and repeated physical source/Contents activation. Published
+process hits unchanged600-second limit without final TRX; actual process log has
+the same four failures. Installed lifecycle phase is not reached. Retain
+current-installed-1bfab22.log and actual artifact bundle at
+artifacts/current-installed-evidence-38187115859, plus focused/native logs/TRX.
+
+Signed local49f0556 restores the trusted heading identity on the native row's
+content Grid for repeated ItemClick. Signed localb1f8af7 scrolls the owned native
+list until exact offscreen theme IDs are realized before unchanged selection and
+assertions. Release/format/hooks pass; cases/deadlines remain. Prior full run is
+terminal, so the next authorized push can proceed without cancelling evidence.
+Current-head focused/full/distributed proof, actual Settings pixels, owner/chooser/
+review/signing and production publication remain required. No local GUI input.
+
+## Native theme realization helper corrected locally - 2026-10-11
+
+Exact1bfab22 CI38187115859 focused23/26 fails, zero skips. New palette/default
+case cannot find ThemeChoice:Nord; existing future-schema/export case cannot find
+ThemeChoice:Owned future. Taller native preview rows leave those items virtualized
+offscreen. The selection helper now scrolls the owned ThemeList with its native
+Scroll pattern until the same exact automation ID is realized, then uses the same
+SelectionItem action. The existing10-second deadline and every value/assertion/
+case remain. Release/format pass; fresh hosted proof is required.
+
+The third focused failure remains physical source/reader alignment. Both Printing
+cases, Contents presentation, raw-inline folding, picker cancellation and new
+full-title tooltip/physical activation pass. Retain current-focused-1bfab22.log
+and actual focused TRX at artifacts/reader-regressions-38187115859. Signed local
+49f0556 preserves the heading Tag on the new Contents content Grid; its unchanged
+repeat-click regression awaits the next pushed head.
+
+Full native114611732252 and installed114611732224 remain live. Keep these local
+corrections unpushed until terminal; no installed/signature outcomes inferred.
+Cached ContentView/SettingsView/ThemeManager source matches immutable reference
+blobs970a8d6/c89b75c/7d81920 after BOM/newline normalization, confirming the default
+semantics audit. No local input, owner preview changes, Azure retry or release.
+
+## Repeat Contents activation identity restored locally - 2026-10-11
+
+Actual retained b2ecc8c pixels show the last Contents row selected while both
+reader/source remain at middle after the repeated physical click. The new native
+row changed content from a heading-tagged TextBlock to a Grid without that Tag.
+ItemClick handles the clicked FrameworkElement's heading identity; selecting an
+already selected row does not raise SelectionChanged. Restore the same trusted
+DocumentHeading Tag on the content Grid. This is a precise metadata candidate,
+not an alteration to source geometry, scroll thresholds or test assertions.
+Existing Source_BidirectionalScroll performs the repeated physical activation and
+must prove the correction on the next exact head. Release/format pass locally.
+
+Correct the earlier input interpretation: InputDiagnostics.GetCurrentPoint(sender)
+reports client coordinates. Do not compare110,307 directly to screen-space row
+bounds318..358; the titlebar/client origin accounts for that difference. Tooltip
+presence alone did not prove interception, and placement changes did not resolve
+the failure. Trim-only full-title tips remain the intended UX refinement; the
+repeat-click identity is the next specific correction to verify.
+
+Pushed1bfab22 exact CI38187115859 is still live. Preserve focused/full/installed
+execution before the next push. Local metadata correction is held; no current
+GUI/runtime/signature or installed acceptance is claimed. No local input,
+preview55472 changes, Azure retry, shared merge, tags or publication.
+
+## Theme palettes/default controls and fixture cleanup prepared - 2026-10-11
+
+Native theme rows now show five validated palette previews with hexadecimal
+accessible names/tooltips, and textual Built-in/edited/Custom, Enabled/Disabled
+and Default state. A native default radio control explicitly enables the selected
+choice; selecting a row alone changes no saved palette. Enable/default changes
+stay inside the copied draft until Save, and Cancel/child edit/import/restore
+semantics remain. Selection scrolls into view. The pinned Mac Default checkbox
+writes ThemeManager.activeThemeName; Windows retains its existing DocumentTheme
+saved-choice contract, with explanatory text that Save applies it to open readers
+and future windows. No second preference or silent migration is introduced.
+
+A new actual native case measures painted Nord palette pixels, checks all five
+accessible swatches/default/enabled state, saves and reopens, and retains a real
+Settings-manager screenshot. It compiles/discovers but has not executed. Release
+build has zero warnings/errors; format passes; seven read-only/isolated Windows
+adapter cases pass.106 native cases discovered; core unchanged598/100% lines.
+
+Exactb2ecc8c CI38185403701 is terminal: focused23/24 and native101/102 fail,
+zero skips, only physical source/reader alignment. Both Printing cases, raw-inline
+folding, picker cancellation and Contents presentation pass in focused/native.
+Published suite reaches unchanged600-second bound without final TRX; retained
+process-15.log reports the same alignment failure. Installed lifecycle is not
+reached. Retain current-native-b2ecc8c.log/current-installed-b2ecc8c.log and actual
+artifacts/current-installed-evidence-38185403701; do not invent distributed counts.
+
+The published log reports ten failed exits. Exact pinned FlaUI NuGet source
+c5e7eb7 confirms CloseMainWindow then a5-second CloseTimeout; independent sibling
+windows intentionally keep the fixture process alive. Teardown now closes every
+fixture PID's native Window pattern before the unchanged process close/kill
+fallback. Cases, assertions, all deadlines and600-second process limit remain;
+cleanup/runtimes need fresh hosted proof. No local GUI input or other-app closure.
+
+Signed local24a464e default status/trim-only tooltip candidate can now be pushed
+with this preparation after old run is terminal. Next: exact-head focused/whole/
+installed acceptance and actual Settings pixels; resolve any remaining source
+alignment from retained mouse/viewport evidence. Owner/chooser/signing/review and
+production publication remain required. No Azure retry, shared merge or tags.
+
+## Effective Markdown default status prepared - 2026-10-11
+
+General now reports Default/Not default/Unknown/Unregistered for this exact
+installed edition. A bounded read-only Windows AssocQueryStringW/ASSOCSTR_PROGID
+query reads the effective user-selected `.md` ProgID; unchanged owned registration
+is required. Registration alone cannot report Default, and an unavailable query
+cannot become success. Refresh on returning from Windows Settings and through a
+native Refresh status action. No UserChoice/hash/default writes or competitor
+paths are read/displayed. ADR0005 and threat-model boundaries are updated.
+
+Seven actual read-only Windows API/isolated registry cases pass, zero skips:
+real `.txt` query, preserved existing `.md` choice, other edition/default and
+retargeted/unregistered/unknown ownership. Release build has zero warnings/errors;
+format passes.105 native cases compile/discover including updated actual General
+status/refresh and new long-title tooltip/physical-heading acceptance, not run.
+Core is unchanged from598 passing cases/100% measured lines.
+
+Pushedb2ecc8c / CI38185403701 focused23/24 fails, zero skips. Actual TRX proves
+both Printing defaults/draft cases, raw-inline folds, picker cancellation and
+Contents presentation pass. The remaining physical source/reader alignment fails.
+Retain current-focused-b2ecc8c.log and actual bundle at
+artifacts/reader-regressions-38185403701. Actual evidence still shows a short-title
+tooltip; only truly trimmed native labels now receive tips, with explicit placement
+target. The new physical hover/click case and retained mouse-invocation diagnostics
+must verify this candidate before calling the remaining failure resolved.
+
+Full native114606533948 and installed114606533825 are still live. Preserve both
+before pushing this preparation. Next: inspect terminal outcomes, verify tooltip
+and default status on the next exact hosted head; complete theme previews/default
+clarity and remaining owner/chooser/signing/review requirements. No local input,
+preview55472 changes, Azure retries, shared merge, tags or release publication.
+
+## Terminal published regressions retained; next candidate ready - 2026-10-11
+
+Exactb5e519e CI38184378762 is terminal failure: focused19/22, native98/100,
+published98/100, zero skips. Published actual TRX confirms the same raw-inline
+fold and source physical-click/alignment failures; installed lifecycle phase is
+not reached. Retain current-installed-b5e519e.log and actual artifact bundle at
+artifacts/current-installed-evidence-38184378762. The General/Contents case passes.
+
+Signed localec78b50 fixes reproduced parser/token boundaries and prepares the
+native tooltip/picker corrections; signed7fa9f77 adds shared Printing Settings.
+All598 core tests/100% lines, zero-warning Release, format/hooks pass;102 native
+cases compiled/discovered. Full prior run is terminal; next authorized push can
+proceed without cancellation. Fresh exact-head focused/full/distributed proof,
+Settings design acceptance, remaining defaults/themes, genuine review and signing
+are still required. No installed success inferred and no production publication.
+
+## Shared native Printing settings prepared - 2026-10-11
+
+Add a dedicated Printing category using the same PrintOptionsEditor as the output
+dialog: theme, backgrounds/images, match-screen zoom, page/document width, borders
+and bounded padding. Apply commits validated defaults; Restore returns to latest
+saved choices and closing discards the draft. PDF destinations/open-after-save
+remain deliberate output actions. No duplicate validation, new dependency or print
+job is introduced by Settings.
+
+Both Settings and accepted Print/PDF choices use checked persistence before
+broadcasting shared print defaults/baselines. Sibling saves retain an unsubmitted
+Settings draft; Restore uses the newer saved baseline. Theme changes refresh named
+print choices without erasing other draft fields. Native NavigationView category
+labels remain visible at normal960px width and adapt at narrower widths.
+
+Release build has zero warnings/errors; format verification passes. All598 core
+cases/100% measured lines pass after the reproduced parser correction.102 native
+cases compile/discover, including new actual Apply/Restore/cancel/sibling-save
+checks with owned control scopes and a retained Settings screenshot. These new
+GUI assertions are not yet executed. Existing output/PDF/pixel cases, every
+assertion and all process deadlines remain.
+
+Signed localec78b50 retains the three evidence-based reader/picker corrections.
+Pushedb5e519e focused19/22/native98/100 fail, zero skips; General/Contents options
+case passes in both. Installed114603470178 remains live; retain it before pushing
+this Printing change. Next: inspect terminal distributed evidence, push only then,
+execute exact-head native/distributed acceptance and inspect real Settings pixels.
+Then complete default-status/theme previews and remaining release requirements.
+No local input, owner preview changes, Azure retry, shared merge or publication.
+
+## Multiline token boundary and native input regressions corrected locally - 2026-10-11
+
+Exactb5e519e / CI38184378762 focused19/22 and native98/100 fail with zero skips.
+Focused failures: raw-inline complete-header folding, source-navigation physical
+click/alignment, and native Open picker filename lookup. Full native reproduces
+the first two; new General/Contents presentation case passes in focused/full.
+Retain current-focused-b5e519e.log/current-native-b5e519e.log and actual focused
+TRX/screenshots under artifacts/reader-regressions-38184378762. Installed job
+114603470178 is still live at this observation; preserve it before any push.
+
+An exact core regression reproduces the raw opening-tag/newline failure: Markdig
+moves a line-start closing tag into a following HtmlBlock. Existing actual HTML
+tokens now retain complete inline titles across consecutive raw blocks, ignoring
+comment/attribute lookalikes and stopping at a new heading/Markdown boundary.
+All598 core tests pass with100% measured line coverage, including CRLF, comments,
+multiline closing syntax and unrelated blocks. Release/format pass.
+
+Owned UI evidence showed a tooltip near Contents rows; interception was an
+unconfirmed hypothesis. Place the native tooltip to the right and make it non-hit-testable; retain
+all physical click/alignment assertions. The exact native filename control1148/
+Edit appears in owned enumeration despite the provider condition lookup timing
+out; use that same ID/type in owned enumeration, without broader controls or a
+longer deadline. These native corrections require fresh hosted acceptance.
+
+A dedicated native Printing page/shared options editor is prepared separately;
+its new apply/restore/dialog-cancel/sibling-persistence case compiles/discovers,
+not executed. Keep the goal active; final signing/review/chooser/design acceptance
+and production publication remain open. No local input or preview changes.
+
+## Registration and simultaneous editions verified - 2026-10-11
+
+Exact53755ab / CI38182128299 is terminal success: focused21/21, native99/99,
+published99/99, installed stable98/98 and dev98/98, zero failures/skips.
+All reported PR checks pass. Actual AppKit update/apply/restart verifies target
+versions and assembly hashes. Before/after registration JSON confirms all five
+extensions for both editions; actual uninstall removes owned registrations and
+preserves existing defaults.
+
+coexisting-channels.json confirms simultaneous stable/dev windows in separate
+processes/profiles, isolated updates with sibling state preserved, stable uninstall
+preserving the live registered dev edition, and unchanged existing defaults.
+Retain current-installed-53755ab.log and the complete actual TRXs/results under
+artifacts/current-installed-evidence-38182128299. These fixtures are unsigned;
+Windows chooser/Explorer interaction and final production signatures remain open.
+The two published print-startup failures seen onbd3d72a do not reproduce on537;
+do not claim a production startup fix from this clean run alone.
+
+Signed local5803fc1 andaeeb28d include the inline-heading correction and native
+General/Contents settings. Build/format and593 core/100% measured lines pass;
+100 UI cases are compiled/discovered. Their updated/new native assertions need
+fresh hosted execution. The old full job is terminal, so the next authorized
+push may proceed without cancelling it. Full Settings/theme/Printing design and
+genuine review/signing/publication remain required; no local desktop input.
+
+## Native General and Contents options prepared - 2026-10-11
+
+Move new-window Contents/Source defaults and Default Apps guidance into General;
+splash/startup update controls remain Advanced. Add persisted Contents wrapping
+and optional depth markers using native TextBlock/ListView/ToggleSwitch controls.
+Unwrapped titles use one line/ellipsis and full-title tooltips; wrapped titles have
+no two-line cap. Preserve heading identities, selected row, per-window depth and
+visibility. Checked persistence precedes sibling broadcasts and baseline updates.
+Category switches reset ordinary scroll position without discarding CSS drafts.
+
+All593 core tests pass with100% measured line coverage; zero-warning Release build
+passes. A new actual native case checks long-title geometry, live sibling markers,
+unrelated-save persistence, Settings reopening and restoration; focused/full/
+distributed suites retain every previous case and deadline. It has compiled but
+not executed. Retain actual Settings-window screenshots in the hosted case.
+
+Signed local5803fc1 inline-heading fix and this preparation remain unpushed while
+exact53755ab installed114596717826 is verified live; focused21/native99 on537
+pass. Do not cancel the current full job or claim new installed/chooser/signing
+results. Issue21 remains open for full Settings redesign/default status/Printing/
+theme previews and owner acceptance. No local desktop input or production release.
+
+## Mac screenshot comparison and inline-heading correction - 2026-10-11
+
+Reviewed all eight owner-provided Mac screenshots; issue #21 records the concrete
+Windows gaps: General default-viewer status, configurable Contents wrapping/depth
+markers, theme palette previews and clear Enabled/default choices, and a dedicated
+Printing settings page. Use native Windows controls and retain the owner's visible
+Print/Contents, removed duplicate depth selector and off-by-default panes. Private
+screenshots/document contents remain outside the repository and public tickets.
+
+A separate valid multiline raw heading inside a Markdown paragraph reproduced the
+remaining complete-header fold loss. Pair actual HtmlInline AST nodes within their
+Markdown leaf, excluding code/comment lookalikes; preserve the original closing
+line and distinct implicit-close positions. All592 core tests pass, zero skips,
+with100% measured core line coverage; Release build has zero warnings/errors.
+The existing raw-HTML UI fixture now exercises that inline variant; its hosted
+runtime outcome is not yet proved. Do not infer it from the older block fixture.
+
+Pushed53755ab / CI38182128299 passes focused21/21 and full native99/99,
+zero failures/skips; retain current-native-53755ab.log (9m14). Installed job
+114596717826 remains live at this observation. Hold the next push until terminal;
+no current distributed/registration/coexistence outcome or signature is claimed.
+
+## Published print startup failures retained; next diagnostic candidate - 2026-10-11
+
+Exactbd3d72a / CI38180868496 is terminal: focused21/21 and native99/99 pass,
+zero skips. Installed job114592949188 times out in the published suite at the
+unchanged600-second process bound; no final TRX or installed lifecycle outcomes.
+Retained process-15.log shows two actual30-second failures before Print opens:
+Print_KeyboardDraftCancel and Print_WindowsDialogCancel cannot find their initial
+rendered heading. Other retained screenshots/PDFs prove the suite continued,
+including raw-HTML and source cases. Do not call this a proven installer bug or
+assume it is mere suite slowness.
+
+Retain current-installed-bd3d72a.log and actual artifact bundle under
+artifacts/current-installed-evidence-38180868496. Add normal per-case console
+reporting to the existing full published/installed suites and owned screenshot/
+activity-log/accessibility-tree reporting only when either print fixture startup
+fails. Existing deadlines, assertions, all cases and failure status are unchanged.
+This distinguishes slow aggregate execution, a specific blocked case and runner
+shutdown; actual startup logs distinguish missing activation/render from readiness.
+
+Signed local5de4125 coexistence acceptance and489af75 pinned audit can now be
+pushed with this targeted test-only evidence change because the earlier run is
+terminal. Production signing, actual Windows chooser/Explorer, genuine review
+and owner design acceptance remain required. No local GUI input or release.
+
+## Full native correction passes; pinned reference audit retained - 2026-10-11
+
+Pushedbd3d72a / CI38180868496 passes full native99/99 and focused21/21,
+zero failures/skips; native duration8m23. Retain current-native-bd3d72a.log
+and the focused TRX. Installed job114592949188 remains live; do not infer
+published/installed/registration outcomes from native success.
+
+Re-fetch immutable upstream template/CSS-help blobs, verify Git hashes and confirm
+cached source matches after newline/BOM normalization. Retain pinned-css-audit.json:
+all47 shared screen selectors retain matching upstream declarations when cascading
+per property. The31 upstream-only selector groups concern native Contents/source/
+dividers; document CSS does not style native controls. Record that boundary in
+docs/reference-fidelity-audit.md rather than claiming full pane-CSS compatibility.
+This declaration comparison is not painted-output or final-release proof.
+
+Signed local5de4125 prepares real concurrent edition/update/uninstall acceptance;
+all64 tooling tests/configured analyzer rules pass. Wait for the current full run
+before pushing it and the audit documentation. Final OS chooser/Explorer, owner
+acceptance, genuine review and shipped signing remain outstanding.
+
+## Simultaneous stable/dev acceptance prepared - 2026-10-11
+
+Signed pushedbd3d72a / CI38180868496 passes focused21/21, zero failures/skips,
+including unchanged raw-HTML navigation/fold/find/reload. Core/build/format pass;
+full native and installed jobs remain live. Retain current-focused-bd3d72a.log.
+Do not cancel this full run by pushing the next prepared change early.
+
+Add a separate phase after every existing published/installed suite: fresh owned
+stable/dev installs coexist, use distinct actual edition profile/log prefixes,
+show distinct document/edition titles and run in separate processes. Actual
+AppKit updates run while the sibling remains open; target hashes/versions and
+both file registrations are checked, with unchanged sibling PID/binary/settings.
+Uninstall stable while dev remains open and registered, then clean up both owned
+fixtures without changing Windows defaults. No real profile or local desktop
+input is used. The phase is locally prepared, not executed or runtime-proved.
+
+Canonical artifact boundaries and actual manifest package IDs gate every smoke
+uninstall. A real filesystem safety regression checks wrong IDs, traversal,
+prefix collisions and missing manifests. All64 tooling tests and every configured
+analyzer rule on both changed scripts pass; fresh hosted coexistence execution
+remains required after the current run finishes.
+
+## Raw multiline heading fold reproduced and corrected - 2026-10-11
+
+Exact764c7ac / CI38179931820 is terminal: focused20/21, native98/99,
+published98/99, zero skips. All failures are the newly added raw-HTML case at
+its complete-header fold assertion. Published failure prevents the new installed
+registration lifecycle readbacks from running; do not claim those passed.
+Retain current-focused-764c7ac.log/current-native-764c7ac.log and downloaded TRXs
+under artifacts/reader-regressions-38179931820 and
+artifacts/current-installed-evidence-38179931820.
+
+The parser mapped a raw heading's end to its opening line, hiding remaining
+multiline attributes/title/closing syntax when folded. Three actual failing core
+regressions reproduced this; existing AngleSharp token spans now retain the
+complete header, respecting quoted attributes, comments and nested title markup.
+All34 source mapping/folding cases and all589 core tests pass with100% measured
+line coverage. Release build has zero warnings/errors and format verification
+passes. The unchanged raw-HTML runtime case and full distributed suites must
+verify the correction on the next pushed head.
+
+No production publication, signing verification, OS default selection or local
+desktop input. Preserve owner preview55472. Actual chooser/Explorer, concurrent
+stable/dev isolation, full fidelity audit, genuine maintainer review and final
+signed release artifacts remain required.
+
+## All distributed source cases pass; next release acceptance checks - 2026-10-11
+
+Exact9994eda CI38176727468 is terminal success: focused20/20, native98/98,
+published98/98, installed stable97/97 and dev97/97, zero failures/skips.
+Actual AppKit apply/restart advances stable0.1.0→0.4.0 and devbeta.1→beta.2;
+post-upgrade channel/versions and target DLL hashes are verified by the harness.
+Retain actual TRXs and before/after JSON under artifacts/current-installed-evidence-38176727468.
+These fixtures are unsigned and sequential; they do not prove production signing
+or simultaneous stable/dev coexistence. Signed cleanupc89ce5c was pushed as parent of764c7ac.
+
+New read-only harness checks require all five Open With/Default Apps extensions
+at real initial install and after upgrade, the same owned ProgID, complete owned
+cleanup after uninstall, and unchanged extension/default UserChoice values/hashes.
+Snapshots stay in memory; retained evidence contains only public registration
+metadata and success booleans. Actual isolated registry negative fixtures cover
+each missing extension, wrong executable/channel and incomplete cleanup.
+All63 tooling tests and every analyzer rule on changed scripts pass locally;
+actual install lifecycle readbacks await the next exact-head hosted run.
+
+Add actual multiline/same-line HTML heading navigation, complete literal header
+folding, paired find/cancel and watched reload to full and focused UI acceptance.
+The new case compiles; runtime proof is pending. Set the app version prefix1.0.0
+while keeping dev suffix; tagged workflow versions remain authoritative. This
+changes the app milestone, not published AppKit0.1.0 dependencies.
+
+Standards inventory draftPR36 signed6b4fd17 registers this app and the Windows
+starter as Product, adoption in progress; documentation/conformance checks pass,
+review/merge remains required. Shared Help AppKitPR29 and starterPR4 now have
+passing exact-head gates, including starter2688e3f all-rule analyzer correction.
+No PR merged, tag created or production release published. Preserve owner55472
+and its output/profile; no local desktop input or Azure login retry.
+
+Still required: fresh diagnostic-free/native/raw-HTML/lifecycle acceptance,
+actual OS chooser/Explorer, real simultaneous channel isolation, owner design
+and genuine current-head review, reviewed/published owned-file signing builder,
+verified Azure repository identity/profile/subject and shipped signatures.
+
+## Source correction passes full native acceptance; cleanup local - 2026-10-11
+
+Exact signed9994eda CI38176727468 passes focused20/20 and full native98/98,
+zero failures/skips. The original source focus, both-direction actual heading
+alignment and physical wheel case pass without changed bounds or deadlines.
+Core586/586 retains100% measured line coverage; build/format pass. Retain actual
+TRX under artifacts/reader-regressions-38176727468 and native/core9994eda logs.
+The published/installed job114580574833 remains live; preserve that run before
+pushing another head. No installed or signed release claim follows from native.
+
+Remove temporary source color/coordinate/scroll and collapsed-index probes only;
+keep production painting, hit-testing, offscreen geometry and actual regression
+assertions. This cleanup has local zero-warning Release/format passing and needs
+fresh exact-head hosted acceptance after the current installed job is terminal.
+
+Shared defaults: AppKit PR29 signedf58aac9 passes115unit/100% core+updates,
+14/14 native WinUI/WPF and build/format. Starter PR4 signede4c4a50 passes8/8 native,
+both generated variants20core/8native each, CLI14, plus installed update jobs.
+Its pinned analyzer combined pass crashed; signed2688e3f is pushed after terminal
+evidence with all-rule casing partition mitigation. All build scripts pass every
+configured rule locally; new exact-head gates remain pending. No PR merged.
+
+Still required: actual default chooser/Explorer/hook lifecycle and stable/dev
+coexistence, full reference fidelity/standards inventory, reviewed published
+signing builder, verified repository Azure identity/profile/signer and final
+shipped signatures, owner design acceptance and genuine current-head human
+review. Stable1.0/dev publication is authorized only after these requirements.
+Preserve preview55472, no local desktop input, no further Azure login attempts.
+
+## Full source acceptance advanced; geometry correction pending - 2026-10-11
+
+Exact signed6374611 CI38174602145 is terminal: focused19/20, native97/98,
+published97/98, zero skips. Actual initial/sustained native colors, physical
+hover and focus, explicit System→Light, and nested outline pass these variants.
+The original bidirectional source test advances to line490: source middle glyph
+alignment passes, but the reader heading remains offscreen. Retain terminal
+logs current-native-6374611.log/current-installed-6374611.log and distributed
+TRX under artifacts/current-installed-evidence-38174602145. Installed channel
+acceptance has not run because published acceptance remains red.
+
+The next correction uses full native content-client character points with
+AllowOffClient, without adding ScrollViewer.VerticalOffset twice. It also removes
+the obsolete scroller search. Bounded opt-in numeric probes compare native points,
+old raw rectangles, anchors and mapped targets. No document content/path is logged.
+Original physical bidirectional assertions, deadlines and geometry bounds remain.
+Local zero-warning Release and formatting gates must pass before signed push;
+hosted verification of this correction remains pending. Remove temporary probes
+before release. Preserve owner preview55472 and avoid local desktop input.
+
+Default-app chooser/Explorer/install lifecycle, real stable/dev coexistence,
+original fidelity/standards, verified Azure/shipped signatures and genuine
+current-head human review remain required. No release publication claim.
+
+## Sustained source palette candidate - 2026-10-11
+
+Exact91877f7 CI38173447118 is terminal:18/20 focused,97/98 native,
+95/98 published,zero skips. Nested outline now passes all variants; source
+focus still fails and published initial Light colors remain authoritative.
+Retain artifacts/current-native-91877f7.log and actual published TRX under
+artifacts/current-installed-evidence-38173447118. No installed outcome yet.
+
+Signed5fa6754 orders semantic formatting after the native property queue;
+signedb15fcbc includes actual source scroll offsets in native content-client
+hit-testing. Both have local zero-warning Release/format/hooks passing.
+Also repaint from the explicit shell theme command: System and explicit Light
+may have the same ActualTheme and otherwise provide no ActualThemeChanged
+repaint. Add System→Light after already highlighted text, and require actual
+native colors in three consecutive existing250ms polls, within the unchanged
+10second limit. This catches a temporary correct flash followed by the proven
+native reset; it does not mirror tokens, delay blindly or relax expectations.
+
+All current corrections preserve physical hover/focus/selection, exact native
+colors and source -2..36px alignment bounds. Tagged diagnostic probes remain
+opt-in and must be removed after diagnosis before release. Preserve owner55472
+output/profile and no local desktop input. Installed/default/Explorer/lifecycle,
+side-by-side editions, original fidelity/standards, Azure/signatures and genuine
+current-head human review remain open; no publication claim.
+
+## Native client caret coordinates - 2026-10-11
+
+Exact91877f7 CI38173447118 focused18/20,2failures,zero skips: outline
+now passes; initial hover-fixture color and physical source focus remain red.
+Focus probe returns selection2 at verticaloffset5297.759, disproving the
+assumption that client hit-testing coordinates start at the visible viewport.
+
+Microsoft's CTextBoxView::GetClientRect reports the full native extent; its
+viewport/world-space conversion starts from the scroll offsets. Native caret
+range hit-testing therefore needs content-client coordinates. Add the actual
+horizontal/vertical scroll offsets to the client inset before GetRangeFromPoint.
+Retain identical selection/read-only/physical click/wheel and exact glyph
+alignment assertions. Evidence is retained in
+artifacts/reader-regressions-38173447118/reader-regressions/reader-regressions.trx;
+offscreen rectangles and unshifted client-point methods are both disproven.
+
+Signed local5fa6754 fixes the separately proven foreground propagation ordering;
+its local zero-warning Release/format/hooks pass. Preserve live91877f7 full
+native/published jobs before pushing the new candidate; do not restart on timeout.
+Hosted caret/color and complete installed/release verification remain required.
+
+## Proven native foreground replacement - 2026-10-11
+
+Exact04c1da8 CI38172448726 is terminal:18/20 focused,96/98 native,
+94/98 published,zero skips. Published failures retain initial Light colors in
+both palette and hover fixtures, nested outline and source-focus alignment.
+Real color trace has snapshot1/paint3/tokens6 unchanged: paint complete
+`#FF75628B` at20:37:33.320, after native queue `#FF1F1F1F` at20:37:33.389.
+The hover fixture reproduces the same reset before its pointer step. This
+proves native property propagation replaces successfully painted ranges;
+classification and generation cancellation do not explain this variant.
+
+Signed91877f7 is now pushed. Its actual native caret/outline acceptance is
+running. Prepare the next source fix: after setting native Background/Foreground,
+await an owned low-priority dispatcher callback before applying default and
+semantic range formats; recheck snapshot/paint/disposal guards after the queue.
+This orders the real pending inherited-property work before character formatting,
+with no timer, repeated repaint, fake accessibility color or altered assertion.
+Local zero-warning Release passes; formatting/hosted exact-color proof remains
+required. Preserve the current91877f7 run before pushing the color correction.
+
+Evidence: artifacts/current-native-04c1da8.log and
+artifacts/current-installed-evidence-38172448726 retained actual published TRX.
+All temporary [DEBUG-...] probes still require removal after diagnosis before
+release. Installed stable/dev/Default Apps/Explorer, side-by-side, standards,
+Azure/signatures and genuine human current-head review remain open. No release
+publication or Azure login was attempted; owner preview55472 is untouched.
+
+## Visible source caret and outline accessibility - 2026-10-11
+
+Signed04c1da8 CI38172448726 focused20 cases:18pass,2fail,zero skips.
+Source colors/physical hover pass this variant; full/published colors remain
+required because metadata probes may change native propagation timing.
+
+Exact native source-focus probe: offset5297.759, firstY5297.759, selection0
+before and after focus. The offscreen first-character rectangle is zero before
+adding the offset, so binary searching offscreen rectangles picks character0
+and focus reveals the old caret. Replace that search with native
+ITextDocument.GetRangeFromPoint at the visible client inset and select its
+actual position. Keep original physical click/wheel and -2..36px glyph bounds.
+
+Outline probe retains collapsed DOMindices[1] after child collapse, [0,1]
+while parent is collapsed, and [1] after parent expands. The stale child UIA
+peer is observed immediately after its sibling appears. Wait for the same
+actual hidden child's peer to disappear within the existing10second helper;
+retain identical absence checks through theme change and reload. No arbitrary
+sleep, hidden-flag simulation, wider geometry bound or test exclusion.
+
+Local zero-warning Release passes for the caret/outline correction. Current
+04c1da8 full native/published jobs114567713082/114567712967 are still live;
+retain their terminal variants before pushing the next head. Signing, installed
+associations/Explorer/lifecycle and side-by-side release verification remain open.
+Owner preview55472 is responsive and untouched. Tagged probes remain temporary
+and must be removed after diagnosis before release.
+
+## Native diagnostic correction - 2026-10-11
+
+Current dbda6d4 CI38171433458 focused gate is terminal17/20,3failures,
+zero skips. Initial Light source palette still becomes#1F1F1F rather than
+`#75628B` after an actual UIA Toggle; the queued theme repaint is not proven.
+Nested outline expansion still exposes the collapsed child's native peer.
+Physical source-focus alignment still fails, but its failure-report geometry
+call throws E_UNEXPECTED and masks the timeout before saving the focus logs.
+
+Preserve the original assertions and bounds. Read native logs/tree before
+optional glyph geometry and catch only the observed diagnostic Win32Exception.
+Add temporary opt-in [DEBUG-source-colors] before/after actual painting and the
+native queue, plus [DEBUG-outline-collapse] generated hidden-section indices
+following actual jump/toggle commands. These probes log no document text or
+paths and must be removed after diagnosis before release. Native/published
+jobs114564687334/114564687101 remain live; do not cancel or restart them just
+because job logs are not yet available. Full installed/default/Explorer and
+stable/dev lifecycle acceptance remains pending. Owner preview55472 is untouched.
+
+## Installed association acceptance boundary - 2026-10-11
+
+The installed harness now supplies a saved/restored test-only installation
+marker after its actual manifest/version/channel/update proof, and explicitly
+marks the published copy as portable. The native Default file types case must
+find this exact installed executable's expected channel registration and an
+enabled Windows chooser action. Previously a missing registration and disabled
+button could agree and pass the installed test. Portable evidence must instead
+show no registration. This marker does not change application behavior, create
+registry keys or simulate successful hooks; actual installed execution is still
+required. Windows selection/Explorer/update/uninstall acceptance remains#14.
+
+Prior CI38170170551 is terminal: native93/97 and published93/97,4failures,
+zero skips. Published8m56s now completes inside the existing600second bound;
+its red tests prevent installed outcomes. No deadline was raised. Current native
+and published failures include the reproducible pipe bug, initial source colors,
+nested outline expansion and physical source focus alignment. Exact evidence:
+artifacts/current-installed-9fdfc2d.log and retained installed-update-results.
+Locally signed2fe5853/efe14af prepare the tested IPC correction and queued theme
+repaint; next exact pushed head must verify these and the association boundary.
+
+## Previous full-run variants and queued source repaint - 2026-10-11
+
+Exact9fdfc2d full native job114560940480 is terminal93/97,4failures,zero
+skips (8m59s), despite focused14/15. Retain artifacts/current-native-9fdfc2d.log:
+failures are disconnected peer, nested outline expansion, initial source Light
+palette and source focus alignment. Initial-color failure now follows verified
+UIA Toggle ThemeLight(before=Off), so it is not explained by mouse fallback.
+Both exact highlighting cases passing the focused run do not establish full
+acceptance. Installed job114560940485 is still live at last verified read.
+
+Signed/DCO2fe5853 adds the locally proven native IPC cleanup and test-only source
+coordinate probe (25runs/100cases,zero failures/skips); it has not yet been
+pushed while the prior installed job remains live. A subsequent source change
+queues semantic repaint until after native theme propagation, preserving range
+classification, selection and read-only state. Existing actual color assertions
+remain; no success claim before exact hosted proof. The focused gate also adds
+the nested outline variant without excluding any prior case.
+
+## Previous native result and deterministic IPC fix - 2026-10-11
+
+Signed/DCO9fdfc2d is pushed. Exact CI38170170551 focused job114560940302
+passes14/15,one failure,zero skips. Source reopen/50:50, both native highlighting
+cases, four-file import and physical repeated-heading navigation now pass.
+Build/core/format/scripts/security/PR gates pass; full native job114560940480
+and installed job114560940485 were still live at the last verified poll.
+Retained focused evidence: artifacts/reader-regressions-38170170551 and
+artifacts/reader-regressions-9fdfc2d.log. The remaining focused failure is source
+heading alignment after a physical click enters source, not the initial jump.
+
+The reproduced published disconnected-peer failure is now deterministic locally.
+A test context defers only the real server continuation until the real current-
+user pipe client closes. Unfixed next-client ConnectAsync times out10seconds:
+artifacts/pipe-closed-before/pipe-closed-before.trx. A broken synchronous read
+clears IsConnected while the native connection still needs Disconnect. The fix
+records accepted connection ownership and disconnects it even in Broken state;
+expected shutdown disposal is handled without swallowing unrelated errors.
+Unchanged regression plus three existing cases pass, then25runs/100tests pass
+with zero failures/skips: artifacts/pipe-closed-after and
+artifacts/activation-stress-after. This is local proof; hosted published and
+installed verification remains required. No deadlines or assertions were relaxed.
+
+Next source probe adds only numeric focus/viewport/caret coordinates under the
+existing MARKDOWNVIEWR_INPUT_TRACE test opt-in, with [DEBUG-source-coordinates].
+It tests double-counted native client coordinates versus caret restoration or
+later scrolling feedback. The exact native alignment assertion remains. Remove
+this tagged temporary instrumentation after diagnosis and before release.
+
+Live protect-main ruleset24859282 now requires reader-regressions bound to
+GitHub Actions15368. Exact before/payload/readback artifacts prove all prior
+rules, bindings, review settings, conditions and bypass actors were preserved.
+Owner preview55472 is responsive and preserved. Real installed chooser/Explorer,
+source alignment, channel isolation, human current-head review and production
+signing remain required; no Azure changes or release/signature claims.
+
+## Previous native verification and action correction - 2026-10-11
+
+Exact signed/DCO8abbd4d / CI38168946288 is terminal: full native93/97,
+4failures,zero skips; focused10/12,2failures,zero skips. Build/core/format
+pass. Retained logs: artifacts/current-native-8abbd4d.log and
+artifacts/reader-regressions-8abbd4d.log; actual focused TRX/screenshots/PDFs:
+artifacts/reader-regressions-38168946288. The full failure set is source
+reopening, repeated heading navigation, four-file import and source focus
+alignment. Exact hover passes in both; focused palette fails on initial Light
+choice (#75628B expected versus actual#1F1F1F). Do not claim all highlighting
+accepted. Installed-updates job114557287398 again exceeded600seconds in the published
+suite before any installed outcomes. Published process15 evidence is retained
+in artifacts/current-installed-evidence-38168946288. It reproduces the same
+source reopen/inset/import/focus failures plus initial hover-color and
+intermittent disconnected-pipe timeout; no deadline was raised.
+
+Next bounded correction uses WinUI's real Toggle automation pattern for
+checkbox/radio menu items, whose native implementation invokes the same menu
+action. Physical source hover/focus assertions remain. Four-file import now
+navigates the actual fixture folder before entering all quoted relative names:
+the previous native filename field retained only260characters of the expanded
+absolute-path batch. Imported/skipped/failed counts and exact exported bytes
+remain required. Heading target comparisons include the pinned 1rem scroll
+inset, preventing repeated selection of the same heading; its exact native
+landing assertion becomes16px plus/minus2, preserving original CSS behavior.
+The focused job includes all remaining full-run failures without exclusions.
+
+The required-check setup list includes reader-regressions;55 Pester boundary
+tests pass (artifacts/reader-accessibility-script-tests.xml), and both analyzer
+partitions pass for the module. Live main ruleset must retain all review,
+signature/security rules while adding this GitHub Actions-bound check.
+Owner preview55472 remains responsive and preserved; no local physical input,
+Azure mutation, human review acknowledgement or release claim.
+
+## Previous release verification - 2026-10-11
+
+Signed/DCO05bf612 is pushed to PR#3. Exact CI38167591076 full native run
+completed84/97,13failures,zero skips; previous0ed608e was74/97. Current
+focused12-case TRX is retained in artifacts/reader-regressions-38167591076:
+Settings panel defaults, toolbar alignment, picker cancellation, custom theme
+paint, source theme/mode and exact copying pass. Source-hover passes the full
+run but has a focused initial-color timeout before pointer input; retain the
+variant instead of calling all highlighting accepted. Build/core/format pass.
+Published/installed job114553267448 is terminal: published dotnet tests again
+exceeded600seconds before any installed outcomes; retain
+artifacts/current-installed-05bf612.log. No deadline was increased.
+Exact full-native log: artifacts/current-native-05bf612.log.
+
+Next patch gives the original #content div a named, focusable main landmark so
+Chromium exposes the actual inner scroll surface. The prior root reports Scroll
+support but no vertical extent, while the unnamed inner container is omitted.
+Native menu lookup now selects visible owned peers and dismisses leaf View
+menus; UIA Invoke no longer forces reader foreground over Settings/menu owners.
+Recent activation defers until the invoking menu finishes restoring focus.
+
+Existing exact font/pixel/print assertions remain: typography fixture requests
+28px body because24px produces20→28px glyph heights, exactly40%, rejected by its
+strict greater-than40% comparison. The narrow print fixture explicitly centers
+its custom body before testing the Full-page margin/width reset. Palette checks
+sample the owned empty8px reading gutter rather than a glyph/find mark; no
+color expectation is changed. Source color/picker failures retain actual values.
+No test is skipped or weakened; actual hosted behavior must prove these changes.
+
+Local zero-warning Release build,586 core tests/100% measured lines pass in
+artifacts/reader-accessibility-core. Real pipe stress25runs/75tests passes,
+zero skips; the older intermittent disconnect failure did not reproduce, and
+no speculative pipe change was made. Formatting passes.
+Owner preview55472 stays responsive and preserved. Azure access unavailable;
+[azure-signing-admin.md](azure-signing-admin.md) provides exact immutable OIDC,
+resource/profile verification and profile-role commands. No signing/release,
+review acknowledgement, Azure mutation or merge is claimed.
+
+## Current owner review launch - 2026-10-11
+
+Owner-requested latest self-contained build is open from
+artifacts/owner-1.0-review-publish/MarkdownViewr.Windows.exe, PID55472,
+with title Review-1.0.md — MarkdownViewr. Separate persistent review profile:
+artifacts/owner-1.0-review-profile. Launch metadata is retained in
+artifacts/owner-1.0-review-launch.json. Do not overwrite this publish output or
+interrupt the owner preview while reviewing. Initial process/title/Responding
+readbacks succeeded; no physical desktop input or visual acceptance performed.
+
+Current local gates: zero-warning Release build,582 core tests,100% measured
+core line coverage,25 adapter tests and full formatting verification pass.
+Default-file registration has five passing isolated registry tests in
+artifacts/release-review-adapters/release-review-adapters.trx. Install/update/
+uninstall hooks and Settings → Advanced → Choose default file types are
+implemented. User chooses defaults in Windows; portable previews do not register.
+Actual installed chooser, Explorer double-click and lifecycle acceptance remain
+pending under issue #14. Source-hover regression and signed release acceptance
+remain open; latest review launch does not establish release readiness.
+
+## Committed implementation and edition follow-up - 2026-10-11
+
+Signed/DCO0eb3a0e and841798c are pushed to feat/windows-viewer/PR#3.
+All normal commit hooks passed. Vendor notices retain original bytes through
+scoped Git/hygiene attributes; secret/workflow checks remain enabled.
+Exact hosted CI38164841448 is live on0eb3a0e. Build/core/format, scripts,
+security and CodeQL have passed; native and published/installed acceptance
+are still running. The current source-hover case has not yet emitted a verdict.
+
+Subsequent local work implements a distinct installed dev identity and package ID,
+with edition-specific title/settings/log variables and edition-aware isolated
+smoke fixtures. The new host composition reads the actual Velopack channel before
+activation/UI/log services. Core586/586 and100% measured lines, zero-warning
+Release, format and55 script tests pass; changed script passes both analyzer
+partitions. Separate stable/dev IDs are prepared for the release caller; signing
+remains fail-closed until the reviewed/published catalog builder is available.
+
+A distinct gclo-family navy Markdown/reading vector was generated through AppKit
+BrandTool; all nine ICO frames16..256 are valid and the256px frame was visually
+inspected. The app gradient now matches it. WinUI3 receives a source-project MIT
+credit in Components while proprietary binary-package license notices remain in
+the audit/distribution inventory. Final icon/credit/edition build has zero warnings/errors;586 core tests and
+100% measured lines pass with TRX/Cobertura in artifacts/edition-final-core.
+Formatting passes. A focused hosted source-hover job is prepared to produce a
+fast actual pointer/color verdict and retained TRX, alongside full acceptance. The owner preview PID55472 still
+runs from its preserved earlier output; it has not been replaced.
+
+## Active work and authority
+
+Build the full Windows counterpart to Darin's markdownViewr with published
+AppKit 0.1.0. Identity: MarkdownViewr / MarkdownViewr.Windows /
+markdownviewr-windows. PRODUCT.md remains the full scope. Topic feat/windows-viewer,
+draft PR #3. Owner authorizes signed/DCO commits, pushes, configuration and tickets.
+The owner now authorizes completion and stable1.0/dev publication following gclo.
+Preserve review/security/signing gates; no fabricated human review or new Azure sign-ins.
+Hosted Windows UI tests are authorized; no current local desktop reservation.
+
+## Active 1.0 and dev release work - 2026-10-11
+
+The owner cleared the prior goal and explicitly resumed work to finish and release
+stable1.0 and dev versions following gclo. The paused queue below is historical,
+not a current stop instruction. Full PRODUCT scope and owner feedback remain required.
+
+Plan: (1) fix owner regressions and UI requirements; (2) pass core/build/style plus
+actual current native/published/installed stable/dev acceptance; (3) verify and
+configure repository-specific Azure OIDC/signing and gclo-style isolated editions;
+(4) complete review/checks, signed commits/push and publish verified releases.
+
+Commit authentication retry succeeded. Commit 841798c is signed and DCO-signed;
+it preserves the original four-file native-window correction and passed hooks.
+The remaining implementation is being committed after local verification.
+Implemented locally: removed toolbar depth duplication, labeled Contents/Print;
+explicit Contents/Source new-window defaults independent of local toggles;
+open-source-only About view with full license audit catalog preserved; accurate
+disabled-editor native tooltip; loaded-handle timestamp/stale/folder footer.
+Long theme/editor forms now use native Settings pages, Back and fixed Save/Cancel;
+theme management uses adaptive list/detail layout and preserves copied draft loops,
+import/export/newer-schema conflicts and validation. First full build passed with
+zero warnings/errors. New default-persistence tests and native hover regression
+are prepared; source highlighting itself is deliberately not changed before a
+real red-capable pointer test runs.
+
+gclo's existing release environment confirms tenant4ebeb0ad-5782-487a-a1b4-5080255774cf,
+kof22signing/releases/EastUS and publisher James Maes, but these are reference
+configuration, not actual Azure resource verification for this repository.
+MarkdownViewr release variables are absent. Current Azure CLI has no login; no
+new sign-in initiated. Official desktop-tool initialization reports missing
+native pipe; no local GUI fallback/input performed. Hosted testing follows push.
+
+## Historical paused owner review - 2026-10-11
+
+Historical checkpoint only: the owner paused work at this point and subsequently
+resumed the full release goal recorded above. The following text records that pause.
+Earlier signed-commit/push authorization remains bounded by the pending
+1Password-ready reply. The original staged four-file patch remains82+/10-.
+
+New tickets: #26 right footer timestamp/stale indicator/Open folder; #27 source
+highlighting disappears permanently after pointer hover (owner report, not yet
+reproduced); #28 disabled Open in editor hover explanation; #29 gclo-family icon
+redesign. Existing #18 now requires removing only the toolbar H1-H6 dropdown and
+consistent Contents/Print icon+text labels. #21 records owner rejection of the
+crowded inner modals: propose adaptive Settings list/detail pages, brief native
+confirmations, preserved theme/CSS drafts and native pickers. Add explicit new-window
+Contents/Source defaults, both off; current-window toggles must not rewrite them.
+Issue #24 now calls for actual shipped open-source credits/project/license links only
+in Components, with Darin in Contributions and all required notices preserved.
+
+These requirements are queued, not implemented. Source unit/color coverage does
+not disprove the owner-reported pointer regression. Do not claim an accepted
+toolbar/settings layout or full application completion.
+
+## Reference document CSS checkpoint - 2026-10-11
+
+Before the pause, the document-only stylesheet was ported from Darin's pinned
+6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021 template, retaining MIT headers.
+Embedded Themes/Document.css and DocumentPage provide #content/#content-inner;
+legacy custom variables remain alongside original aliases. Reading width applies
+to the inner container after custom CSS. Browser scrolling/navigation/source
+coordinates now use #content. Sanitization retains only bounded code-language
+and fixed document classes; metadata keeps accessible headers. Print resets
+scrolling containers and applies page padding once.
+
+Completed local gates: zero-warning Release build,580/580 core tests,100% measured
+core line coverage, formatting and self-contained win-x64 publish. Evidence:
+artifacts/reference-css-verified/reference-css-verified.trx and
+artifacts/reference-css-verified/e1f564a9-bb6e-4628-8d9a-a2e1fa5c0df6/coverage.cobertura.xml.
+Ten new style/page/security regressions pass. Two existing actual-paint UI cases
+were adapted to the original document container; neither was run. UI discovery
+remains93 cases (69 desktop/24 adapter), expected92 per installed channel.
+
+Review-reference-css.md was launched from artifacts/reference-css-publish using
+its separate review profile (launch recorded as119988). Initial startup/document
+opening was observed before pause; this is not full visual/native acceptance.
+The fixture deliberately forced Source on and does not define production defaults.
+No current native/distributed/install/signature or hosted-CI acceptance exists for
+this CSS work. Global/per-theme selector parity for native TOC/source, raw HTML/
+heading fidelity and actual layout/paint remain open. Update the CSS attribution
+inventory and threat model when implementation resumes. Code remains local and
+unstaged; no new commit, push, merge, tag, release or Azure sign-in.
+
+## Default-file Settings action - 2026-10-11
+
+Issue #14 follow-up is implemented locally: Settings → Advanced has Choose default
+file types and optional-.txt guidance. Only actual installed copies with an
+unchanged owned command/RegisteredApplications value enable it. Native click
+revalidates ownership. Windows 11 23H2+ opens the exact registeredAppUser page;
+earlier versions use general Default Apps and .md instructions. Portable previews
+show install/repair guidance. Launch failure gets manual instructions and
+content-free diagnostics; defaults are still selected by the Windows user.
+
+Separate-output full Release build passes with zero warnings/errors at
+artifacts/default-files-build/bin. Eleven real isolated registry/activation tests
+pass (two new route/ownership/default-preservation cases);570 core tests pass and
+100% measured core line coverage gate passes. Formatting passes. A native page
+acceptance case compiles, not run;93 UI-project cases are discovered only
+(69 desktop/24 adapter; expected92 per installed channel). Actual installed
+chooser/selection/Explorer and hook lifecycle remain unverified. No owner preview replaced or new local desktop
+input, sign-in, commit/push or publication. Original staged four files82+/10-
+remain unchanged; the existing signing-authentication reply is still pending.
+
+Historical default-file checkpoint preceded the local document CSS port recorded above.
+Full PRODUCT scope remains active, including current native/distributed acceptance,
+Print/PDF, reference fidelity, standards and signed production artifacts.
+
+## Windows activation and registration - 2026-10-11
+
+Issue #14 has local implementation: Velopack install/update/uninstall callbacks
+advertise md/markdown/mdown/mkd/txt under HKCU with quoted stable current-exe
+commands, Default Apps capabilities and a REG_NONE AllowSilentDefaultTakeOver
+marker. Channel/executable-specific ProgIDs, unchanged-command checks and owned
+cleanup preserve other installs, viewers and user defaults. No real registration
+or installer was executed locally; only UUID-subtree registry fixtures were used.
+
+SDK AppInstance chooses a primary per executable/profile. Sender-canonicalized
+paths travel through a current-user-only generated-schema pipe to the native UI
+queue.128-path/1MiB/10second/16-pending bounds; unknown/null/relative/oversized
+payloads rejected; no command protocol. Initial/duplicate/empty/error requests
+reuse native reader paths; foreground rights are delegated by the launcher.
+Invalid startup notification survives browser initialization. Existing pending
+startup path duplication detection is retained.
+
+Actual adapter tests initially8/9: InvalidDataException derives SystemException,
+so an oversized frame escaped the original catch and stopped the listener. The
+explicit catch fix preserves all assertions; final9/9 pass, including malformed
+recovery and idempotent shutdown/rebinding. Red/fixed/final TRXs are retained under
+artifacts/activation-boundaries. No diagnostic probes remain.
+
+Fresh full separate-output Release build/publish pass;570 core tests/100% measured
+lines, formatting and docs lint pass.90 UI-project cases discovered only
+(68 desktop/22 adapter; expected89 per installed channel). Two new real native
+secondary-process/relative-Unicode/profile/duplicate/watcher cases compile, not
+run. Controlled desktop/distributed/Explorer/installed acceptance remains needed.
+
+Velopack1.2.161 verified the corrected Program.Main Build/Run callback chain and
+packed a local unsigned stable fixture in artifacts/activation-package. Both
+portable/full payloads retain all543 published files byte-for-byte;11 notice files
+match source bytes. Publish evidence and unsigned-only flag are retained. No
+installation, actual hook lifecycle, signed-artifact claim or publication occurred.
+
+Owner preview103040 remains Review-toolbar-splash.md using the earlier preview
+output/profile; it has not been replaced by activation-build. Original staged
+four files82+/10- remain unchanged; new work is unstaged. Existing1Password ready
+reply still pending; no signing retry/push/new Azure/merge/tag/release. Full
+PRODUCT requirements, native UI, Print/PDF, original CSS/render/activation parity,
+standards and exact production signatures remain open.
+
+## Splash and toolbar owner preview - 2026-10-11
+
+Owner screenshot follow-up #18: reduce toolbar height, align TOC/depth/Print
+and reading controls, remove the wide gap and group commands. Native CommandBar
+now uses a48-DIP row with consistent40-DIP fixed controls and natural left
+alignment; Print remains fixed while reading commands retain dynamic overflow.
+Actual geometry assertions are prepared; native acceptance is still pending.
+
+New #25: reused the published AppKit branded splash already connected to initial
+launch. Settings → Advanced now has gclo-style Show splash/duration controls
+(500–30000ms,250ms steps) and startup update checks, moved out of View. Checked
+saves update only startup fields, broadcast to all reader baselines and preserve
+other preferences/CSS drafts. Existing saved durations remain unchanged.
+A real shared-preference/native-controls regression is prepared, not executed.
+
+Fresh separate-output Release build: zero warnings/errors.570 core tests pass,
+100% measured lines; format/docs lint pass.79 UI-project cases discovered only
+(66 desktop/13 filesystem; expected78 per installed channel). No local input
+acceptance ran. Computer Use passive observation was attempted, but its native
+pipe was unavailable; no screenshot or input action occurred.
+
+Owner preview opened successfully as Review-toolbar-splash.md — MarkdownViewr,
+process103040, with source visible and a5000ms splash in its separate
+artifacts/splash-toolbar-profile. Startup update checks are disabled in that
+review profile. Other owner windows were preserved. Output:
+artifacts/splash-toolbar-review/bin/x64/Release/net10.0-windows10.0.19041.0/
+MarkdownViewr.Windows.exe. Evidence: artifacts/splash-toolbar-core/
+53b3f3ce-c62e-40f9-afac-cfcf1a2ed905/coverage.cobertura.xml and
+artifacts/splash-toolbar-ui-discovery.log. Actual toolbar, Settings and splash
+visual/duration/distribution proof remains pending; launch logs prove only
+startup/document opening. Signed commits/push await the existing1Password
+ready reply; no signing retry, merge, tag, release or Azure change occurred.
+
+## Latest owner review changes - 2026-10-11
+
+Owner feedback is implemented locally: #24 About has Contributions below the
+AppKit header/license, with Darin's repository/site/license links. Components
+individually links 23 application/platform and 29 development dependencies;
+independent tests compare every package/version with actual restored assets.
+Eleven distinct packaged SDK/WebView/tensor license/notice files are retained
+verbatim and match copied review-output bytes. Microsoft binary license terms
+are identified separately from MIT components.
+
+Issue #21 replaces the rejected modal Pivot dialog with a separate resizable WinUI
+Settings window: adaptive left NavigationView, native pages/controls and owned
+theme/editor dialogs/pickers. Routine width preferences save immediately;
+advanced CSS has Apply, and closing discards unsubmitted CSS. Shared saved
+appearance refreshes open Settings baselines without overwriting its CSS draft.
+Issue #18 Print stays in the fixed toolbar area even when other commands overflow;
+Theme uses the native Color glyph rather than Highlight.
+
+Issue #16 is implemented locally: native read-only RichEditBox with literal SetText,
+passive parser character spans, contrast-adjusted document accents, Windows
+light/dark/high-contrast updates, stale parse/paint guards and exact original
+visible source copying with no rich clipboard formats. Native Text/Value
+accessibility, find/fold/reload and existing scroll behavior remain test targets.
+
+Latest evidence: full separate-output Release build zero warnings/errors;
+570 core tests,100% measured lines;78 UI-project cases discovered only
+(65 desktop/13 filesystem, expected77 per installed channel). Native source
+color/selection/clipboard and standard Settings acceptance cases compile; no
+local desktop automation ran. Initial review startup failures were diagnosed:
+unsupported HighContrastChanged registration now uses UISettings color changes;
+read-only RichEdit character formatting uses a synchronous writable guard that
+restores read-only mode before returning/yielding. The corrected review opened
+Review-updated.md successfully, most recently in process 94448. Owner windows
+were preserved; source color/clipboard acceptance is still pending. Final native and
+distributed acceptance, missing system Print/PDF handoff, original CSS/activation,
+standards and production signature proof remain required. Original four staged
+corrections are unchanged; signed commit/push still awaits the pending1Password
+ready reply. No signing retry, merge, tag, release or Azure changes occurred.
+
+Review output: artifacts/source-highlight-fixed/bin/x64/Release/
+net10.0-windows10.0.19041.0/MarkdownViewr.Windows.exe.
+Evidence: artifacts/source-highlight-about-core/38ccc305-1af2-4456-9380-a7420b4850f0/
+coverage.cobertura.xml, source-highlight-ui-discovery.log,
+about-component-inventory.json and review-license-verification.json.
+Earlier sections describe historical implementations and acceptance milestones.
+
+## Owner build handoff - 2026-10-11
+
+The owner requested another build to try. A fresh full Release build passed
+with zero warnings/errors, then opened README.md in a new responsive process
+(PID 107716). The older Debug window showing AGENTS.md (PID 91712) was preserved.
+This verifies build and launch only; no automated desktop input or acceptance
+ran. Settings, source split, toolbar, attribution/Help and Print/PDF options are
+available for owner review. Source highlighting has a compiling core draft but
+is not connected to the native source control yet. The previous 538-test/100%
+coverage result predates that draft; new highlighting tests remain required.
+Signing/push and runtime Print/PDF verification remain pending.
+
+## Owner requests and local implementation - 2026-10-11
+
+Every current owner request is tracked: #16 source syntax highlighting, #17
+50/50 draggable source split, #18 Mac toolbar parity, #19 Darin attribution,
+plus #20 gclo Help/defaults, #21 dedicated Settings, #22 system print/sizing,
+and #23 PDF verification/open actions; #6 holds automatic reload/fallback requirements.
+Source highlighting, the reworked Settings window, source split, toolbar and linked About credits are implemented locally; current native acceptance remains pending.
+
+Superseded first #21 implementation: File → Settings with native Appearance, Themes and
+Editors tabs. Width/global CSS edit a copied draft; explicit Save merges against
+the latest store and broadcasts to open readers. Theme/editor actions retain
+separate saves and return to the same parent draft; no overlapping dialogs.
+Removed six theme/appearance editing entries from View and moved editor
+configuration into Settings. Everyday reading controls remain in View. Native
+menu tests now use actual Settings tabs; a new parent/child cancellation case
+is prepared. Keyboard entry uses File/Settings access keys.
+
+Locally implemented #17: source opens at50/50 in fresh windows and when reopened,
+excluding the outline/dividers. Drag changes proportional widths without the
+old600px cap. Left/Right resize the focused divider; Home resets equal columns,
+with a visible keyboard focus border. Ratio is window-local, not persisted;
+legacy SourceWidth remains readable for older settings.21 layout regressions
+cover narrow/large windows, drag direction, both bounds and invalid inputs.
+The real physical-resize case now checks actual equal columns, growth, keyboard
+reset/resize and reopening rather than the obsolete saved pixel preference.
+
+Latest gates: zero-warning full Release build;538 core tests,100% measured lines;
+format verification passes. Headless UI-project discovery finds75 cases
+(62 desktop and13 filesystem; installed expectation74). New native Settings/
+source/toolbar acceptance has not run. Original staged four-file signing
+correction remains unchanged; existing1Password authentication and local GUI
+reservation replies are still pending. The older Debug window predates these changes; the owner now has a fresh Release window.
+Evidence: artifacts/settings-source-core and toolbar-ui-discovery.log.
+
+Locally implemented #18: native CommandBar preserves the reference order: TOC,
+H1–H6 depth, flexible space, source, minus/percentage/plus zoom, enabled theme
+picker and editor. Print is in native More overflow. Narrow layouts use the
+built-in dynamic overflow; accessible labels/tooltips/toggle state remain tied
+to existing handlers. Depth is disabled with hidden TOC; zero existing editors
+is disabled, one existing editor launches directly by stable identity, multiple
+existing editors offer ordered file/folder choices. Menu/theme broadcasts and
+active-document changes refresh toolbar state.
+
+Editor saves now merge against their copied baseline and check persistence
+before applying. An explicit save updates each open reader and its saved
+baseline; later local saves cannot restore a stale editor list. Four actual
+UI cases cover reading/menu synchronization, file/folder/direct editor process
+arguments and Print cancel, narrow overflow, and sibling editor launch/stale
+source save. These compile/discover only; no local input ran. Build/format pass;
+core is unchanged since the measured538-test/100% coverage gate.
+
+Locally implemented #19/#20: AppInfo description/component credit, accessible
+About links to the original Mac repository and verified [kelkhoff.com](https://kelkhoff.com/),
+README/product/distributed notices. Help matches gclo main198a56213b: repository,
+issue chooser and Community support. These use the Windows repository, never
+Darin's support destinations. App/starter Discussions enabled and read back true.
+AppKit#28 and windows-app-template#3 track shared defaults in isolated worktrees:
+AppKit/artifacts/help-menu (feat/help-menu from main839fb72) and
+AppKit/artifacts/starter-help-menu (feat/help-menu from onboarding758e773).
+Both WinUI/WPF samples and starter use existing APIs; no package version changes.
+
+Print options now use a responsive wider layout and opt-in Open PDF/Open folder
+checkboxes. PDF export loads the generated file through Windows' PDF API and
+requires pages before reporting success or starting either native action. Handler
+failures remain independent and do not misreport successful creation. Print-phase
+logging distinguishes preparation/selection/export and records runtime version
+without private paths/content. The missing system-dialog root cause remains
+unproven; earlier hosted success does not resolve the owner's report. #22/#23
+remain open. GUI reproduction reservation and PDF-outcome questions are pending;
+no desktop input ran. The owner is still using the earlier Debug build; these
+changes compile in separate Release output and are not in the running process.
+
+Live-reload native filesystem tests pass6/6 without an app/desktop launch. A failed
+refresh now explicitly shows the retained previous snapshot and File → Reload.
+A real prolonged-lock/automatic-recovery acceptance case compiles but has not run.
+Current UI count becomes70 native/published and69 per installed channel; all
+new actual About/print/fallback assertions still require execution.
+
+App517 core tests/100% measured lines; Release full build zero warnings/errors.
+Shared default builds pass; AppKit115 unit tests with100% core/updates lines,
+starter20 core +14 CLI tests/100% core lines,56 Pester tests and changed-script
+all-rule two-pass analysis pass. All three formats and the final app build pass; nine-doc lint passes.
+Fresh headless discovery confirms70 cases; no actual desktop acceptance ran. The actual packed
+starter generated both changed-owner CLI and GUI-only apps with correct Help URLs;
+locked restore/build and20 core tests pass for each, plus14 CLI tests in the CLI
+variant. No generated desktop UI was run. Evidence lives in app artifacts/
+owner-followups-core and starter `artifacts/help-template-*` / `help-generated-*`.
+
+Original four staged corrections remain unchanged (82 additions/10 deletions).
+All new changes remain uncommitted/unpushed while the existing1Password signing
+question awaits authentication. Do not bypass signed/DCO commits or rerun signing
+until the owner confirms readiness. Azure remains deferred; no release/merge.
+
+## Requested local launch - 2026-10-11
+
+Owner requested a build and interactive launch. The full solution rebuilt with
+zero warnings/errors; the Debug x64 executable opened a responsive native
+MarkdownViewr window (PID91712). No automated mouse/keyboard tests ran.
+This launch does not provide new feature or distributed-artifact acceptance.
+
+## Current local renderer/theme milestones and signing dependency
+
+Pushed head remains 1cfc07f. Four window-test corrections remain staged and
+validated; 1Password signing authentication is still required after two failed
+attempts. No bypass, corrected commit/push or fresh hosted result exists.
+
+Independent unstaged work adds four enabled-by-default Markdown extensions and
+native View toggles using the existing Markdig parser. Immutable options are
+captured before asynchronous reads; separate saved fields merge sibling changes
+individually. Passive mark/ins markup passes the existing sanitizer; selected
+palette styles apply to highlights/underlines. Parser AST normalization preserves
+literal code/newline boundaries and reference no-whitespace caret/tilde semantics
+without rewriting original UTF-16 source positions.
+
+All native typography controls now expose body/heading/code font families,
+body/code and h1–h6 sizes, and line height. ReaderTheme.Edit creates a copied JSON
+schema, preserves unrelated metadata, rejects unknown fields/nonfinite or invalid
+sizes, and applies the existing font/CSS validation. Invalid drafts and cancellation
+leave originals unchanged.18 focused theme cases pass. Existing automation IDs
+remain; a new hosted-only case saves all fields, requires real heading/body/code
+glyph growth and verifies cancellation preserves the accepted theme. It compiles,
+not executed. Actual new desktop acceptance remains required.
+
+Reader-wide appearance now provides native limit/width/global-CSS drafts. Defaults
+match the reference (enabled,1000px); stored corruption is repaired, invalid drafts
+remain open, and cancellation preserves settings. Global CSS precedes per-theme
+CSS, with enabled width applied last and scaled by reading zoom. Screen-only styles
+cannot change print layout. Saves merge against the latest store and broadcast to
+all open readers; revision guards supersede older asynchronous updates and update
+sibling save baselines.22 focused regressions cover bounds/defaults, CSS cascade,
+HTML embedding, separate print output, source-generated JSON and field merging.
+
+Theme management now provides a copied native list for ordering, enable/disable,
+delete and restoration. Enabled choices alone populate reading menus/cycling;
+Ctrl+Shift+Down/Up requires owned reading focus. Deleting a built-in removes its
+user override and records a restorable tombstone. Reference restoration keeps
+edited built-ins as uniquely named custom copies, updating saved selection/order,
+then restores/enables originals. Theme commits merge unchanged fields from the
+latest store and broadcast catalog/selection to open readers with save baselines
+and asynchronous revision guards.23 focused cases cover order, wrapping, empty
+lists, corruption, copied arrays, deletion, restoration collisions/metadata,
+JSON defaults and sibling merges. No dependency/version changes.
+
+Theme transfer now uses owned multiple-file JSON selection, serial bounded reads,
+per-conflict overwrite/keep-both/skip and explicit compatible newer-schema consent.
+Known schema/font/color/size/CSS/depth checks remain enforced. Strict Parse still
+rejects newer versions; compatible saved/import parsing retains their original
+version/metadata. Unconfirmed newer imports cannot be persisted. Export includes
+disabled choices and writes exact validated JSON to the user's destination.
+Invalid files do not prevent other batch entries from importing. Errors log only
+exception kind/HRESULT, without paths/content. Manager New/Copy/Edit/Use selected
+and import/export finish their secondary dialogs before reopening the copied
+manager draft; only Save themes commits it. Rename collisions stay in the editor,
+and owner closure stops reopening. No dependencies or workflow changes.
+
+Local517 core tests/100% measured lines, zero-warning full solution build,
+format and four-doc lint pass.
+Latest coverage: artifacts/theme-transfer-core;46 focused transfer regressions
+include all20 actual bundled JSON round-trips, bounds/read position, BOM/Unicode,
+invalid input/cancellation, schema consent/security, conflict/version/metadata
+retention, copied drafts and safe Windows filename suggestions. Earlier extension/
+typography/appearance/list checkpoints retain32/18/22/23 focused cases.
+Headless discovery (correct AnyCPU test-project mapping) finds69 UI cases; evidence:
+artifacts/theme-transfer-ui-discovery.log. No app/desktop input was executed.
+Twelve new runtime cases compile but have not run: six prior renderer/typography/
+appearance/list cases plus six transfer/cross-dialog/cancel cases. Existing restoration
+also requires retained override JSON/paint and explicit original selection.
+Original staged window correction alone expects57 native/published and56 per
+installed channel. All independent local milestones require69 native/published
+and68 per installed channel. No new desktop/PDF/current-head hosted proof exists.
+Remaining CSS-variable/DOM-selector fidelity, raw-HTML extension/source-heading
+edges, local link/render behavior, Windows activation and standards/signatures
+are not complete.
+
+## Printing baseline verified; expanded geometry investigation
+
+Native File/Print/Ctrl+P, copied themes/layout preferences and explicit native PDF
+saving are implemented. Core363/100% measured lines;55 scripts; build/format pass.
+Signedec5f98f / filtered38125751638 passes all3 original cases, zero failures/skips:
+keyboard draft cancel, actual Windows print UI cancel and real default/themed PDFs.
+Actual pixels prove text, expanded folded image, white ink-saving page, hidden
+images and active-theme background. Exact actual glyph/view rectangles prove
+unchanged nonzero reader position/zoom, source text and collapsed content after
+both exports. Evidence: artifacts/print-exact-filename-38125751638.
+
+Hosted probes proved41pixel PDF reading movement. SavePdf restores validated
+vertical position in finally only for the same ready navigation; no completion is
+guessed for void native print UI. Filename typing waits for exact full native
+readback. Stale UIA200% values are replaced by actual glyph/view assertions.
+Cleaned300e145 / CI38126078284 fully passes: native/published52 each,
+installed stable/dev51 each, zero failures/skips. Both AppKit apply/restart probes
+reach expected versions without check/apply errors; fixtures are unsigned.
+Retained native log and installed evidence: artifacts/print-clean-native-38126078284.log
+and artifacts/print-clean-verified-installed-38126078284 (six real PDFs).
+
+Two additional native-output cases now compile/format locally: first printed
+heading glyph ratios for standard/matching zoom, real40px padding shift and paired
+find/source selection/screen paint after each PDF; saved user-theme240px block
+width versus full page and actual optional border rows. New helper edits actual
+native options, including padding NumberBox; all generated PDF/PNG bytes retained.
+Signedd0a225d / CI38127089763 finishes native/published53/54, zero skips.
+Actual saved custom-width/border/full-page case passes. Font/padding case fails
+before PDF output at a requested zoom wait; installed channels are not
+reached. Exact expected/actual glyph rectangles and native state are now retained
+on failure. Diagnostic6e17674 proves the second step: initial35px,121% actual44px,
+expected42.35px from multiplying an already-rounded UIA text box. The new PDF
+case now requires actual increasing screen glyphs and completed native percentage,
+plus bounded final screen growth; precise standard/matched font ratios remain
+asserted against real PDF glyph bands. No PDF/state assertion is removed.
+Retained red log and published TRX:
+artifacts/print-geometry-native-38127089763.log and
+artifacts/print-geometry-installed-38127089763. Corrected head requires54
+native/published and53 per installed channel. No local GUI input or new dependency.
+Correctedbf4fcdc / CI38128311242 fully passes: native/published54 each,
+installed stable/dev53 each, zero failures/skips. All5 Print_ cases pass in every
+build, including actual PDF font/padding/paired-find and original cancellations/
+image/background/nonzero-state cases. Retained24 PDFs/48 PNGs/TRXs:
+artifacts/print-font-verified-installed-38128311242; native log:
+artifacts/print-font-native-38128311242.log. Actual before.AppKitApplyCalled and
+restarted=true in both channels; expected stable0.4.0/dev0.3.0-beta.2; all before/
+after check/apply errors null. Fixtures unsigned; production signing not proved.
+ADR-0003 remains proposed for maintainer review.
+
+Live settings validate. Official conformance34PASS/1FAIL/1WARN/3REVIEW: required
+standards inventory lacks app, confirmed live. Exact reviewed addition prepared,
+not applied/merged; see docs/standards-readiness.md. Actual signing remains deferred.
+
+## Native windows and recents milestone
+
+New window-local initial paths replace rereading process arguments. Track native
+XAML windows on one UI thread; independent watcher/browser/hooks/zoom; Ctrl+N/Ctrl+W
+and Exit; shared log closes only after the last reader. Modern App SDK multiple-file
+picker includes md/markdown/mdown/mkd/txt. Private recent history20, successful opens
+only, duplicate focus, missing errors and clear. Source-generated delta merging
+protects sibling settings and cleared history from stale window snapshots.
+
+Signed/DCOe48a08c implements this milestone. Local376 core tests/100% lines and
+zero-warning build/format/docs/hooks pass. Three new hosted-only
+native lifecycle cases compile; no local GUI input. ADR-0004 and threat model
+updated. 1cfc07f / CI38129552334 native54/57, zero skips: all original54 pass,
+three new cases fail. First caches a glyph across zoom navigation; second requests
+unsupported Invoke from SourceToggle after actual New/Recent/Close/missing/clear
+steps; third cannot find Open picker's filename field. Fresh glyph lookup and
+verified owned physical menu input retain all state/reload/history assertions.
+Picker diagnostics now retain owned tree and generic exception/HRESULT; no selector
+change is guessed. Actual native foreground focus and source preference persistence are required.
+The missing-file window loaded nonempty history before Clear; its later preference
+save must not resurrect that snapshot.
+Retain native red log: artifacts/windows-first-native-38129552334.log. Published process timed out at300seconds after two recorded new-case failures;
+no TRX/installed-channel outcomes. Retained partial output/screenshots:
+artifacts/windows-first-failed-installed-38129552334. Outer full-UI-suite budget
+now600seconds; all individual10/30second waits/assertions unchanged. Association/activation registration remains
+required. Full reference audit also retains theme ordering/enable/delete/cycle,
+JSON import/export conflicts, all typography/global CSS/content width and four
+configurable rendering extensions in PRODUCT/TODO; none is claimed complete.
+
+## Current outcome
+
+Signed 690be07 fixes repeated outline activation. Native ItemClick supplies the
+TextBlock content, not its ListViewItem container. Both now carry the bounded
+numeric heading tag; activation accepts tagged FrameworkElement content while
+SelectionChanged retains keyboard navigation. No title lookup or source mapping change.
+
+The original source regression passed on 690be07: source-diagnostics38121389088,
+job114416668837, including source focus preservation, actual source/reader middle
+glyphs, repeated last-heading activation and the final physical-wheel assertion.
+TRX retained under artifacts/source-clicked-content-verified-38121389088.
+Temporary workflow, tagged probes and source geometry logs are removed.
+Cleaned2639e2d fullCI38121762124 passed: native49/49,published49/49, installed
+stable/dev48/48, zero failures/skips. All other producers pass. Evidence retained
+under artifacts/source-clean-verified-installed-38121762124. New print acceptance remains pending.
+
+Font zoom and named editors are implemented. Prior016c745 native/published48/49,
+zero skips; only repeat navigation failed. Zoom actual glyph/menu/toolbar/Ctrl/
+reset/reload and named-editor cases pass. Core363 tests/100% measured lines,
+script boundary55 tests; zero-warning build and formatting verified.
+
+## Verified baseline and evidence
+
+Previous fully accepted b0f3b86/CI38113042618: published44/44, installed stable/dev
+43/43, zero failures/skips. Actual AppKit apply/restart uses synthetic unsigned
+fixtures; it does not prove production signing. Published predecessor failure
+TRX: artifacts/source-physical-reactivation-failed-installed-38120651378.
+Red clicked-content trace/TRX: artifacts/source-activation-boundary-38121148429.
+Superseded diagnostic jobs are not fixed-head acceptance proof.
+
+## Next steps
+
+1. Require native/published57 and installed stable/dev56 on the window milestone; retain actual lifecycle/picker/update evidence.
+2. Complete source raw-heading audit and broader zoom/theme/find/collapse proof.
+3. Complete print #12 output/state acceptance, windows/recents/activation and remaining theme/render/link parity.
+4. Finish standards inventory; exact signed stable/dev artifacts remain deferred.
+
+Update TODO and tickets with measured results; keep the PR draft until reviewed.
+Current exact commit/job IDs are in ignored artifacts/CURRENT-CHECKPOINT.json.
+Historical details: [reader/source notes](history/reader-source-session-2026-10-11.md).
+
+## Exact current native failure evidence - 2026-10-11
+
+CI38164841448 is terminal on0eb3a0e:72/97 native cases pass,25 fail,zero skips.
+Build/core/format/scripts/security/CodeQL pass. Published acceptance exceeds the
+600-second process budget and is terminated before installed-channel outcomes;
+this is not installed acceptance. Native/installed logs and artifacts are retained
+under artifacts/current-native-0eb3a0e.log, current-installed-0eb3a0e.log and
+current-installed-evidence-38164841448. The actual native suite took11m42s with
+25 failures; investigate failures before making a measured process-budget change.
+
+Source hover is reproduced exactly: initial heading color#75628B becomes#000000
+at the first post-pointer assertion (SourceHighlighting.cs line37, before focus).
+Ranked hypotheses shared: native whole-document hover foreground, focus/selection
+reset, asynchronous repaint cancellation. Pinned WinUI generic.xaml confirms
+PointerOver/Focused/Disabled storyboards target ContentElement.Foreground. The
+first candidate removes only those foreground animations on template application,
+retaining native chrome and semantic range formatting. It requires the focused
+hosted regression before being called fixed; no local GUI input performed.
+
+Other failures include document scroller/paint/typography/source geometry, native
+picker filename discovery, print-width output, new-window outline assertion,
+recent-window foreground and one pipe disconnect recovery case. Full scope and
+assertions remain; no failures skipped or weakened. The next focused hover job
+retains a real TRX alongside the full suite.
+
+Actual GitHub OIDC readback uses immutable IDs:
+repo:KofTwentyTwo@47367449/MarkdownViewr.Windows@1413777106:environment:release.
+A name-only copied trust is invalid here. Administrator runbook reads actual
+account/profile/subject via stable ARM2025-10-13, retains existing identities,
+assigns profile-scoped signer permissions and documents required actual signature
+proof. Azure authentication remains unavailable; no new sign-in or cloud mutation.
diff --git a/docs/TODO.md b/docs/TODO.md
index 51e0558..86b0c60 100644
--- a/docs/TODO.md
+++ b/docs/TODO.md
@@ -1,13 +1,228 @@
 # Development Tasks
 
-- [x] Generate a GUI-only application from the tested AppKit starter using the agreed identity.
-- [x] Restore published AppKit 0.1.0 packages; build with zero warnings; pass 20 existing core tests and the 100% coverage gate.
-- [x] Inspect pinned markdownViewr source and capture the full Windows feature requirements in PRODUCT.md.
-- [ ] Discuss the desired first release and Windows-specific behavior with the owner.
-- [ ] Select and document the renderer and untrusted-document security policy.
-- [ ] Replace the sample greeting with file opening and rendered Markdown.
-- [ ] Implement and test all document, theme, navigation, source, find, frontmatter, editor and printing requirements in PRODUCT.md.
-- [ ] Update the threat model, attribution, screenshots, user documentation and agent guidance as features land.
-- [ ] Establish hosted repository gates and standards inventory; resolve inherited analyzer instability without suppressing errors.
-- [ ] Adopt the reviewed/published structured AppKit API and signing builder when available.
-- [ ] Verify actual signed stable/dev installers and the exact shipped bytes before any release publication.
+## Current release checklist
+
+- [x] Correct the disabled-editor tooltip exception; accepted application code321816c.
+- [x] Final signing caller b1dc874 / CI38276579007 passes all hosted checks, including published111 and stable/dev110 acceptance each, zero failures/skips.
+- [x] Verify actual update/restart, registrations, preserved defaults, and channel coexistence receipts.
+- [x] Publish/verify standards1.1.0 signing builder and merge owner-reviewed inventory PR36.
+- [x] Verify Azure configuration and representative local final signing/distribution proof; existing gclo configuration preserved.
+- [x] Register Windows OpenSSF project15417 and record its real progress badge; passing assessment remains incomplete.
+- [x] Prepare user-first README, real light/source screenshots, user guide, DEVELOPERS.md, and current support/contribution links (#34).
+- [x] Verify final documentation: six Markdown files pass lint, all33 local links resolve, static conformance has no FAIL; clear-desktop screenshots are inspected.
+- [ ] Commit/push the documentation candidate and pass required exact-head hosted checks.
+- [ ] Obtain the genuine final-head maintainer review record; apply/read back only the planned Actions-bound fuzzing context.
+- [ ] Merge the application and complete release checklist#33.
+- [ ] Prove production CI OIDC signing, then publish1.0.0-beta.1/dev and1.0.0/stable.
+- [ ] Verify downloaded final signatures/publisher/trust/timestamps, hashes, SBOMs, and attestations.
+- [ ] Complete the evidence-backed OpenSSF provider assessment with the maintainer's actual operating-practice attestations.
+
+The historical checkpoints below retain previous evidence and superseded tasks.
+Original owner preview processes/profiles must remain untouched.
+
+## Historical checkpoints
+
+- [x] Exact9d5c0d1 full native106/106 and focused26/26 pass, zero skips; retain actual TRX/Settings screenshots and logs.
+- [x] Correct observed offscreen Settings placement by centering size/position in the actual monitor work area; zero-warning build/format pass.
+- [ ] Verify whole-window visibility and inspect complete Settings screenshots on pushedc3c735e / CI38190828814; preserve its live execution.
+
+- [x] Retain terminal1bfab22 native102/106, focused23/26 and published600-second/no-TRX evidence; same four failures, installed lifecycle not reached.
+
+- [x] Retain exact1bfab22 focused23/26 TRX; long-title tooltip/physical activation passes, offscreen Nord/future-theme lookup and source alignment fail.
+- [x] Prepare native scrolling of the owned virtualized theme list to realize the same exact IDs before unchanged selection/assertions/deadline.
+- [x] Exact9d5c0d1 focused26/26/native106/106 prove offscreen palette/default, existing future-schema/export and repeat-heading correction; zero skips.
+
+- [x] Restore trusted heading Tag on the new Contents content Grid so repeat ItemClick can identify the selected row; local zero-warning build/format pass.
+- [x] Exact9d5c0d1 unchanged repeated physical Contents/source alignment passes; pointer diagnostics use client coordinates.
+
+- [x] Prepare accessible native theme palette previews, state labels and explicit default radio selection with unchanged copied-draft/save semantics.
+- [x] Exact9d5c0d1 actual palette pixels/default/save/reopen passes and Settings screenshot inspected; new placement correction remains pending.
+- [x] Retain terminal b2ecc8c focused23/24/native101/102 and published600-second timeout/no TRX; only source alignment fails in completed suites.
+- [x] Prepare fixture-only closure of all owned windows before unchanged FlaUI close/kill fallback; preserve cases/assertions/deadlines.
+- [x] Exact9d5c0d1 published106/106 and installed stable/dev105/105 pass with zero skips, including source/tooltip/default status; retain actual TRXs and coexistence JSON.
+
+- [x] Prepare truthful General effective `.md` default status with bounded read-only Windows querying and automatic/manual refresh;7 actual read-only/isolated adapter tests pass.
+- [ ] Verify actual General status/refresh and user-selected OS chooser/Explorer behavior on an installed build; registration alone is not default selection.
+- [x] Exactb2ecc8c focused23/24: both Printing cases/raw-inline/picker/Contents options pass, zero skips; retain remaining physical alignment failure.
+- [x] Exact9d5c0d1 trimmed tooltip/physical activation and unchanged source alignment pass in focused/full native suites.
+
+- [x] Retain terminal b5e519e published98/100 TRX: same raw-fold/source-click failures, zero skips; installed lifecycle phase not reached.
+
+- [x] Prepare shared native Printing Settings options with Apply/Restore, validated checked saves and sibling draft preservation; zero-warning Release/format pass.
+- [ ] Execute both new Printing defaults/draft acceptance cases plus every existing Print/PDF/pixel case on the exact next hosted head; inspect actual Settings screenshots.
+
+- [x] Reproduce exact raw inline/HtmlBlock closing-boundary failure and correct token provenance;598 core/100% measured lines pass.
+- [x] Prepare native tooltip placement/non-hit-testing and exact owned picker enumeration corrections from retained b5e519e evidence.
+- [ ] Verify corrected raw fold, physical source/Contents clicks and picker cancellation on the next exact hosted head; retain every assertion/deadline.
+
+- [x] Exact53755ab: published99/99, installed stable/dev98/98 each; actual five-extension registration before/after update and owned uninstall/default preservation pass.
+- [x] Exact53755ab: simultaneous stable/dev profiles/processes, isolated actual updates and stable uninstall preserving dev pass; retain coexisting-channels.json and TRXs.
+
+- [x] Prepare native General Contents wrapping/depth-marker controls with checked sibling-safe persistence;593 core/100% measured lines and zero-warning Release pass.
+- [ ] Execute the actual long-title/sibling/persistence/restoration test and inspect Settings screenshots on its exact pushed head.
+
+- [x] Review all eight Mac screenshots and record verified Settings gaps in issue #21 without private content.
+- [ ] Implement/accept the native Windows Settings organization, General default-viewer status, Contents options, theme previews/defaults and Printing page.
+- [x] Reproduce/correct multiline inline raw-heading fold loss;592 core tests/100% measured lines and zero-warning Release pass.
+- [ ] Verify the updated inline raw-heading runtime fixture and complete distributed acceptance on its exact pushed head.
+
+- [x] Exact6374611: native97/98 and published97/98, focused19/20, zero skips; actual sustained colors/hover/focus and outline pass.
+- [x] Exact9994eda: offscreen native geometry correction passes focused20/20 and full native98/98; original focus/both-direction glyph/wheel assertions unchanged.
+- [x] Exact9994eda: published98/98 and installed stable/dev97/97 each, real update/apply/restart and target hashes pass; zero skips.
+- [x] Exact764c7ac: retain focused20/21, native98/99 and published98/99; only the new raw multiline-heading fold fails, zero skips. Installed lifecycle phase is not reached.
+- [x] Reproduce multiline raw-header loss in core tests and correct parser token end spans;589 core/100% measured lines, zero-warning Release/format pass.
+- [x] Exactbd3d72a: raw-HTML correction passes focused21/21 and native99/99; retain published process log with two real initial print-fixture failures and600-second outer timeout/no TRX.
+- [ ] Diagnose actual published print startup failures using owned logs/tree/screenshots and per-case progress; preserve deadlines/assertions.
+- [x] Exact9d5c0d1 full published/installed suites and actual registration lifecycle/coexistence readbacks pass; unsigned fixtures are not production-signature proof.
+
+- [x] Generate and publish the GUI-only AppKit application with the approved identity.
+- [x] Configure/read back repository protections and establish the initial hosted CI baseline.
+- [x] Inspect pinned markdownViewr source and record the full parity scope in PRODUCT.md.
+- [x] Implement GFM parsing, passive HTML sanitation and the isolated resource policy (ADR-0002).
+- [x] Replace the greeting/crash controls with file opening, rendered Markdown and manual reload.
+- [x] Test physical image containment, including junction escapes, and input size limits.
+- [x] Update the threat model, renderer attributions and shipped library notices.
+- [x] Verify first-reader hosted browser acceptance: 13 native/UI tests passed on f1756d2.
+- [x] Verify live reload/browser network scenarios and retain actual theme screenshots on head 77dd04d.
+- [x] Owner authorizes signed stable1.0/dev releases with the requested Windows-specific controls/defaults; publication still requires all gates.
+- [x] Implement/test directory watching and validated relative viewport state for saves/replacements/deletion recovery.
+- [x] Complete actual browser save/lock/replacement/deletion/scroll acceptance (issue #6): hosted native/UI 26/26; published 26/26; installed stable/dev 25/25 each.
+- [x] Port Darin's 20 built-in themes and persistent document selection; validate schema, font escaping and invariant CSS.
+- [x] Verify hosted built-in theme selection and actual painted colors on 77dd04d.
+- [x] Implement persisted editable theme overrides/custom names, color/code-font/CSS controls and built-in restoration.
+- [x] Complete hosted theme editor/validation/restoration acceptance (issue #7): CI 38102867556 passed; size 17 edit also passes in 29/30 later UI tests.
+- [x] Implement persistent resizable TOC/depth, safe heading/local-fragment jumps and independent nested section collapse (issue #9).
+- [x] Verify hosted heading jumps, independent nested collapse and theme/reload state on 5c3988e (31/33 UI pass).
+- [x] Verify physical sidebar/source resize and frontmatter modes: CI 38106991467, 34 native/published and 33 per installed channel, no skips.
+- [x] Implement literal read-only source pane, saved visibility/width and shared committed reload snapshots (issue #10).
+- [x] Verify source visibility/read-only/literal/reload and physical resize in native, published and both installed builds on 4bf0b81.
+- [x] Implement paired native browser/source find with bounded literal terms, shared counts, wraparound and reload guards (issue #10).
+- [x] Verify paired find and repeated local-fragment reveal on 5a9af63: 41 native/published and 40 per installed channel, zero skips.
+- [x] Implement all required vim reading/find/heading commands, timed prefixes and native focus/modifier guards (issue #10).
+- [x] Verify physical vim viewport, collapsed-heading and query-typing acceptance on 6bf125d: CI 38112298176, 44 native/published and 43 per installed channel, zero skips.
+- [x] Map sanitized surviving headings to original parser-derived source offsets (Setext/fences/raw HTML/frontmatter/duplicates); source UI synchronization remains pending.
+- [x] Implement literal nested source folding and bidirectional heading-based scroll synchronization (issue #10), preserving canonical find/reload snapshots.
+- [x] Verify actual native/browser heading positions, physical source scrolling and fold/find/reload restoration: `2639e2d` / CI38121762124, published49/49 and installed stable/dev48/48, no skips.
+- [ ] Audit find/source collapse parity against the pinned reference, including multiline and same-line raw HTML headings (issue #10).
+- [x] Implement and core-test hidden/metadata/Markdown frontmatter modes, with persisted native controls and attribution.
+- [x] Verify actual code-font size 17 editing in hosted UI runs.
+- [x] Verify actual hosted frontmatter mode switching on 4bf0b81 (including both installed channels).
+- [x] Implement bounded persisted editor selection and deliberate native launch using one literal process argument (issue #11).
+- [x] Verify actual editor fixture launch, validation/cancel and missing-executable acceptance on 5a9af63 in native/published/installed builds.
+- [x] Audit and implement named editor lists, stable migration, selection/reordering/removal, cancel-safe drafts and folder-opening parity (issue #11).
+- [x] Verify actual editor-list/menu order, file/folder probe arguments, cancellation and final removal: `2639e2d` native/published/installed stable/dev, no skips.
+- [x] Implement native menu/toolbar per-window font zoom, 30–500% bounds and guarded Ctrl+plus/minus/0 commands (issue #13); 330 core tests/100% measured lines.
+- [ ] Verify actual zoom glyph/key/reload/theme/find/collapse behavior in native, published and both installed channels.
+- [x] Implement print-only themes/options, native Windows print UI and explicit PDF save (issue #12); core363/100% lines; no new renderer dependency.
+- [x] Verify original3 focused native print cases on ec5f98f/38125751638: both cancels, real default/themed PDF pixels and unchanged actual glyph/view/source/collapse state.
+- [x] Implement actual PDF font/padding/width/border comparisons and successful-export paired-find preservation; d0a225d native/published width/borders pass, zoom wait fails before font/padding output. Diagnostic6e17674 confirms rounded UIA metrics; corrected case measures precise font ratios in actual PDFs.
+- [x] Verify clean original3 print cases in full300e145: native/published52 each, installed stable/dev51 each, zero failures/skips; real PDFs and update apply/restart retained.
+- [x] Verify corrected native54/54 on bf4fcdc / CI38128311242: actual PDF font/padding/paired-find plus original cases, zero failures/skips.
+- [x] Verify all5 print cases in full bf4fcdc / CI38128311242: native/published54, installed stable/dev53 each, zero failures/skips;24 actual PDFs/48 PNGs/TRXs retained, update apply/restart passes both channels.
+- [x] Implement native independent document windows, multiple-file picker/all reference extensions and bounded private recent files/clear; source-generated sibling-safe preference merging. Local376 core/100% lines and zero-warning build pass.
+- [ ] Verify actual hosted Ctrl+N/Ctrl+W, two-window zoom/watching, actual multiple-file picker/cancel, recent duplicate/missing/clear/stale-save and File/Exit acceptance.
+- [x] Implement Windows file registrations and cross-process activation with channel/install/profile identities, quoted commands and preserved defaults;9 actual isolated adapter tests pass.
+- [ ] Verify Explorer Open With, installed registration/update/uninstall and actual secondary-app/profile/duplicate/watcher behavior in all distributed builds (issue #14).
+- [x] #14: Implement Settings → Advanced → Choose default file types. Read-only install ownership checks target this exact registered application on Windows 11 23H2+; older versions open general Default Apps. Portable previews show installation guidance; `.txt` remains optional. Eleven isolated registration/activation tests pass.
+- [ ] #14: Verify the actual installed Settings action, Windows Default Apps selection and Explorer double-click for Markdown types; confirm optional `.txt` remains unchanged, stable/dev identities and older-Windows guidance. New native page case compiles, not yet run.
+- [x] Expose all body/heading/code typography controls, including heading levels1–6 and line height, with copied core edit validation.18 focused theme regressions; combined426 core tests/100% lines, zero-warning full build/format pass. Unsigned worktree only.
+- [ ] Verify real hosted complete typography save/heading-body-code glyph growth/cancel acceptance; new case compiles, not run.
+- [x] Implement shared global CSS and bounded persisted content width, copied cancel-safe drafts, sibling broadcasts and separate print styles.22 focused regressions; combined448 core/100% measured lines, zero-warning build/format pass. Unsigned worktree only.
+- [ ] Verify real hosted width wrapping/global CSS/theme changes/PDF isolation/cancel and two-reader broadcast/stale local save; two new cases compile, not run.
+- [x] Implement copied native theme order/enable/delete/restore and shared selection, saved menu order and guarded Ctrl+Shift+Up/Down cycling. Restoration preserves edits as collision-safe custom copies.23 focused cases; combined471 core tests/100% measured lines, zero-warning build/format pass; local worktree only.
+- [ ] Verify actual hosted menu order/disabled choices/physical cycle/focus/cancel, sibling deletion/restoration and updated retained-override restoration case. Two new cases compile, not run.
+- [x] Implement bounded multi-file JSON import, explicit overwrite/keep-both/skip/newer-schema choices, metadata/version-preserving disabled-theme export and native manager New/Copy/Edit/Use selected with copied cross-dialog drafts.46 focused regressions; combined517 core/100% measured lines and zero-warning full build pass; local worktree only.
+- [ ] Verify all six new hosted conflict/batch/future/disabled-export/new-copy-edit-cancel cases in native, published and installed builds; headless discovery finds69 total cases, runtime not executed.
+- [ ] Audit original global/per-theme CSS variable/DOM selector compatibility; retain full reference stylesheet behavior.
+- [x] Implement independent saved highlight/superscript/subscript/underline options and native controls; existing parser/sanitizer, exact source offsets, code/newline/whitespace guards and theme palette. Local408 core tests/100% lines and full build/format pass; unsigned worktree only.
+- [ ] Verify hosted native extension glyphs/paint/toggles/persistence/source/reload in all distributed builds; one real acceptance case is prepared, not run.
+- [ ] Audit remaining extension edge cases against raw authored HTML and complete local image/link/render fidelity.
+- [x] Verify the all-rule two-pass PSScriptAnalyzer mitigation on scripts 38104988748 and 38105483489; closes #5 only on reviewed merge.
+- [ ] Verify hosted checks on each actual implementation head.
+- [ ] Finish standards inventory and reviewed/published AppKit/signing API adoption when available.
+- [ ] Verify actual signed stable/dev installers and exact shipped bytes before release publication.
+
+## Native and IPC follow-up - 2026-10-11
+
+- [x] Exact9fdfc2d focused native acceptance14/15,zero skips: source reopening,
+  highlighting, four-file import and repeated-heading navigation now pass.
+- [x] Reproduce the disconnected-peer failure deterministically and correct
+  owned native cleanup: actual pre-fix10-second connection timeout, then four
+  cases pass and25runs/100tests pass after fixing Broken-state disconnection.
+- [ ] Verify current full/published/installed results and the IPC correction on
+  the exact next pushed head; do not substitute local stress for distributed proof.
+- [ ] Diagnose source focus/scroll alignment using the retained numeric probe,
+  preserve exact native assertions, and remove [DEBUG-source-coordinates]
+  instrumentation before release.
+- [x] Add/read back the real reader-regressions required check on live main,
+  preserving every previous protection and GitHub Actions binding.
+
+## Previous acceptance checkpoint - 2026-10-11
+
+- [x] Exact8abbd4d hosted build/core/format pass; full native93/97,
+  focused10/12,zero skips. Retained native/published and real PDF artifacts
+  are documented in SESSION-STATE.md.
+- [ ] Verify the next native Toggle/menu, four-file picker and heading-inset
+  correction in all distributed builds; retain exact source-color and source
+  focus/scroll failures. The focused job includes every remaining native case.
+- [ ] Complete current published and installed stable/dev acceptance;8abbd4d
+  again exceeds600seconds during published tests before installed outcomes.
+  Investigate the reproduced disconnected-pipe timeout; local75-case stress
+  did not reproduce it. Preserve owner preview55472 and all signing gates.
+
+## Owner follow-ups - 2026-10-11
+
+- [ ] #22: Fix the system print handoff and widen print options.
+- [ ] #23: Diagnose PDF export and offer success-only open PDF/folder actions. Readable-output verification and options implemented locally; runtime acceptance pending.
+- [ ] #19: Credit Darin Kelkhoff's original Mac app in About and documentation, with repository/site links. Implemented locally; actual About acceptance pending.
+- [ ] #20: Match gclo Help commands and carry defaults into AppKit samples and the starter. Implemented locally; builds/generation/setup tests pass, native acceptance/signing/push pending.
+- [x] #21: Replace owner-rejected modal tabs with a standard resizable WinUI Settings window, left navigation, native controls, immediate checked width preferences and explicit CSS apply. Theme/editor dialogs and pickers belong to Settings.
+- [ ] #21: Verify native window resizing/navigation, immediate preferences, CSS apply/discard and owned theme/editor/picker dialogs in distributed builds.
+- [x] #16: Implement native passive source highlighting, document/shell colors, high contrast and exact plain copying.570 core tests and100% measured lines pass.
+- [ ] #16: Run real native color/mode/palette/selection/clipboard and existing find/fold/scroll/reload acceptance in distributed builds.
+- [x] #17: Implement50/50 source opening/reopening, proportional mouse resizing and focused Left/Right/Home controls;21 core layout regressions pass.
+- [ ] #17: Verify actual mouse/keyboard/outline/DPI/window-resize/reopening geometry in distributed builds.
+- [x] #18: Implement reference-order native toolbar with dynamic overflow, shared reading handlers, H1–H6, enabled themes, valid editor/direct/choices and primary Print; Theme uses the native Color icon. Broadcast saved editor choices to all readers; build/format pass.
+- [ ] #18: Verify four prepared actual toolbar reading/menu/editor/Print/narrow/sibling cases in native, published and both installed builds.
+- [ ] #6: Verify automatic external-save refresh or a clear stale/reload notification in the current build. Native watcher6/6 passes; explicit fallback/new locked-save UI case implemented, actual acceptance pending.
+
+- [x] #24: Move Darin attribution into About Contributions; link23 runtime/platform and29 development entries verified against restored package metadata; preserve11 distinct packaged license/notice texts.
+- [ ] #24: Verify actual About scrolling, keyboard-accessible project/license links and Contributions placement in distributed builds.
+
+- [x] #25: Add gclo-style native Advanced splash toggle/duration (500–30000 ms, 250 ms steps), startup update preference, checked saves and sibling broadcasts using the published AppKit splash.
+- [ ] #25: Verify actual startup duration/enabled/disabled and shared preference persistence in distributed acceptance.
+- [ ] #18: Review the tightened toolbar row, control alignment and grouped commands against the owner screenshot; geometry assertions are prepared.
+
+## Active 1.0 release queue - 2026-10-11
+
+Full stable1.0 and isolated development releases are authorized. Local implementation
+checks below do not substitute for current native/distributed acceptance.
+
+- [x] #27: Reproduce source-hover color loss and fix native foreground state assignments; exact hosted pointer/focus/selection regression passes on0ed608e/CI38166230860.
+- [ ] #27: Verify all source color/theme/reload/copy/scroll behavior in current published and installed editions; full acceptance remains open.
+- [x] #18: Remove the duplicate toolbar depth selector and label Contents/Print; retain TOC depth.
+- [ ] #18: Verify current toolbar alignment, overflow and narrow-window behavior.
+- [x] #21: Add independent new-window Contents/Source defaults, both off; core merge/copy regressions pass.
+- [ ] #21: Verify persisted defaults and unchanged existing windows through actual Settings input.
+- [x] #21: Move long theme/editor forms into native Settings pages with Back/Save/Cancel; preserve copied drafts/import conflicts/native pickers.
+- [ ] #21: Verify the current Settings pages, draft cancellation/validation and imports at normal/narrow sizes.
+- [x] #26: Add loaded-handle modification time, stale/reload status and native Open folder; real metadata adapter regression passes.
+- [ ] #26: Verify actual footer changes during locked/replaced/missing files and independent windows.
+- [x] #28: Add accessible/native delayed disabled-editor explanation with the actual unavailable reason and Settings guidance.
+- [ ] #28: Verify actual disabled hover, mouse exit, state changes and keyboard accessibility.
+- [x] #29: Generate distinct navy Markdown/reading mark through AppKit BrandTool; visually inspect the256px frame and validate all nine ICO sizes.
+- [ ] #29: Verify icon in current distributed app/window/taskbar/splash and obtain owner design feedback.
+- [x] #24: Limit Components to shipped open-source credits/project/license links; preserve full audit catalog and notices, with Darin in Contributions.
+- [ ] #24: Verify current native About layout, Contributions and all credit links.
+- [x] Port pinned document CSS/container/scroll/print semantics locally. Current combined582 core tests/100% lines,25 adapter tests,zero-warning Release/format/publish pass.
+- [x] Verify immutable upstream template/CSS-help blobs and all47 shared screen CSS selector declarations; document native pane-CSS compatibility boundary in reference-fidelity-audit.md.
+- [ ] Complete remaining rendering/native/distributed fidelity acceptance and owner design review; CSS declaration comparison does not establish painted-output or arbitrary native pane-CSS parity.
+
+- [ ] Pass hosted CI on the actual current implementation; retain native/published/installed TRXs, screenshots and real PDFs.
+- [x] Implement gclo-style separate stable/dev package IDs and installed-channel title/data identity;586 core tests/100% measured lines pass.
+- [x] Prepare simultaneous owned stable/dev windows/profiles/registrations, real AppKit updates with a live unchanged sibling, and stable uninstall preserving dev;64 tooling tests/all configured analyzer rules pass.
+- [x] Exact53755ab actual simultaneous windows/profiles/isolated updates/uninstall phase passes; current-head distributed acceptance and OS chooser remain separate requirements.
+- [ ] Diagnose dbda6d4 focused17/20 failures with retained native color/focus/hidden-section evidence; preserve exact assertions and remove temporary debug probes before release.
+- [ ] Adopt the reviewed/published owned-file signing builder; verify actual Azure resource/profile/publisher and repository-bound OIDC/profile-signer permission.
+- [ ] Obtain genuine current-head maintainer review acknowledgement, complete required checks and merge.
+- [ ] Publish signed stable1.0/dev releases with verification of exact distributed artifacts, timestamp/publisher/checksums and installed update acceptance.
diff --git a/docs/adr/0002-isolated-markdown-rendering.md b/docs/adr/0002-isolated-markdown-rendering.md
new file mode 100644
index 0000000..47449c9
--- /dev/null
+++ b/docs/adr/0002-isolated-markdown-rendering.md
@@ -0,0 +1,142 @@
+# ADR-0002: GFM rendering inside an isolated WebView2 document surface
+
+- **Status:** Proposed; implemented on the viewer topic branch, pending review
+- **Date:** 2026-10-10
+- **Decider:** Project maintainer
+- **Tracking:** [reader milestone #4](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues/4)
+
+## Context
+
+Darin's document layout needs HTML/CSS, GFM tables, tasks and useful raw HTML.
+Documents can contain hostile markup, resource paths and links. A Markdown parser
+alone does not provide a native application security boundary.
+
+## Decision
+
+Use Markdig 1.4.0 (BSD-2-Clause) for GFM and HtmlSanitizer 9.2.1039 (MIT) for
+an explicit passive-markup allowlist. AngleSharp and AngleSharp.Css are their MIT
+dependencies. Remove the unused sample greeting and CommunityToolkit dependency.
+Versions and transitive hashes are committed in the NuGet locks.
+
+Host the sanitized result in WinUI WebView2. Serve an intercepted logical HTTPS
+document, with a random resource namespace for each open; no local HTTP listener.
+The document response carries a deny-by-default CSP and no-referrer/no-store headers.
+Document-authored styles, IDs and classes are removed. Application theme CSS is generated from validated six-digit colors, bounded finite sizes and escaped font names. Theme custom CSS escapes every less-than sign before HTML embedding, preventing style-element breakout; CSP and resource interception continue to deny remote resources.
+
+Disable scripts, web messages, host objects, frames, downloads, popups and permission
+requests. Reject all browser resources except the exact document and allowlisted
+local image requests. External HTTP(S) navigation requires a real user gesture
+and opens in Windows' external handler. User-initiated Markdown/text file links
+open native reader windows after the same namespace/path validation and physical
+folder check. The new reader retains that required physical root for every
+manual/automatic reload; it cannot follow a later junction outside the original
+grant. Other URI schemes and executable/non-document targets remain blocked.
+
+Decode resource paths once; reject traversal, alternate streams, devices and Windows
+filename aliases. Before reading an image, resolve its opened handle with
+GetFinalPathNameByHandleW and compare it against the physical document directory.
+Read from that same handle, preventing a check/reopen race. Remote images are blocked.
+Bound documents to 16 Mi characters and individual images to 16 MiB.
+
+## Options considered
+
+| Option | Benefit | Cost |
+| --- | --- | --- |
+| Markdig, sanitization and WebView2 | Maintained parsing; compatible HTML/CSS surface | Requires explicit browser/filesystem containment |
+| Parser plus unrestricted HTML | Small initial implementation | Exposes script, resource and native navigation risks |
+| Entirely native text layout | Avoids an embedded browser | Reimplements tables, themes, print and navigation |
+
+## Consequences
+
+The reader supports a picker, literal launch arguments, manual reload and debounced save watching.
+The 20 original themes are embedded unchanged, with their MIT notice shipped in THIRD-PARTY-NOTICES.md. System/SF Mono defaults map to Windows font fallbacks. Document theme selection persists separately from the AppKit shell theme and retains the viewport. Editable themes and native heading/section controls are implemented and verified; full syntax-color parity and new synchronized-source acceptance remain pending. Automatic save
+reload uses fixed native ExecuteScriptAsync queries on the checked current document;
+this API works while authored scripts remain disabled. Browser results must be exactly
+two finite numeric fractions, clamped to 0–1; only invariant numeric arguments enter the
+fixed restore expression. No strings from documents become executable script.
+
+Any later document-created JavaScript or native message bridge requires a revised CSP,
+origin/nonce/schema checks and tests before enabling it. Custom CSS must not introduce network or file access.
+
+## Native source and find
+
+The optional source surface is a native read-only TextBox holding the same bounded,
+literal snapshot as the reader. It does not parse HTML. Core find uses case-insensitive,
+nonoverlapping UTF-16 source positions and pairs counts with the rendered surface.
+
+Use the pinned runtime's [native finder](https://learn.microsoft.com/en-us/dotnet/api/microsoft.web.webview2.core.corewebview2find.startasync), suppress its default dialog, and provide one native Ctrl+F toolbar.
+Query strings enter the native API directly; no search term becomes executable script.
+Disable browser feature accelerators so the host owns find/print/reload commands;
+[standard movement, selection and copy shortcuts remain available](https://learn.microsoft.com/en-us/dotnet/api/microsoft.web.webview2.core.corewebview2settings.arebrowseracceleratorkeysenabled?view=webview2-dotnet-1.0.4191.47).
+
+Typing is debounced and native searches serialized. Check the current page/navigation
+before applying results; repeat the current term after reload/theme navigation. Search
+reveals sections temporarily and restores their saved choices on close, incorporating
+explicit native section commands during search. The literal source projection mirrors browser folds while preserving the canonical
+snapshot and original query positions. Authored scripts, messages and host objects remain disabled.
+
+Reading keys use the current app UI thread's existing message hook, bounded native
+command enums and exact browser/read-only-source focus. Find/dialog controls retain
+normal input. Translate only reading input with the active keyboard layout and
+ToUnicode flag 4, preserving dead-key state; Alt/Windows/extra Ctrl modifiers are
+ignored. Timed prefixes reset on focus/page/window transitions; held keys cannot
+imitate gg/heading sequences. Dispatch rechecks focus. Browser scrolling and visible
+heading operations use fixed host scripts and generated numeric identities only.
+No content script, native bridge or dependency is added. Physical-key browser and
+text-entry acceptance remains distinct from pure key-model tests.
+
+## Parser-derived source provenance
+
+The source synchronization foundation maps AST headings and raw HTML tokens to
+original UTF-16 offsets. ATX/Setext, quote/list prefixes, fences, duplicate labels
+and frontmatter retain parser identity rather than text/regex matching. Raw HTML
+line lookup uses indexed offsets; source text remains immutable. Only headings
+surviving the ordinary passive sanitizer receive a source identity.
+
+A fresh per-render private attribute carries this provenance through sanitation;
+its generated name is allowed only for the internal outline render, then removed
+from every element before presentation. The public renderer never admits it, and
+authored IDs/data attributes remain stripped. No source marker grants a browser
+capability. These parser tests do not prove browser behavior. ADR status remains proposed.
+
+## Literal source folding and scroll synchronization
+
+A pure source projection normalizes native CR display offsets, retains heading
+lines and replaces folded bodies with plain ellipses. Nested choices remain
+independent; search expands the projection without changing the original snapshot.
+Native selections map original UTF-16 query ranges into the visible literal text.
+
+A serial 150 ms owned-window timer captures only finite browser scroll coordinates,
+generated heading indices and collapsed bodies. Frames are bounded and validated,
+with current document/navigation/query/snapshot guards. Native TextBox character
+rectangles pair with actual generated browser heading tops for piecewise linear
+scroll mapping. Feedback holds protect native find selections and prevent reverse
+scroll oscillation. Hidden panes and closed windows do not synchronize.
+
+The native coordinate conversion uses the owned TextBoxView's content space; its
+scroll offset must not be added a second time. See the
+[Microsoft implementation](https://github.com/microsoft/microsoft-ui-xaml/blob/main/dxaml/xcp/core/native/text/Controls/TextBoxBase.cpp).
+Hosted tests must measure actual heading glyph/viewport positions, physical source
+scrolling and fold/find/reload restoration before this behavior is called verified.
+No authored script, message bridge, rich-text interpretation or dependency is added.
+
+## Verification and follow-up
+
+Core regression tests cover GFM, hostile HTML and resource paths at 100% core line
+coverage. Native adapter tests cover BOM decoding, byte limits, exact image bytes and
+a real junction pointing outside the document folder. Browser/UI acceptance is a
+separate gate; these unit tests do not prove browser behavior or release signing.
+
+- [ ] Review this decision and complete document UI acceptance.
+- [x] Complete hosted save/replacement/deletion/scroll, editable-theme, outline/frontmatter and literal-source acceptance.
+- [x] Complete paired find and physical vim acceptance in native, published and installed builds.
+- [ ] Complete synchronized source and print acceptance from PRODUCT.md.
+- [ ] Verify WebView2 runtime deployment and exact signed installed release artifacts.
+
+## References
+
+- [Markdig](https://github.com/xoofx/markdig)
+- [HtmlSanitizer](https://github.com/mganss/HtmlSanitizer)
+- [Microsoft WebView2 security guidance](https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/security)
+- [Native WebView2 script execution](https://learn.microsoft.com/en-us/microsoft-edge/webview2/reference/winrt/microsoft_web_webview2_core/corewebview2)
+- [GetFinalPathNameByHandleW](https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-getfinalpathnamebyhandlew)
diff --git a/docs/adr/0003-print-only-styles-and-native-output.md b/docs/adr/0003-print-only-styles-and-native-output.md
new file mode 100644
index 0000000..3e9be18
--- /dev/null
+++ b/docs/adr/0003-print-only-styles-and-native-output.md
@@ -0,0 +1,90 @@
+# ADR-0003: Independent print styles and native Windows output
+
+**Status:** Proposed for maintainer review; all5 native/published/installed print cases pass
+**Date:** 2026-10-11
+**Deciders:** James Maes, repository maintainer
+
+## Context
+
+Pinned markdownViewr `6d08bc9` temporarily replaces screen CSS and restores it in
+its macOS modal print completion callback. Windows WebView2 `ShowPrintUI` returns
+void and does not expose that completion lifecycle. Printing must retain the
+reading theme, font zoom, scroll, find, source and nested collapse state after
+success, cancellation or failure. Use published AppKit 0.1.0 and existing WebView2.
+
+## Decision
+
+Keep reading theme/custom CSS in a stylesheet with `media="screen"`. A deliberate
+File/Print or Ctrl+P command generates a separate host-owned `media="print"`
+stylesheet using validated saved print choices. Stylesheet media attributes also
+contain custom CSS with unbalanced braces: print CSS cannot affect screen media.
+Never replace reading CSS, mutate canonical content, expand DOM collapse flags,
+stop find or navigate/reload merely to print. Print CSS shows generated collapsed
+bodies; their original `hidden` attributes remain intact for the screen.
+
+Provide Clean Printing (reference defaults), Active Theme, Plain HTML and named
+built-in/user themes; backgrounds off/images on; standard/matching font zoom;
+full/document width; optional borders and 0–96 pixels of page padding. Native
+Windows print UI owns printer selection and cancellation. PDF saving uses an
+explicit Windows App SDK destination picker and awaited WebView2 PDF output. PDF margins
+are 0.5 inches, matching the reference's 36 points; scale is handled in font CSS.
+No completion or successful printer job is inferred from opening native print UI.
+Hosted PDF generation moved the same screen glyph41pixels after its awaited
+operation; capture validated numeric reading geometry before PDF output and
+restore its vertical position in finally, only for the same ready navigation.
+Actual glyph/view rectangles verify restoration; the observed UIA scroll scalar
+reported200% before printing and cannot serve as the viewport baseline.
+Use the installed App SDK save picker with AppWindow.Id; do not introduce the
+legacy WinRT picker/elevation constraint into the new PDF path.
+
+Print/PDF uses the existing passive document, local image containment and resource
+interception. No authored scripts/messages, remote resources, new native bridge,
+output path from document content or private document/path logs. Fixed host script
+assigns JSON-serialized CSS to a private stylesheet and validates the same ready
+navigation afterwards. Pause native source feedback during the app's print draft/
+PDF operation; geometry queries reject print-media frames while native print UI runs.
+
+## Options considered
+
+| Option | Benefit | Cost |
+| --- | --- | --- |
+| Separate media styles on the current passive page | Preserves screen state without a completion callback; existing image policy | Requires actual print-media/output and state tests |
+| Replace screen styles, then restore them | Mirrors the macOS implementation | No reliable native print-UI completion signal; premature restoration changes output |
+| A second print browser/window | Separate DOM snapshot | Duplicates page/resource lifetimes and navigation controls; extra browser state |
+
+## Consequences and acceptance
+
+Settings drafts are copied; cancel does not save them. No printer job is sent by
+hosted acceptance: exercise native cancel and save owned fixture PDFs. Use Windows'
+built-in PDF rasterizer to inspect real image/background/text output, with retained
+PDF/PNG evidence. The test project targets the existing Windows SDK; no new PDF
+library or runtime dependency is added. Keep 100% measured core coverage, full native/
+published/stable/dev suites and the hostile-document controls. Original3 hosted native cases pass ec5f98f/38125751638, zero failures/skips:
+actual default/themed PDFs and unchanged glyph/view/source/collapse state. Full
+cleaned native/published/stable/dev gates and broader layout/font/padding/find
+comparisons remain open. Retained PDF/PNG/TRX evidence is under
+artifacts/print-exact-filename-38125751638.
+
+Sources: [Microsoft printing overview](https://learn.microsoft.com/en-us/microsoft-edge/webview2/how-to/print?tabs=dotnetcsharp),
+[App SDK save picker](https://learn.microsoft.com/en-us/windows/apps/develop/files/pickers-save-file),
+[pinned print coordinator](https://github.com/darinkelkhoff/markdownViewr/blob/6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021/ContentView.swift).
+
+## Expanded output proof in progress
+
+The native fixture now compares actual first-heading ink bands for Standard and
+Match Screen font scaling and40pixel padding. Another fixture creates a saved
+user theme with240pixel content width and compares actual block-edge pixels with
+borders off/on and full-page width. Each PDF is retained before raster assertions.
+Successful exports also verify paired query/count, actual native source selection
+and original reading paint/geometry. These new cases compile/format but have not
+run; full expanded native/published54 and installed53 per channel remain required.
+
+Full hosted acceptance `bf4fcdc` / CI38128311242 passes54 native/published and53
+installed stable/dev tests with zero failures/skips. All5 print cases pass in
+every build. Actual PDF glyph ratios,40px padding,240px custom width/full-page
+edges, optional borders and paired find/source selection pass;24 generated PDFs
+are retained. UIA screen text metrics round to integer font boxes (35px to44px at
+121%), so the PDF case verifies real increasing screen glyphs/completed zoom and
+measures precise font ratios in printed ink. Original exact screen restoration
+and PDF pixel assertions remain. Evidence: artifacts/print-font-verified-installed-38128311242.
+Unsigned fixtures do not prove production signing or a successful physical printer job.
diff --git a/docs/adr/0004-native-document-windows-and-private-recents.md b/docs/adr/0004-native-document-windows-and-private-recents.md
new file mode 100644
index 0000000..d4c29fb
--- /dev/null
+++ b/docs/adr/0004-native-document-windows-and-private-recents.md
@@ -0,0 +1,59 @@
+# ADR-0004: Native document windows and private recent files
+
+**Status:** Proposed; implementation and core tests pass, hosted lifecycle acceptance pending
+**Date:** 2026-10-11
+**Deciders:** James Maes, repository maintainer
+
+## Context
+
+Pinned markdownViewr uses SwiftUI DocumentGroup for independent document windows,
+file opening and recent documents. Its readable types include md/markdown/mdown/mkd
+and plain text. Windows must preserve each reader's watcher, source/find/collapse
+and font zoom when another document opens or closes. Use published AppKit0.1.0.
+
+## Decision
+
+Track strong references to native WinUI XAML MainWindow instances on the shared
+UI thread; remove them on Closed. Each owns its browser, watcher, load scheduler,
+keyboard hook, find/source/collapse and zoom. Pass the initial literal path to
+that window rather than reading process arguments in every Loaded callback.
+File/New window and Ctrl+N create a blank reader; Close window/Ctrl+W close only
+that reader; File/Exit closes all. Close the shared activity log only when the
+last document window closes. Show splash/startup update checks only once.
+
+Use the current App SDK FileOpenPicker(AppWindow.Id) and PickMultipleFilesAsync,
+including all five reference extensions. Reuse a blank window, focus an already
+open canonical path within this process, or create a new document window.
+Cancellation leaves readers intact; failed opens retain any existing reader.
+Windows registration and cross-process activation now have local implementation
+and isolated boundary evidence in ADR-0005. Explorer and installed lifecycle
+acceptance remain required; literal process arguments alone are not association
+proof.
+
+Store at most20 successful absolute paths in the private AppKit settings file,
+deduplicated with Windows path comparison. Update only after a parsed snapshot
+commits. Clear history removes entries without deleting files or closing readers.
+Keep paths out of activity logs/telemetry. Each preference save merges only fields
+changed since that window's last successful save into the latest stored settings;
+older window snapshots cannot resurrect cleared history or overwrite sibling edits.
+
+## Options and consequences
+
+Separate tracked XAML windows reuse existing document adapters and native lifetime
+handling. Tabs would require additional detach/reattach state and do not supply the
+reference's independent windows. Creating AppWindow directly does not attach XAML
+content. Current duplication detection covers one process; OS activation and
+stable/dev identity boundaries have local implementation/isolated tests in
+ADR-0005; actual application and installed acceptance remains pending.
+
+376 core tests pass with100% measured lines, including bounded/corrupt history,
+case deduplication and sibling-safe settings merging. Require hosted real two-window
+startup, actual independent glyph zoom, physical Ctrl+N/Ctrl+W, surviving save reload,
+recent duplicate activation/missing errors, clear without stale resurrection and
+Exit. Three new native cases are compiled; none has run on the local desktop.
+
+## References
+
+- [Microsoft: Multiple WinUI windows](https://learn.microsoft.com/en-us/windows/apps/develop/ui/multiple-windows)
+- [Microsoft: App SDK multiple-file picker](https://learn.microsoft.com/en-us/windows/windows-app-sdk/api/winrt/microsoft.windows.storage.pickers.fileopenpicker.pickmultiplefilesasync)
+- [Microsoft: Single-instance activation lifecycle](https://learn.microsoft.com/en-us/windows/apps/windows-app-sdk/applifecycle/applifecycle-single-instance)
diff --git a/docs/adr/0005-windows-file-registration-and-activation.md b/docs/adr/0005-windows-file-registration-and-activation.md
new file mode 100644
index 0000000..1aafe63
--- /dev/null
+++ b/docs/adr/0005-windows-file-registration-and-activation.md
@@ -0,0 +1,96 @@
+# ADR-0005: Windows file registration and activation
+
+**Status:** Implemented locally; isolated boundary tests pass; native/installed acceptance pending
+**Date:** 2026-10-11
+**Decider:** James Maes, repository maintainer
+
+## Context
+
+The Windows counterpart must open Markdown/plain-text files from Explorer and
+subsequent launches without replacing existing readers. Stable, development,
+portable previews and isolated test profiles must retain their identity boundaries.
+Relative arguments must keep the launching process's working-directory meaning.
+
+## Decision
+
+Use Velopack install/update/uninstall fast callbacks to register only installed
+copies. The registered executable is the installation's stable
+`current/MarkdownViewr.Windows.exe`. Advertise `.md`, `.markdown`, `.mdown`, `.mkd`
+and `.txt` through per-user ProgIDs, OpenWithProgids and Default Apps capabilities.
+Quote the executable and literal `%1` argument. Set `AllowSilentDefaultTakeOver`
+as REG_NONE; never write extension defaults, UserChoice or machine-wide keys.
+
+A ProgID identifies channel and canonical executable path. Uninstall first
+checks that its command remains unchanged, then removes only owned entries.
+Another channel, another installation and deliberate user retargeting survive.
+Builds and portable copies do not register file types.
+
+Use Windows App SDK AppInstance to choose the primary for the executable and
+profile directories. SDK rich file activation and ordinary command-line paths
+become the same fixed native document request. Resolve relative paths before
+crossing processes; the public SDK launch envelope cannot carry sender CWD.
+
+Deliver requests through a current-user-only .NET named pipe. Accept only a
+source-generated bounded schema: at most128 absolute paths, a1MiB frame and an
+optional fixed invalid-path notification. Reject unknown fields; no command or
+script operation exists. Connection/read/acknowledgement waits are bounded to
+10seconds, with at most16 requests queued before XAML attaches its dispatcher.
+Malformed/disconnected peers cannot stop later valid requests. App shutdown
+cancels and disposes the listener. No dependencies or generic RPC layer are added.
+
+The foreground launcher permits the primary to focus an existing document.
+Dispatch all window creation on the native UI thread; duplicate paths include
+pending initial loads and preserve watcher/source/find/zoom state. Empty launch
+focuses an existing reader. An invalid startup path gets a fixed native message;
+logs contain only failure kind/HRESULT.
+
+## User-selected default file types
+
+Settings → General exposes a native Choose default file types button. Read-only
+checks require this installed executable's unchanged command and the exact owned
+RegisteredApplications value. Portable/unregistered previews instead show install
+or repair guidance and cannot launch the selection action. Nothing selects or
+reclaims a default, and `.txt` is explicitly optional.
+
+Windows 11 23H2+ uses `ms-settings:defaultapps?registeredAppUser=` plus the
+URI-escaped registered value name (the installation/channel ProgID, not a display
+name). Earlier builds use general Default Apps with instructions to search `.md`;
+this conservatively includes Windows 11 builds predating the supported deep link.
+The native action revalidates ownership at click time, handles launch failure with
+manual OS guidance and logs only error kind/HRESULT.
+
+General also reports the effective `.md` default using Windows' read-only
+[AssocQueryStringW](https://learn.microsoft.com/en-us/windows/win32/api/shlwapi/nf-shlwapi-assocquerystringw)
+with [ASSOCSTR_PROGID](https://learn.microsoft.com/en-us/windows/win32/api/shlwapi/ne-shlwapi-assocstr).
+Compare the returned ProgID with this installation/channel and require unchanged
+registration ownership. An unavailable query stays Unknown; registration alone
+never means Default. The Unicode buffer is capped at1024 characters, input is
+fixed `.md`, and no UserChoice/hash/default writes or competing-app paths are
+read or displayed. Refresh when returning from Windows Settings or explicitly
+through Refresh status. Seven real read-only/isolated adapter cases pass;
+actual user-selected default/Explorer acceptance is still required. Document content has no route
+to invoke it. Actual Windows chooser/selection and Explorer acceptance are pending.
+
+## Evidence and remaining acceptance
+
+Eleven actual isolated registry/pipe/path tests pass, including two Default Apps
+routing/ownership cases retained in `artifacts/default-files-boundaries/`. They cover command/icon
+quoting, all five extensions/capabilities, REG_NONE marker, preserved defaults,
+channel/installation cleanup, retarget protection, sender-relative Unicode,
+profile identities, startup queuing, acknowledgements, malformed recovery and
+idempotent cancellation/rebinding. Red/fixed TRXs are retained under
+`artifacts/activation-boundaries/`. These do not prove Explorer or XAML behavior.
+
+Two real secondary-app/profile/duplicate/watcher cases compile but have not run.
+Require controlled native/published/installed acceptance, actual install/update/
+uninstall readbacks and Explorer Open With before closing issue #14. Production
+signatures and release publication remain separate requirements.
+
+## References
+
+- [Microsoft: App SDK single-instance lifecycle](https://learn.microsoft.com/en-us/windows/apps/windows-app-sdk/applifecycle/applifecycle-single-instance)
+- [Microsoft: Rich activation](https://learn.microsoft.com/en-us/windows/apps/windows-app-sdk/applifecycle/applifecycle-rich-activation)
+- [Microsoft: Launch Default Apps settings](https://learn.microsoft.com/en-us/windows/apps/develop/launch/launch-default-apps-settings)
+- [Microsoft: File association ProgIDs](https://learn.microsoft.com/en-us/windows/win32/shell/fa-progids)
+- [Microsoft SDK activation implementation](https://github.com/microsoft/WindowsAppSDK/blob/main/dev/AppLifecycle/AppInstance.cpp)
+- [Velopack application hooks](https://docs.velopack.io/reference/csharp/Velopack.VelopackApp)
diff --git a/docs/azure-signing-admin.md b/docs/azure-signing-admin.md
new file mode 100644
index 0000000..4f3d879
--- /dev/null
+++ b/docs/azure-signing-admin.md
@@ -0,0 +1,210 @@
+# MarkdownViewr signing administrator actions
+
+Verified on2026-10-12 using authenticated Azure CLI and ARM resource readback.
+The existing account, validation and profile were reused. A separate secretless
+MarkdownViewr CI identity, exact release-environment trust and profile-scoped
+signer assignment are created and independently read back. All seven protected
+GitHub release variables match the verified deployment. gclo's identity,
+credentials and assignments were preserved.
+
+## Verified deployment and local signing proof
+
+| Setting | Verified value |
+| --- | --- |
+| Subscription | `8ef2479e-3346-4cba-93ad-101c6cd237a0` (`Kof22 Signing Account`) |
+| Tenant | `4ebeb0ad-5782-487a-a1b4-5080255774cf` |
+| Account / region | `kof22signing` / `eastus` |
+| Regional endpoint | `https://eus.codesigning.azure.net/` |
+| Profile | `releases`, Active, PublicTrust |
+| Certificate subject | `CN=James Maes, O=James Maes, L=Chester, S=il, C=US` |
+| CI client ID | `8f51ec7a-5d91-45db-a374-c628566fc383` |
+| Application object ID | `1640971f-8e5c-4f3a-802e-8633630e544c` |
+| Service-principal object ID | `4e9e7d2b-5df4-4312-9d01-9845922c4d92` |
+
+The sole CI federation uses the exact immutable subject shown below. Its signer
+role is limited to the `releases` certificate profile; no Owner/Contributor role
+or client secret was added. The protected GitHub environment permits only `v*`
+tags. No tenant security controls changed.
+
+A local representative test signed disposable copies of all six owned binaries
+from `321816c` with Microsoft.ArtifactSigning.Client `1.0.146`, SHA256 and RFC3161
+SHA256 timestamping. The client NuGet package's Microsoft author and NuGet
+repository signatures verify. Each binary passes `signtool verify /pa /all /v`
+with zero warnings/errors, the exact certificate subject above, and Microsoft
+Public RSA Time Stamping Authority. The existing strict signature helper also
+passes all six files, including its SHA256 digest check. Logs, original/final
+hashes and signature receipts are retained locally in
+`artifacts/signing-proof-321816c/`; running owner previews were untouched.
+
+This test uses the authorized interactive administrator's existing signer role.
+It does not prove the new CI identity's OIDC exchange, installer signing or final
+shipped artifacts. Complete standards PR#31 review/publication, adopt the
+published catalog builder, and run the protected release integration before
+claiming production readiness. No stable 1.0 or dev release was published.
+
+## Interactive sign-in when device flow is blocked
+
+The owner-reported Azure CLI error530035 means Security Defaults blocked
+access. [Microsoft's current guidance](https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults#block-device-code-flow)
+explicitly states that Security Defaults block device-code authentication. Keep
+those protections enabled. Use normal interactive Windows authentication rather
+than repeating `--use-device-code`:
+
+```powershell
+az login --tenant koftwentytwooutlook.onmicrosoft.com --output none
+```
+
+Complete account selection and MFA personally. Current Azure CLI uses Windows
+[Web Account Manager](https://learn.microsoft.com/en-us/cli/azure/authenticate-azure-cli-interactively#sign-in-with-web-account-manager-wam-on-windows)
+by default. If interactive sign-in also fails, inspect that sign-in's actual
+error and Entra sign-in log; do not assume device enrollment or broader resource
+roles will resolve it. Authentication alone still does not establish access to
+the signing account/profile or grant CI signing permission.
+
+If Windows account selection cannot use the administrator's passkey provider,
+use Microsoft's supported browser flow with a process-only environment setting:
+
+```powershell
+$env:AZURE_CORE_ENABLE_BROKER_ON_WINDOWS = 'false'
+az login --tenant koftwentytwooutlook.onmicrosoft.com --output none
+```
+
+Run this in a dedicated PowerShell process; it does not persist CLI settings or
+change tenant policy. Use the owner's browser with the enabled/unlocked
+[1Password extension](https://support.1password.com/save-use-passkeys/) for its
+stored passkey. Complete MFA personally. Do not export passkeys or repeat the
+blocked device-code flow. If browser authentication also fails, inspect its new
+error rather than assuming the passkey or tenant registration is at fault.
+
+## Verify the deployed resource
+
+Public Microsoft OpenID discovery on2026-10-11 resolves the supplied directory
+`koftwentytwooutlook.onmicrosoft.com` to tenant GUID
+`4ebeb0ad-5782-487a-a1b4-5080255774cf`. Its
+[discovery metadata](https://login.microsoftonline.com/koftwentytwooutlook.onmicrosoft.com/v2.0/.well-known/openid-configuration)
+returns issuer `https://login.microsoftonline.com/4ebeb0ad-5782-487a-a1b4-5080255774cf/v2.0`.
+This identifies the directory only; it does not establish the signing subscription's
+tenant, regional endpoint, active profile or verified publisher subject. The
+authenticated ARM readback above now confirms this directory is the signing
+subscription's actual tenant. The commands below remain the repeatable inspection
+procedure; recheck them if the deployed configuration changes.
+
+With an authorized interactive Azure session, inspect the actual tenant, regional
+account URI and profiles. The account/subscription below are owner-provided setup
+values; the returned resource must confirm them before configuration.
+
+```powershell
+$subscription = '8ef2479e-3346-4cba-93ad-101c6cd237a0'
+az account set --subscription $subscription
+$account = az account show --query '{subscription:id,tenant:tenantId,name:name}' -o json | ConvertFrom-Json
+$resourceId = "/subscriptions/$subscription/resourceGroups/rg-code-signing/providers/Microsoft.CodeSigning/codeSigningAccounts/kof22signing"
+$resource = az resource show --ids $resourceId --api-version 2025-10-13 -o json | ConvertFrom-Json
+$profiles = az rest --method get --url "https://management.azure.com$resourceId/certificateProfiles?api-version=2025-10-13" -o json | ConvertFrom-Json
+$resource | Select-Object name,location,@{Name='Endpoint';Expression={$_.properties.accountUri}}
+$profiles.value | Select-Object name,id,@{Name='Type';Expression={$_.properties.profileType}},@{Name='Status';Expression={$_.properties.status}}
+```
+
+Check every command's exit status. Confirm the tenant GUID from `account.tenant`,
+not the directory domain or subscription GUID. Select the actual Active PublicTrust
+profile; `releases` is expected, not assumed. Read its issued certificate's full
+`properties.certificates[].subjectName` and compare it with the profile's verified
+publisher in the portal. If the API has no issued certificate, inspect the profile
+and associated completed identity validation in the portal; do not invent a
+subject. Use `resource.properties.accountUri` as the signing endpoint. gclo's
+configured publisher name is reference evidence only; the new builder requires
+the full X.500 subject rather than just the publisher's display name.
+
+[Microsoft's account/profile schemas](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/codesigning/resource-manager/Microsoft.CodeSigning/CodeSigning/stable/2025-10-13)
+define these inspection fields.
+
+## Existing gclo signing reference
+
+Read-only release inspection on2026-10-11 confirms that
+[gclo v1.1.0](https://github.com/KofTwentyTwo/gclo/releases/tag/v1.1.0)
+ships a valid timestamped CLI signature. The archive matches its published
+SHA256SUMS (`46f02d89c9d8a459e5b02598f9791fa7aab5c16b09c254bc997f8f235a6a49e2`).
+Microsoft SignTool `verify /pa /all /v` on the extracted `gclo.exe` succeeds with
+one verified signature, zero warnings/errors. Its exact certificate subject is
+`CN=James Maes, O=James Maes, L=Chester, S=il, C=US`; the timestamp chain is
+Microsoft Public RSA Time Stamping Authority. Local reference evidence is retained
+in `artifacts/gclo-signing-reference/verify.log`; the application was not executed.
+
+This confirms the existing release recipe and shipped publisher, not the current
+Azure account/profile mapping or MarkdownViewr CI authorization. Recheck the
+actual deployed profile subject before using it here. gclo's client identity has
+its own repository trust; do not copy that client ID without an approved reuse
+and a separate exact MarkdownViewr federated credential/signer assignment.
+
+## Configure the CI identity and trust
+
+Inspect existing CI applications and their owners first. Reuse an approved suitable
+identity; otherwise create a repository-specific single-tenant Entra application
+and service principal named `MarkdownViewr.Windows release signing`. No client
+secret is needed. Record its application/client GUID and service-principal object
+GUID separately. Preserve all existing credentials.
+
+The repository OIDC customization readback on2026-10-11 is `use_default=true`,
+`use_immutable_subject=true`, with prefix
+`repo:KofTwentyTwo@47367449/MarkdownViewr.Windows@1413777106`. Recheck it before
+creating trust:
+
+```powershell
+gh api repos/KofTwentyTwo/MarkdownViewr.Windows/actions/oidc/customization/sub
+```
+
+In Entra → App registrations → the selected CI app → Certificates & secrets →
+Federated credentials, add the following exact credential after confirming the
+current prefix. Do not copy gclo's credential or broaden trust to pull requests.
+
+```json
+{
+  "name": "markdownviewr-release",
+  "issuer": "https://token.actions.githubusercontent.com",
+  "subject": "repo:KofTwentyTwo@47367449/MarkdownViewr.Windows@1413777106:environment:release",
+  "audiences": ["api://AzureADTokenExchange"]
+}
+```
+
+For CLI administration, save that JSON locally, then use
+`az ad app federated-credential create --id <application-object-id> --parameters <file>`.
+Inspect existing credentials before creating; retain any unrelated entry and do
+not overwrite a same-name credential whose fields differ.
+[Microsoft's immutable-subject guidance](https://learn.microsoft.com/en-us/entra/workload-id/workload-identities-github-immutable-subjects)
+explains the repository/owner ID components.
+
+Assign only the signing permission at the verified profile scope:
+
+```powershell
+az role assignment create --assignee-object-id <service-principal-object-id> --assignee-principal-type ServicePrincipal --role 'Artifact Signing Certificate Profile Signer' --scope <verified-profile-resource-id>
+```
+
+Read back the assignment. Owner/Contributor permissions do not provide signing
+rights. [Microsoft's role guidance](https://learn.microsoft.com/en-us/azure/artifact-signing/tutorial-assign-roles)
+supports profile-scoped signing access.
+
+## Configure and prove release signing
+
+The protected GitHub `release` environment permits intended `v*` tags. Set the
+verified values through `gh variable set NAME --repo KofTwentyTwo/MarkdownViewr.Windows
+--env release --body VALUE` for `AZURE_TENANT_ID`, `AZURE_CLIENT_ID`,
+`AZURE_SUBSCRIPTION_ID`, `ARTIFACT_SIGNING_ENDPOINT`, `ARTIFACT_SIGNING_ACCOUNT`,
+`ARTIFACT_SIGNING_PROFILE` and `ARTIFACT_SIGNING_SUBJECT` (full subject).
+
+The release caller now uses the reviewed standards v1.1.0 catalog builder;
+PRs #31, #39 and #41 provide its implementation and verified CI corrections.
+Current verified official pins are azure/login@v3.1.0 commit
+`a641126d1b8aa4d1fa005f4f92df94a3a4c4c906` and
+azure/artifact-signing-action@v2.0.0 commit
+`c7ab2a863ab5f9a846ddb8265964877ef296ee82`. Its Windows release job uses
+`id-token: write` and Azure CLI-backed credentials, SHA256 and RFC3161 timestamping.
+[The official signing README](https://github.com/Azure/artifact-signing-action)
+describes this OIDC integration.
+
+Follow [release-signing.md](release-signing.md) for the owned-file catalog and
+local SignTool requirements. A real representative signing run must verify the
+exact shipped executables, managed binaries and installers with
+`signtool verify /pa /all /v`, checking full publisher, trust and timestamp.
+Generate final checksums/feed metadata after signing and fail publication on any
+required signing/verification error. Active profile/configuration alone is not
+proof. No account recreation, new identity validation or private-key export is
+part of these actions.
diff --git a/docs/history/reader-source-session-2026-10-11.md b/docs/history/reader-source-session-2026-10-11.md
new file mode 100644
index 0000000..ae5bb39
--- /dev/null
+++ b/docs/history/reader-source-session-2026-10-11.md
@@ -0,0 +1,638 @@
+# Historical Reader and Source Session Notes
+
+Updated: 2026-10-11
+
+## Active work and authority
+
+Build the full Windows counterpart to Darin's markdownViewr using published AppKit
+0.1.0. Approved identity: MarkdownViewr / MarkdownViewr.Windows / markdownviewr-windows.
+Topic feat/windows-viewer, draft PR #3; PRODUCT.md remains the complete scope.
+Owner authorized signed/DCO commits, pushes, repository configuration and ticket updates.
+No merges, tags/releases or new Azure attempts. Human review acknowledgement remains
+required. Local desktop reservation is unanswered; hosted runner UI tests are authorized.
+
+## Confirmed WinUI clicked-content identity fix — 2026-10-11
+
+Signed dcddefb pushed. Focused source 38121148429/job 114415967219 fails
+at the added real browser assertion after repeat activation. The trace proves
+ItemClick dispatches TextBlock twice (initial and repeated clicks), refreshing=False,
+index=-1. Owned physical pointer is over the expected OutlineHeading:2. No reader
+geometry change follows the repeated click. Thus content/container mismatch,
+not source feedback or missing native event, explains the repeat-navigation bug.
+Evidence: artifacts/source-activation-boundary-38121148429.log.
+
+Attach the existing numeric DocumentHeading tag to the native TextBlock as well
+as its ListViewItem; ItemClick accepts the tagged FrameworkElement. No title
+lookup, arbitrary source command, extra state or changed scroll mapping.
+Keep keyboard SelectionChanged and the actual browser/source/wheel regression.
+Retain opted-in trace until original/full acceptance, then remove temporary probes.
+The focused original red case is retained. Supersede remaining dcddefb diagnostic
+CI with this confirmed fix; cancelled predecessor jobs are not acceptance proof.
+Require complete fixed-head native/published/stable/dev results before cleanup.
+
+## Activation boundary trace after physical reproduction — 2026-10-11
+
+016c745 focused source 38120650945/job 114414500506 still fails at the
+repeated last-heading alignment; owned physical down/up events appear in logs.
+This falsifies the explanation that only UIA invocation bypasses ItemClick.
+Do not change app logic again without observing the boundary. Add a trace only
+under the existing fixture input-trace opt-in: clicked native type, numeric
+heading identity and refresh guard. Record the owned pointer target and assert
+the actual browser last-heading glyph before the unchanged native source check.
+This separates missing activation, unexpected payload and reverse source feedback.
+No authored-content/path logs, delays or weakened assertions. Current full CI
+38120651378 remains observed until terminal before pushing another diagnostic.
+
+## Physical repeat-activation diagnostic — 2026-10-11
+
+Signed 2bf1d14 pushed. Focused source 38120152677/job 114413026121 still
+fails at the repeated last-heading invocation (line 461), after both actual
+middle-heading viewports pass. Native job 114413027224 also fails; build,
+coverage, format, scripts, security and PR gates pass. No claim of full acceptance.
+The shared ClickElement prefers UIA Invoke, whereas the new ListView behavior
+handles ItemClick. Ranked explanations: automation does not dispatch ItemClick;
+source feedback overwrites the jump; or unexpected clicked-item payload.
+
+Change one input: use the existing owned physical mouse helper for the repeated
+heading activation. Retain the initial UIA selection and all original source,
+browser and final physical-wheel assertions. No additional app change or delay.
+If physical activation succeeds, this distinguishes the activation path from
+source feedback; if it fails, retain the trace before another implementation change.
+Evidence: artifacts/source-reactivation-38120152677.log. Full suites remain required.
+
+## Repeated outline activation after actual bidirectional source proof — 2026-10-11
+
+Signed 22a3393 pushed. Source 38119623871/job 114411478222 advances past both actual
+middle-heading source/reader assertions. Bounded physical wheel input works and
+native source 2656.933 maps back to its reader heading. The failure is now line 461:
+clicking OutlineHeading:2 again does not jump back, since it is already selected
+and SelectionChanged does not fire. Keep the same original regression and bounds.
+Evidence: source-bounded-wheel-diagnostic-38119623871.log.
+
+The native ListView now enables ItemClick and repeats the same bounded numeric
+heading command on item activation. Existing SelectionChanged remains for keyboard
+selection navigation; repeated commands on a newly selected item are idempotent.
+No debounce/prefix/new state or renderer capability. The original source test
+already reproduces the repeat-activation bug before this fix; do not weaken it.
+22a3393 CI 38119624417 / native 114411480085 / installed 114411479783 and other
+producers remain observed until terminal before push; all full suites stay required.
+
+## Bounded native wheel steps after measured per-event cap — 2026-10-11
+
+Signed 05c4bc9 pushed. Source 38119175090/job 114410164596 reproduced a real input
+failure: one upward detent moves source 5310.933→5223.933 (87px) and reader 6264→6164.
+The subsequent 31.8-detent event moves only 580px, to 4643.933, leaving the middle
+heading offscreen. Native source-to-reader movement is now observed; the driver
+requested one oversized event. Retain source-wheel-diagnostic-38119175090.log.
+
+The single change sends at most 4 detents per event, measures settled real native
+offsets after each and bounds the approach to 12 events. Actual glyph correction
+and all original source/reader/wheel assertions remain unchanged. No app-scroll
+change. Current 05c4bc9 CI 38119175562/native 114410166891/installed 114410166667 and
+other producers remain observed until terminal before the next push.
+
+## Physical source-wheel driver after actual range diagnostics — 2026-10-11
+
+Signed 06a1213 pushed. Source 38118669938/job 114408682304 still fails: actual range
+min 0/max 7370, read-only False, value 5310.933 before; requested 2455.883 and after 2455.883.
+The middle glyph remains unavailable and no resulting source geometry frame appears.
+The UIA range accepts its scalar value but does not prove that the text viewport moved.
+Retain source-range-diagnostic-38118669938.log and original full glyph assertions.
+
+The single driver change now uses physical wheel input over the already verified owned
+source target. One upward detent measures actual native movement; proportional wheel
+input reaches the approximate text region, then actual glyph bounds adjust to 12px.
+No UIA scalar setter or application mirror positions the viewport. Every source/reader
+heading and final physical-wheel assertion remains. This also exercises the original
+user gesture directly. Keep temporary diagnostics until original/full acceptance passes.
+
+0f13849 published TRX confirms 48/49, zero skips, including actual zoom glyph/key/toolbar/
+reload and editor-list cases. All other checks pass; installed channels not reached.
+Current 06a1213 full CI 38118670343 (native 114408683591, installed 114408683491, core
+114408684077, format 114408683974) remains observed until terminal before next push.
+
+## Native zoom acceptance and source range probe — 2026-10-11
+
+Signed/DCO 0f13849 is pushed; CI 38118157164 native 114407185408 finished FAILURE:
+48/49, one failure/no skips. The actual zoom glyph/menu/toolbar/physical Ctrl+plus,
+minus/reset and reload case passes; both new editor tests pass. Source focus retains
+its heading, but the native scrollbar request does not reveal the middle heading.
+Isolated source 38118156844/job 114407184273 reproduces the same timeout. Retain logs
+at artifacts/zoom-scrollbar-full-ui-38118157164.log and source-scrollbar-diagnostic-
+38118156844.log. Build/core/format pass; installed 114407185287 remains observed until
+terminal before follow-up push. Current checkpoint and PR/issues reflect 0f13849.
+
+The single diagnostic change captures actual native scrollbar min/max/value/read-only,
+requested value and the resulting owned source geometry on timeout. Distinguish
+unsupported native range movement, inaccessible glyph geometry and a bad initial
+index-to-range estimate before replacing the driver. No app change or relaxed
+alignment assertion. Core 330/100%, zero-warning build, format and docs remain required.
+
+## Zoom implementation and real native source scrolling — 2026-10-11
+
+1c4d1ad / CI 38117431818 is terminal FAILURE: native/published 47/48, zero skips;
+installed channels not reached. Original post-focus last-heading alignment now
+passes. The test reaches line461 and fails after UIA text-range ScrollIntoView:
+no native ViewChanged/offset movement, with offscreen glyph bounds unavailable.
+Evidence: artifacts/source-caret-diagnostic-38117431818.log and published TRX in
+artifacts/source-caret-failed-installed-38117431818. This confirms caret positioning
+fixed the observed reset; it does not yet prove full synchronization. The regression
+now drives the source's actual native ScrollBar RangeValue, adjusts from actual
+visible glyph bounds and retains all middle/last reader/source/wheel assertions.
+
+A new standalone source-diagnostics workflow keeps this temporary feedback job
+separate from required CI. The required-job invariant correctly rejected adding
+an optional diagnostic job to ci.yml; its test and all production check names stay
+unchanged. Remove the temporary workflow/tagged logs after the original case passes.
+
+Per-window reference font zoom is implemented with native menu/compact toolbar,
+rounded reset percentage and Ctrl+plus/equal/minus/0 reading commands. Scale starts
+at 100%, uses 1.1 steps and 30–500% bounds; body/all headings/code font sizes scale
+with invariant values while line-height/theme JSON remain unchanged. Reload/theme
+navigation retains scale and existing viewport/collapse/find replay. Reference
+ThemeManager scales fonts, not the whole browser; no unsupported WinUI ZoomFactor.
+330 core tests and 100% measured lines pass at artifacts/reader-zoom-core. Zero-warning
+build, format, six-document lint, two-pass script analysis and all 55 required Pester
+boundary tests pass (artifacts/zoom-script-boundaries.xml). New hosted glyph/key/reload test added: 49 native/published and 48 per
+installed channel expected; actual zoom acceptance is pending. No local GUI run.
+
+Full PRODUCT remains active, including print #12, remaining zoom #13 acceptance,
+source/raw-heading audit, windows/recents/activation, full theme/render/link parity,
+standards inventory and actual signed final artifacts. Azure remains deferred.
+
+## Source caret alignment probe — 2026-10-11
+
+82898bd / CI 38117005710 isolated source job 114403773700 reproduced FAILURE
+in 18 seconds. Original timeout is now retained: source focus before=5310.933,
+last=5310.933; after physical pointer press, actual native offset resets to 0.
+The provider cannot retrieve the offscreen last-heading glyph. This rejects the
+hypothesis that GettingFocus captured an already-reset offset; deferred restoration
+ran too early to prevent later native caret work. Original full assertions stay intact.
+
+The single-variable probe positions a zero-length caret at the first visible native
+character before focus, using bounded binary search over real native character
+rectangles. Active find/nonempty selections remain independent. The previous snapshot-
+guarded viewport restoration remains. DEBUG-src-focus records the native caret index;
+remove probes/temporary CI job after actual original acceptance proves the fix.
+Full/native/installed producers on 82898bd remain observed until terminal before push.
+
+The enlarged 48-case suite's measured native failure duration is 178 seconds and
+published acceptance exceeded 180 seconds before producing TRX. Full published/
+installed UI suites receive a bounded 300 seconds (all cases/assertions unchanged).
+The process helper retains stdout/stderr after timed-out child termination before
+throwing; a 10-second termination bound still fails closed. Other command timeouts
+remain unchanged. A headless owned-child timeout probe checks retained evidence.
+
+## Tight native source diagnostics after editor acceptance
+
+f650e36 / CI 38116258625 native job 114401630861 finished FAILURE:
+47/48, one failure/no skips. Both new actual editor-menu/probe/order/cancel/removal
+tests passed; source focus preservation still fails at the post-focus last-heading
+glyph assertion. The timeout's extra rectangle read throws E_UNEXPECTED before
+printing logs, masking the original focus data. Retain native log at
+artifacts/editor-focus-ui-38116258625.log. Installed job 114401630683 finished
+FAILURE at its 180-second dotnet timeout, with no completed TRX or installed-channel
+proof. Retain logs/screenshots at artifacts/editor-focus-failed-installed-38116258625
+and artifacts/editor-focus-installed-38116258625.log. All producers are terminal;
+build/core/format, CodeQL, scripts, security and PR gates passed.
+
+The diagnostic fix prints owned logs/tree first, catches only failed diagnostic
+rectangle retrieval and rethrows the original timeout; no test outcome is relaxed.
+A temporary read-only Windows source-diagnostics job runs only the same exact native
+viewport case (15 seconds after build) and retains TRX. All required 48-test native/
+published and 47-test installed suites remain unchanged. No app-scroll change in
+this diagnostic increment; gather GettingFocus before/last offsets and actual glyph
+bounds before another hypothesis. Remove DEBUG-src-focus probes/job when resolved.
+The diagnosing-bugs workflow is applied; hosted setup dominates wall time because
+local GUI input is unavailable. Core loop remains 312 tests/100% measured lines.
+
+Reference backlog now has print issue #12 (native theme/background/image/zoom/width/
+border/padding, success/cancel/error restoration and actual output) and zoom #13
+(1.1 steps, 30–500%, Windows Ctrl+plus/minus/0, actual scaling/window state). Full
+PRODUCT scope remains active. No local GUI/Azure/merge/tag/release or false review.
+
+## Current named-editor and source-focus increment — 2026-10-11
+
+2dc509d / CI 38115411266 is terminal FAILURE: native/published 45/46,
+one failure/no skips; installed channels not reached. Build/core/format,
+CodeQL 38115411093, scripts 38115410579, security 38115411111 and PR gates
+38115411139 passed. Logs and published TRX retained at
+artifacts/source-sync-focus-failed-installed-38115411266 and source-sync-focus
+native/installed logs. New glyph assertion proves the UIA range request does not
+align native source. Numeric logs show entering SourceText resets offset to 0
+from target 5310.9 before pointer press. The source now restores its pre-focus
+viewport asynchronously with snapshot/closed/find guards. The test also verifies
+last-heading alignment after physical focus before requesting middle alignment;
+actual glyph bounds are retained on failure. No acceptance weakening or GUI input.
+
+Named editor lists now persist stable IDs/order, bounded names/.exe paths and
+per-editor file/folder choices. Legacy paths migrate once; the compatible path
+mirrors the first choice and clears on last removal. The native manager edits a
+copied list with add/remove/move/save/cancel; one editor is direct, several use a
+saved-order submenu. Each launch revalidates the selected identity and receives
+one literal file or parent-folder argument. No dependencies or shell interpolation.
+312 core tests/100% measured lines pass at artifacts/editor-catalog-core,
+including stable migration, corrupt/duplicate/capped choices, trimmed AppKit
+save/load/removal and literal Unicode/punctuation/UNC/root folder arguments.
+Two new hosted editor tests await proof: actual selected probe file/folder arguments,
+persisted reordering, cancel and final removal/native disabled command. Expected
+48 native/published and 47 per installed channel. Build zero warnings passes;
+final format/docs/hook gates and signed commit/push are next.
+
+Full PRODUCT.md remains active; no local GUI/Azure/merge/tag/release or fabricated
+human acknowledgement. Published AppKit 0.1.0 retained. Source raw-heading audit,
+new acceptance, print, windows/recents/activation, broader theme/rendering/link
+parity, standards inventory and actual signed stable/dev final bytes remain.
+
+## Current source synchronization increment — 2026-10-11
+
+Previous pushed b0f3b8638f16d75e4dce5dc6f2cb585fb5214927 is fully verified:
+CI 38113042618, CodeQL 38113042570, scripts 38113041887, security 38113042545 and
+PR gates 38113042454 SUCCESS. Native job 114392386224 and installed job
+114392386003 succeeded; retained TRX proves published 44/44 and stable/dev 43/43,
+zero failures/skips, at artifacts/source-anchors-verified-installed-38113042618.
+Fixtures remain synthetic/unsigned; all prior producers are terminal.
+
+The current increment implements literal nested source folding and bidirectional
+heading-anchor scroll mapping. Canonical snapshots remain immutable; native CR
+and folded offsets retain exact find selections. Browser geometry is bounded,
+validated and current-page/query guarded; feedback holds preserve explicit find
+viewports. Microsoft TextBoxView content coordinates do not receive a duplicate
+scroll offset. No new dependency or authored scripts/messages/host objects.
+300 core tests/100% measured lines pass at artifacts/source-sync-core. Two new
+hosted tests assert actual native/browser heading bounds, physical source scrolling
+and nested fold/find/reload restoration: 46 native/published and 45 per installed
+channel expected, not yet verified. No local desktop input occurred.
+
+Next: commit/push this reviewed increment, observe its exact producer runs, retain
+actual TRX/logs and address failures. Keep #10 open until acceptance and raw-heading
+reference audit pass. Full PRODUCT scope remains: broader editor/theme/rendering/
+link parity, printing, windows/recents/activation, standards inventory/current-head
+human review and exact signed stable/dev artifacts. Published AppKit 0.1.0 remains;
+no Azure attempt, merge/tag/release or fabricated human acknowledgement.
+
+## Verified reader and editable themes
+
+77dd04da96b75938a1c1d38c8bebe4851c11a011 CI 38102249889 SUCCESS: build/test,
+format, native/UI 26/26, published 26/26, installed stable/dev 25/25 each, no skips.
+Four fixture byte gates verified 536 files in both payloads; AppKit probes applied and
+restarted within both channels. Fixtures are synthetic and unsigned, not production
+signing evidence. CodeQL/security passed. Artifacts: verified-reader-38102249889.
+
+Reader provides picker/Ctrl+O/literal launch paths, sanitized GFM, bounded passive
+local images, debounced saves/replacement/deletion recovery and relative scroll.
+Native status declaration before WebView2 solved embedded-provider traversal; exact
+missing/recovery assertions retained. Initial window fits the monitor's work area.
+
+20 original JSON themes retain Darin's MIT notice. Selection persists separately from
+AppKit shell themes; actual dark/light paint checked. 30ca0943c09a8662794c2d400f1b5c49de426942
+CI 38102867556 fully SUCCESS, including 29 native/UI tests, editable colors/code font/CSS,
+validation/restoration and both installed channels. CodeQL/scripts/security passed.
+Later size-17 edit also passed among 29/30 UI tests. Theme import/export/delete and
+additional font preferences still need a full reference-parity audit.
+
+## Frontmatter and outstanding diagnostic
+
+3b6ebf83d0d88729887ce7678b0e3bf5cbe85989 implements hidden default, escaped line-based
+metadata and sanitized Markdown modes; saved native choices, CRLF/delimiter fidelity.
+149 core tests/100% coverage. CI 38103609174 failed accessible-table lookup, 29/30 UI;
+CodeQL/security/scripts passed. a141929820694976ab5ab13b2a9a86e687284bf4 adds semantic
+caption and row headers. CI 38104015508 now passes table presence but fails table
+removal after Markdown selection, still 29/30. Installed producer finished FAILURE at the same
+mode-switch assertion; CodeQL 38104015459/scripts/security passed. No run restarted.
+New diagnostic keeps the exact assertion and records fixture settings/log/UIA tree.
+
+Issue #5 mitigation is verified: scripts 38104585530 captured InstalledUpdates.Tests.ps1 /
+CommandInfo.get_Parameters -> UseCorrectCasing.AnalyzeScript, matching upstream #1708.
+Signed ce9afc62378a1275dc723ee444066bd2c732cef5 isolates casing, then checks all other
+unchanged rules. Both negative fixtures, 13-file baseline and bounded 20-case probe
+pass locally. Actual 443b492 scripts 38104988748 SUCCESS: all 13 files and 55 Pester
+tests, no failures/skips; JavaScript passed. No suppression, retry or version change.
+PR #3 can close #5 on reviewed merge; upstream itself remains upstream.
+
+## Outline milestone being prepared
+
+Pushed outline head: 5c3988e012b46aff2959eabd16c6de2b7381ab04. Authoritative CI
+38104585881 is terminal FAILURE: 31/33 native/UI pass, including actual heading jumps,
+independent nested collapse and retained theme/reload state. Depth choices pass; physical
+resize fails. Frontmatter still fails because Markdown click never dispatched: settings
+remain Metadata, only one reload logged, submenu remains open. CodeQL 38104585849,
+security and PR gates passed; scripts 38104585530 captured the race above.
+
+Follow-up adds an explicit Thumb hit-test template. Physical mouse helper moves directly
+to the requested control, verifies that exact target or its descendant, then clicks;
+an animated path across parent menu rows can close a submenu before the click. Depth
+popup is explicitly collapsed before real divider drag and hit identity checked.
+Settings/table/resize assertions remain; no local GUI input. Hosted verification needed.
+
+Issue #9: sanitized heading labels, GFM fragment mapping, generated numeric identities,
+stack-free section construction, duplicate/nested headings and passive markup.
+Native persistent sidebar/depth/drag width and section operations compile. Fixed host
+scripts retain independent nested collapse across matching-heading reload/theme changes.
+161 core tests pass with 100% line coverage; zero-warning build. Native resize/jump/
+collapse/state tests added, not run locally. Observe the next exact hosted handles.
+
+## Latest input acceptance
+
+443b4928eed46641c759012e741a27723e943826 is pushed. CodeQL 38104989139,
+security 38104989109, scripts 38104988748 and PR gates 38104989102 SUCCESS;
+CI 38104989141 build/format pass, native/UI 31/33. Exact-target pointer verification
+passes but Markdown choice stays Metadata, and physical resize stays unchanged.
+Installed producer is still being observed; no cancel/restart. Captured UI log:
+artifacts/pointer-ui-38104989141.log. Fixture screenshot from the prior run shows
+Markdown hover while Metadata remains checked, consistent with input not dispatched.
+
+New follow-up holds mouse-down until the native UI processes it before mouse-up;
+real divider drag separately settles start/down/move/up. Outcome assertions and
+10-second limits unchanged. Resize failures now capture saved width/rectangle/tree.
+Zero-warning build and format pass; no local input. Push after existing producers end,
+then observe its exact new handles. Full application scope remains active.
+
+## Next and remaining scope
+
+Finish frontmatter mode-switch diagnosis and hosted outline acceptance; update #4/#6
+scoped acceptance and #1/#5/#7/#8/#9 accurately. Continue source pane/synchronization,
+find/vim keys, external editor, print state/options, multiple windows/recents and
+Windows file associations. Audit syntax-highlighting/local-link/theme parity, standards
+inventory and reviewed AppKit API adoption. Verify real signed stable/dev final bytes
+before production publication; active Azure profiles do not prove successful signing.
+
+Pinned reference: 6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021 under
+AppKit/artifacts/markdownviewr-reference. Preserve original MIT attribution on adaptations.
+
+## Literal source and precise native event follow-up
+
+Latest prior head d59dba2c96d126730f491720fd548c43c30dd97b: CI 38105483808
+terminal FAILURE (31/33 loose native/UI); CodeQL 38105483850 and scripts
+38105483489 SUCCESS. Mouse down/up settling did not solve the two input cases.
+Retained log: artifacts/pointer-states-ui-38105483808.log. No local GUI input.
+
+Issue #10 records the full source/sync/find/keys acceptance. The next implementation
+adds a native read-only literal source pane (including hidden frontmatter), persisted
+visibility/preferred width, both-side width bounds and the same committed reload snapshot.
+This does not complete synchronized headings/scroll/collapse, paired find or vim keys.
+The browser's scripts/messages/host objects remain disabled. New actual UI test checks
+literal hostile source, read-only state, saved settings, reload and hiding.
+166 core tests/100% line coverage, zero-warning build and formatting pass locally.
+Hosted acceptance and physical source resize remain required.
+
+Fixture-only MARKDOWNVIEWR_INPUT_TRACE=1 records native pressed/released/capture-lost,
+outline drag events and frontmatter clicks without changing routing or logging content.
+This tests whether WinUI receives the exact physical events; no third timing workaround
+or weakened outcome assertion. The next exact hosted handles must be observed.
+
+## Native events captured and movement correction
+
+9ff820f4773c54573c1d24028ba489328bf2e9c6 CI 38106466328 loose native/UI
+finished 31/34: two prior input failures plus SourceText accessibility lookup.
+Build/format/scripts/security/CodeQL passed; installed producer now terminal FAILURE.
+Retained exact log: artifacts/native-event-source-ui-38106466328.log.
+
+Trace shows Markdown press handled and release unhandled with no click. Outline
+DragStarted and DragCompleted occur, but no DragDelta. The pinned FlaUI 5.0.0
+Mouse.Position/MoveTo implementation uses SetCursorPos, while Down/Up use SendInput.
+Follow-up injects a real absolute MOUSEEVENTF_MOVE through the existing FlaUI Win32
+API, with virtual-desktop bounds/normalization and failure checks. Button states,
+exact target checks, 70-pixel resize and all saved-mode/width assertions remain.
+Entered/exited/outline-moved traces will distinguish the next delivery path.
+
+Declare native source controls before WebView2 while retaining Grid.Column positions,
+as the earlier verified StatusText accessibility fix did. Source test now includes a
+real 70-pixel source-divider drag; normalize only native line-ending presentation.
+Source/outline resize and frontmatter remain unverified until exact hosted results.
+All 9ff820f producers are now terminal; the follow-up may be pushed without cancelling them.
+Native paired-find research retained in artifacts/native-find-notes.md; full scope active.
+
+## Verified native input/source and paired find increment
+
+4bf0b81b85e99a9f583c5e60b7276e49b423b114 CI 38106991467 completed SUCCESS.
+Exact TRX: 34/34 loose native/UI, 34/34 published, stable/dev 33/33 each; no skips.
+Real frontmatter switching, outline resize and literal-source/read-only/reload/physical
+resize all pass. CodeQL 38106991641/scripts 38106991033/security 38106991494 passed.
+Four payload gates verified 536 files; stable 0.1→0.4 and dev beta.1→beta.2 probes
+called AppKit apply/restarted within their channels. Retained artifacts:
+artifacts/native-move-installed-38106991467, plus native/installed verified job logs.
+These synthetic unsigned fixtures remain distinct from production signing proof.
+
+Next increment implements paired find: pure bounded literal source positions/counts,
+native WebView2.Find with suppressed default dialog, Ctrl+F toolbar, wrapping controls,
+Enter/Shift+Enter/Escape, actual source selection and query/page lifecycle guards.
+Search temporarily reveals sections; closing restores prior/explicit choices. Browser
+feature accelerators are disabled so the host owns its commands; scripts/messages/host
+objects stay disabled. No new dependencies. 179 core tests pass with 100% lines; build
+zero warnings and format pass. New hosted tests exercise physical Ctrl+F typing from
+browser focus, source provider ranges, native viewport wrap, collapse restoration,
+literal hostile-looking terms and reload/empty counts. Physical local-fragment reveal
+also added. No local UI input. Observe exact new hosted handles after signed push.
+
+Source heading/scroll/collapse synchronization and vim keys remain issue #10 scope.
+Full PRODUCT.md, editor/print/multiwindow/activation/reference/standards/signing work
+remain active. Do not claim new find acceptance or completed port before its evidence.
+
+## Find shortcut and fragment acceptance correction
+
+4f4280921cfc87551843a03e4067e6dfe7456ceb CI 38108596329 is terminal FAILURE:
+36/38 native/UI and published tests pass. Installed channels were not reached.
+Build/test, format, CodeQL 38108596346, scripts 38108595778, security 38108596376
+and PR gates pass. Source selections, literal queries, real viewport wrap, reload
+and temporary section restoration pass. Ctrl+F from browser focus did not open find;
+fragment testing selected the visible sidebar label instead of its hidden browser
+heading. Retained logs: artifacts/paired-find-ui-38108596329.log and
+artifacts/paired-find-installed-38108596329.log.
+
+Follow-up moves Ctrl+F to the always-loaded root accelerator and keeps the physical
+browser-focus key test. Fragment lookup now requires the generated browser heading
+ID and name; physical link click/reveal assertions remain. Also correct one ADR
+heading's Markdown spacing. Neither correction is verified until hosted acceptance.
+Full PRODUCT.md scope remains active; no local desktop input or release publication.
+
+## Owned browser keyboard integration
+
+7d7c712c6365fd6a036c572de3b51b49c6daa1ea CI 38109196556 is terminal FAILURE:
+36/38 native/UI and published tests; installed channels not reached. Ctrl+F still
+never opens find, despite a loaded root accelerator. Fragment collapse is now
+correctly observed, but pointer hit is not the exact link/text child. Keep those
+outcome assertions and retain owned-window screenshot, UIA, hit/focus diagnostics.
+
+The follow-up installs WH_GETMESSAGE only on the current app UI thread, requires
+the active owned window/child and Ctrl without Shift/Alt/Windows, and consumes
+only that find command before browser dispatch. It queues the existing OpenFind,
+forwards every other message, and removes the callback on window closure. There
+is no global hook, browser bridge or search/document text logging. Host keyboard
+acceptance remains pending. Exact logs: artifacts/window-find-ui-38109196556.log
+and artifacts/window-find-installed-38109196556.log.
+
+Separate local editor work is tracked by issue #11: literal ProcessStartInfo
+ArgumentList, persisted executable selection and native controls. Its 195 core
+tests/100% lines pass; that work is not included in this keyboard correction.
+
+## Configured editor increment prepared locally
+
+Issue #11 tracks editor launch and the broader reference list/folder parity audit.
+The local increment adds a sanitized persisted executable path, native configure
+Save/Cancel and open commands, missing-editor/document status, and one literal
+ProcessStartInfo.ArgumentList value with UseShellExecute=false. No arguments or
+source content determine executable selection; operational logs omit paths/content.
+195 core tests pass with 100% measured lines; final native build has zero warnings
+and formatting passes. Three new hosted tests use the existing test-only UpdateProbe
+in an environment-selected capture mode; it never reads document contents. They
+verify actual process arguments/working directory, saved configuration, invalid
+selection/cancel and an editor removed after selection. No local GUI input occurred.
+
+This editor work remains separate from pushed keyboard head 2292603 until its
+live CI 38109719180 ends. CodeQL 38109719207 remains under observation;
+scripts 38109718804, security 38109719182 and PR gates 38109719194 passed.
+Keyboard/fragment and editor hosted acceptance remain unverified; full scope active.
+
+## Browser link provider correction
+
+2292603569d5a78b214933e185842f6cf233010f native/UI job 114382576572
+finished 37/38: physical Ctrl+F from browser focus, actual paired source selections,
+wraparound, viewport navigation and reload/collapse cases pass. Fragment diagnostics
+show pointer (311,128) inside the exact link bounds (266,119,91,19), while UIA
+ElementFromPoint returns owned DocumentView rather than its composed hyperlink.
+Retained log: artifacts/thread-find-ui-38109719180.log. Installed producer still
+requires observation before claiming channel acceptance.
+
+The fixture now requires the pointer inside that exact link rectangle and the hit
+provider to be the owned DocumentView or exact link/text. It retains the physical
+Down/Up click, hidden generated-heading lookup and revealed heading/body assertions.
+Those actual navigation outcomes must pass; this does not substitute bounds or
+provider identity for successful link activation. No local GUI input occurred.
+
+Local editor increment signed as 574b57432a11b04d67085cbb0203b757ea85b1f4,
+not pushed while the existing producer is live. 195 core tests/100% line coverage,
+zero-warning build/format/docs/hooks pass. Headless capture-fixture self-check
+preserves one literal Unicode/metacharacter argument; native launch/UI acceptance
+still requires the prepared three hosted tests. Full PRODUCT.md scope remains.
+
+## Same-document fragment event correction
+
+9edd982 native job 114383828733 in CI 38110140930 completed 40/41:
+all configured-editor launch/validation/missing-file tests and paired-find tests
+pass; physical fragment click does not reveal the hidden heading. Microsoft's
+navigation contract says same-document fragments do not raise NavigationStarting.
+Use SourceChanged for those events and a pure exact-document/query-free/in-range
+generated-heading policy. Core now passes 206 tests/100% lines. Authored scripts,
+messages and host objects stay disabled; fragments select only bounded heading reveals.
+
+After a valid reveal, remove only this document's fragment using guarded host
+history.replaceState so clicking the same link after recollapse can reveal again.
+The physical test repeats collapse/link/reveal and retains owned point/bounds checks
+and actual heading/body outcomes. Hosted acceptance remains required. Retained log:
+artifacts/editor-find-ui-38110140930.log. Existing installed producer is still
+being observed; no new push supersedes a live producer. Full product scope active.
+
+## Vim increment prepared after fragment correction
+
+Pushed fragment-event head 5a9af6328f490eda4c67d1ab6aa58a161bab46a5:
+CI 38110726381 native/UI job 114385547259 SUCCESS, 41 tests. This includes
+same-fragment reveal after recollapse and all configured-editor/paired-find cases.
+Build/format, CodeQL 38110726336, scripts 38110725744, security 38110726260
+and PR gates 38110726369 passed. Installed producer 114385547073 now SUCCESS;
+retained TRX proves published 41/41 and stable/dev 40/40 each, zero skips. Four
+payload gates verify 536 files per payload. Evidence is retained in
+artifacts/fragment-installed-verified-38110726381 and verified job logs; fixtures
+remain synthetic/unsigned and do not prove production signing. Prior 9edd982 is terminal
+40/41 native/published; installed channels were not reached.
+
+Local next increment implements j/k, Ctrl+d/u, gg/G, ]]/[[, slash, n/N and Escape;
+Windows Ctrl+F owns native find and Ctrl+B reverse-page remains. Core now passes
+239 tests/100% lines. Prefixes use injected monotonic milliseconds, expire after
+500 ms and reject held-key imitation; lifecycle resets and focus/Alt/Windows/Shift
+controls preserve native typing. The existing owned-thread adapter translates only
+reading keys using the actual layout without mutating dead-key state, sends bounded
+enums and rechecks focus on queued dispatch. No authored script/message bridge.
+Three physical-key tests measure real browser viewport/heading/find behavior and
+query typing; browser scroll provider lookup is now scoped inside DocumentView so
+source scrolling cannot satisfy browser assertions. Hosted acceptance is pending.
+
+No local GUI input, merge/tag/release or Azure attempt. Full PRODUCT.md remains;
+source heading/scroll/collapse sync, broader editor/reference/theme/rendering/link
+parity, print, windows/activation/recents, standards inventory/review and production
+signed stable/dev final bytes remain. Preserve Darin's MIT navigation attribution.
+
+## Vim producer focus evidence and physical fixture correction
+
+Current dfc41a7 / CI 38111842026 native job 114388847556 finished FAILURE:
+41/44 pass, zero skips. All existing tests passed; the three new vim cases failed
+before their first actual reading command. Opt-in native focus logs report an
+empty WinUI focused element or ToggleSection:Button while UIA reports a Pane.
+UIA DocumentView.Focus alone did not establish WinUI reading focus. Exact native
+log retained at artifacts/vim-ui-38111842026.log. Build/format, CodeQL, scripts,
+security and PR gates passed. Installed producer 114388847436 now terminal
+FAILURE; retain its log at artifacts/vim-installed-38111842026.log.
+
+The fixture correction performs real MOVE/Down/Up inside the exact owned browser
+bounds/provider before virtual-key sequences. All actual viewport, generated
+heading, hidden descendant, paired find and native query-typing assertions remain.
+No app focus guard is widened, no outcome is substituted and no local desktop
+input occurs. The previous producer is terminal before the next push.
+Full PRODUCT.md scope and deferred production signing remain unchanged.
+
+## Source provenance foundation after native vim acceptance
+
+6bf125d / CI 38112298176 native job 114390204742 now SUCCESS: 44/44,
+zero failures/skips, actual physical reading clicks/keys and viewport/heading/find
+outcomes. Duration 2m23s. Build/format, CodeQL 38112298279, scripts 38112297896,
+security 38112298300 and PR gates 38112298282 passed. Exact native log retained
+at artifacts/vim-focus-ui-38112298176.log; installed job 114390204514 is still
+observed before any subsequent push. Previous dfc41a7 published suite timed out
+at 180 seconds before final TRX; installed channels were not reached.
+
+The next local increment maps DocumentOutline.SourceHeadings to original UTF-16
+source ranges from Markdig AST headings and AngleSharp raw HTML tokens. It handles
+Setext, fences, raw tags in quotes/lists/inline text, duplicate labels, native
+newlines, Unicode and frontmatter. A fresh internal marker is allowed only during
+mapped sanitation and stripped before output; authored markers/IDs stay denied.
+Raw line lookup is indexed rather than rescanning all lines for each heading.
+254 core tests/100% measured lines and zero-warning build pass. The original
+snapshot and public renderer policy remain unchanged. Full scroll/heading/collapse
+source UI remains unimplemented, not replaced by this foundation. No GUI input,
+Azure attempt, merge/tag/release or claim of production signing.
+
+## Verified vim channels and indexed source line ends
+
+6bf125d / CI 38112298176 is fully SUCCESS. Retained TRX proves native/published
+44/44 and installed stable/dev 43/43 each, zero failures/skips. Evidence retained
+in artifacts/vim-verified-installed-38112298176, native and installed job logs.
+Four payload gates verify 536 files per payload; update probes apply/restart both
+channels. Fixtures remain synthetic/unsigned and do not prove production signing.
+All exact prior producers are terminal before this source increment's push.
+
+Local signed source-provenance a0d8fe7 has a further tested indexed-line-end fix:
+255 core tests/100% lines and zero-warning build/format pass. A 300-heading raw
+single-line regression verifies distinct offsets with one shared line end. Global
+line ends are indexed once; per-heading lookup is logarithmic. This avoids a
+quadratic full-remainder scan for adversarial long raw HTML lines. The source
+snapshot remains immutable; no new capability/dependency is introduced. Update
+PRODUCT/TODO with actual vim proof; source synchronization UI stays pending and
+full scope remains active. No local GUI input, Azure attempt, merge/tag/release.
+
+## Current native newline failure and correction
+
+ddb98ac / CI 38114492408 native job 114396569276 finished FAILURE: 42/46,
+zero skips. Existing paired source selections shift by two characters after two
+line breaks; actual selections are pha** and *[x] followed by CR. WinUI's text
+provider uses one CR per line break, not CRLF. The new model now normalizes display
+to CR, subtracts only original CRLF extra characters and retains canonical source
+positions. This also corrects heading geometry indices. The fold fixture compares
+literal Setext text after newline normalization; all hide/reveal/find/reload and
+actual viewport/physical-wheel assertions remain. Exact native log retained at
+artifacts/source-sync-ui-38114492408.log. Build/core/format, CodeQL, scripts,
+security and PR gates passed; installed producer is still observed before a push.
+No local desktop input or weakening of coverage/selection/viewport checks.
+
+## Native CR acceptance and remaining provider scroll
+
+90b5406 / CI 38114958970 native job 114397920477 finished FAILURE: 45/46,
+zero skips. Exact source find selections, nested fold/find/reload restoration and
+reader-to-source heading alignment now pass. Only the source-to-reader assertion
+after an unfocused native ITextRange.ScrollIntoView fails; the log reports no new
+source geometry/event after that request. Evidence retained at
+artifacts/source-sync-cr-ui-38114958970.log. The fixture now physically focuses
+the owned SourceText and verifies its actual middle-heading glyph alignment
+before requiring browser alignment. Original viewport bounds and physical wheel
+assertions remain; numeric diagnostics also include source offset changes and
+previous offsets. This is not yet verified. Observe installed producer
+114397920229 before any next push. No local GUI input or Azure attempt.
diff --git a/docs/images/reading-light.png b/docs/images/reading-light.png
new file mode 100644
index 0000000..368a7ea
Binary files /dev/null and b/docs/images/reading-light.png differ
diff --git a/docs/images/source-dark.png b/docs/images/source-dark.png
new file mode 100644
index 0000000..8b9b30a
Binary files /dev/null and b/docs/images/source-dark.png differ
diff --git a/docs/reference-fidelity-audit.md b/docs/reference-fidelity-audit.md
new file mode 100644
index 0000000..862e86d
--- /dev/null
+++ b/docs/reference-fidelity-audit.md
@@ -0,0 +1,183 @@
+# Reference fidelity audit
+
+Reference: [Darin Kelkhoff’s markdownViewr](https://github.com/darinkelkhoff/markdownViewr/tree/6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021).
+This records evidence and compatibility boundaries; it does not certify release readiness.
+
+## Rendering and CSS
+
+The upstream `Resources/template.html` and `CSSHelpView.swift` were retrieved
+by immutable Git blob IDs and verified against their Git hashes. Previous cached
+copies differ only in newline/BOM representation. Verified template blob: `4af334740dc345ad1292e3afac06bc9c12020a8b`;
+CSS-help blob: `9b85b1fac8aca3e8542375b2420a6e0a0bbdbadc`. The screen-CSS declaration audit
+retains `artifacts/pinned-css-audit.json`: all 47 shared selectors have matching
+upstream declarations, accounting for later rules that override individual properties.
+The Windows task-checkbox rule is an additional GFM adaptation.
+
+`#content` remains the scroll host; `#content-inner` remains the document body.
+Original palette/font variable names remain available in all 20 themes. Theme/global
+CSS and reading-width overrides cascade separately. `DocumentStylesTests` checks
+actual parsed declarations, containers, passive classes and print isolation;
+those checks do not prove every browser’s painted layout.
+
+## Native Windows panes
+
+Contents, source and dividers are native WinUI controls. Upstream `#toc`,
+`#raw-source`, `.raw-h`, `.raw-ellipsis` and browser-resizer CSS selectors do not
+style these controls. Document CSS styles the rendered reader; source colors/fonts
+come from the document palette and Windows light/dark/high-contrast handling.
+Do not advertise arbitrary upstream pane-CSS compatibility.
+
+## Heading, fold and find evidence
+
+Parser identities retain original UTF-16 offsets through frontmatter, Setext,
+raw multiline/same-line HTML and fenced pseudo-headings. A reproduced multiline
+header-fold defect is fixed in `bd3d72a`; 589 core tests and 100% measured lines pass.
+Its focused hosted suite passes 21/21 and full native 99/99, zero skips, including actual raw-heading jumps,
+literal folds, paired find/cancel and watched reload. That head’s published suite timed out after two initial print-fixture failures;
+installed lifecycle acceptance was not reached. The next pushed53755ab passes
+focused21/21 and native99/99; its installed job remains live at this observation.
+
+## Remaining release evidence
+
+Complete current distributed acceptance, actual Default Apps/Explorer selection,
+concurrent stable/dev isolation and owner design review. Retain real screenshots
+and print/PDF output. Final signing, genuine maintainer review and publication
+remain required; fixtures and CSS comparisons do not replace them.
+
+## Owner-provided Mac design reference
+
+Eight screenshots clarify the General/Editors/Themes/Markdown/Printing grouping,
+aligned settings values, short explanations, palette swatches and Enabled/default
+choices. Verified Windows gaps are tracked in issue #21: effective default-viewer
+status in General, configurable Contents wrapping/depth markers, clearer theme
+management/default semantics and a dedicated Printing page. Preserve the owner’s
+Windows toolbar/default-pane choices. Private screenshots and document contents
+are not reproduced here; this comparison does not certify the redesign.
+
+A valid multiline raw heading within a Markdown paragraph exposed a separate
+source-fold defect. Actual inline parser nodes now retain the complete header;
+592 core tests pass with100% measured line coverage. The existing runtime fixture
+now exercises this variant, with fresh hosted execution still required.
+
+## Installed registration and coexistence evidence
+
+Exact53755ab / CI38182128299 passes native/published99/99 and installed
+stable/dev98/98 each, zero failures/skips. Actual registration readbacks verify
+five extensions before/after each real AppKit update and owned removal with
+existing defaults preserved. Separate concurrent stable/dev windows/profiles,
+isolated updates and stable uninstall preserving the live dev edition pass.
+Retain the actual TRXs and coexisting-channels.json under
+artifacts/current-installed-evidence-38182128299. The fixtures are unsigned and
+do not establish OS chooser/Explorer interaction or production signature trust.
+
+## Current native regression findings
+
+Exactb5e519e focused19/22 and native98/100 fail, zero skips; the new General/
+Contents options case passes. A line-start closing raw tag is a separate Markdig
+HTML block; a reproduced correction now retains complete inline title syntax
+across consecutive blocks.598 core tests pass with100% measured line coverage.
+A tooltip appeared during the later Contents click; interception was not proved
+and placement changes did not resolve the failure. Local trim-only tips retain
+the intended full-title UX. Exact picker1148/Edit exists in owned enumeration despite
+the provider lookup failure; local acceptance uses that same owned identity.
+Retain current-focused-b5e519e.log/current-native-b5e519e.log and focused TRX/
+Settings screenshot bundle. Fresh hosted runtime remains required.
+
+Printing now has a locally prepared native Settings page sharing the existing
+output editor and checked saved defaults. Apply/Restore/closing and concurrent
+sibling draft preservation have compiled actual native cases, not execution
+proof. Full owner design acceptance and production signing remain outstanding.
+
+Exactb5e519e distributed job is now terminal: published98/100, zero skips, with
+the same raw-inline fold and physical source-click/alignment failures; installed
+lifecycle phase not reached. Retain its actual published TRX under
+artifacts/current-installed-evidence-38184378762. Signed localec78b50/7fa9f77
+require fresh exact-head native/distributed acceptance after the next push.
+
+## Theme manager and current acceptance
+
+The pinned Mac Default checkbox writes ThemeManager.activeThemeName; its windows
+can keep their own current selection. Windows continues its existing shared saved
+DocumentTheme contract, applying committed choices to open readers and new
+windows. The native manager now makes that behavior explicit through a default
+radio control, five palette previews and textual state labels. No second saved
+preference or silent migration is introduced. Actual native palette-pixel/default/
+save/reopen acceptance is compiled and pending, including a Settings screenshot.
+
+Exactb2ecc8c focused23/24 and native101/102 fail, zero skips; only physical
+source/reader alignment fails. Both Printing cases, raw-inline folding, picker
+cancellation and Contents presentation pass in those completed suites. Published
+acceptance exceeds the unchanged600-second bound with no final TRX; installed
+lifecycle is not reached. Actual logs/artifacts are retained. Closing all fixture-
+owned windows before FlaUI's unchanged close/kill fallback addresses repeated
+five-second teardown waits; fresh whole-run evidence is required.
+
+The remaining repeated-activation candidate restores the trusted DocumentHeading
+Tag on the new Contents content Grid. ItemClick identifies its clicked native
+FrameworkElement; an already selected row produces no SelectionChanged event.
+The unchanged actual physical source/Contents regression must verify this on the
+next head. Pointer diagnostics are client coordinates, not screen-space bounds;
+the earlier direct coordinate/tooltip-interception inference was not established.
+
+## Exact current native proof and placement finding
+
+Exact9d5c0d1 / CI38188145397 focused26/26 and native106/106 pass, zero skips.
+Actual repeat-click/source geometry, palette pixels/default/save/reopen, future
+schema export, trimmed tooltip/physical activation, Printing and raw-inline cases
+pass. Retain actual TRX/screenshots under reader-regressions-38188145397 and both
+current native/focused logs. Current distributed acceptance remains live.
+
+Actual Settings screenshots reveal the window extends beyond the monitor despite
+its bounded size. Local FitWindow now centers the resized window in its monitor
+work area; the existing native layout test adds desktop containment. Build/format
+pass; fresh rendered visibility and full runtime acceptance remain required.
+
+## Authored HTML extension correction
+
+The immutable MarkdownDocument.swift blob212caf9e8fcffdc7bb7e78c739402cd8d6449562
+confirms protected pre/code regions, visible raw-text post-render extensions and
+the body-only subscript preprocessing boundary. MarkdownExtensions.swift
+c6a2d3f9931580eaab1fdef17661632f6e9c71d0 and ImageInliner.swift
+5d7263613ebf96c43565a8f793d8f2dc6917e846 were also retrieved and Git-hash verified.
+
+Four pre-fix core cases reproduce extension formatting inside authored inline
+code. The existing literal-boundary pass now protects actual code/pre tags and
+restores formatting after real closing tags across HTML blocks. Raw block visible
+text receives enabled formatting after source annotation; tokenizer spans preserve
+attributes/comments/code and entity spelling. Windows protects all four syntax
+families in authored code, including subscript that the original body preprocessor
+can rewrite before its HTML code guard. Metadata matches the reference
+post-render/body-only subscript distinction.642 core tests pass with100% measured
+lines, zero-warning Release and full format pass. The existing browser extension
+case now checks distinct inline/block code peers and a raw-heading label through
+preference changes; focused CI also includes this case. Runtime remains pending.
+
+The preceding exactc3c735e / CI38190828814 is terminal success: native/published
+106/106, focused26/26, installed stable/dev105/105 each, zero skips. Actual
+complete Settings screenshots and coexistence/registration/update evidence are
+retained. Those results predate the new renderer correction and do not certify it.
+
+## Local images and navigation audit
+
+The pinned Mac WebView uses a file-directory base URI and delegates clicked links
+to NSWorkspace. Windows deliberately retains its isolated HTTPS namespace and
+bounded physical folder access. Same-document fragments jump/reveal native
+headings; HTTP(S) links use Windows after an actual user gesture. Supported local
+Markdown/text file links now open native windows, with duplicate focus, independent
+watching and the inherited physical-folder check on every reload. They never
+launch arbitrary files or protocols. Core URI tests and10 actual filesystem tests
+pass;662 core cases retain100% measured lines. Full Release/format pass. The new
+physical browser-link/duplicate/watcher/junction-reload case is compiled/discovered,
+not executed;109 native cases now discovered.
+
+Image requests support PNG, JPEG, GIF, BMP, WebP, SVG, AVIF and ICO through the
+same checked file handle and16MiB guard. Remote/absolute/traversing/aliased-outside
+requests are denied; browser paint/PDF fixtures prove representative local output.
+The Mac TIFF MIME mapping is not advertised as Windows browser support. Other
+protocol handlers and access outside the document folder remain intentional Windows
+security boundaries, not claims of arbitrary NSWorkspace equivalence.
+
+The preceding exact4d34656 / CI38193736344 is terminal success: focused27/27,
+native/published106/106, installed stable/dev105/105 each, zero failures/skips.
+Actual raw HTML/inline/block-code browser acceptance and channel lifecycle outputs
+are retained; those results predate the new local-link implementation.
diff --git a/docs/release-signing.md b/docs/release-signing.md
index dd8b2a5..51ad5b2 100644
--- a/docs/release-signing.md
+++ b/docs/release-signing.md
@@ -1,10 +1,9 @@
 # Windows release signing
 
-Application releases require Authenticode signing. The generated caller starts
-with `sign: false` so it remains compatible with its currently published builder,
-but its preflight blocks publication until the reviewed signing builder is
-published, pinned and configured. The source template's content-only NuGet package
-does not contain application binaries and uses a separate release workflow.
+Application releases require Authenticode signing. The caller enables `sign: true`
+with an explicit six-file ownership catalog and pins the reviewed standards v1.1.0
+builder. Configuration and final-signature checks stop publication on failure.
+The source template's content-only NuGet package uses a separate release workflow.
 
 ## Configure the protected environment
 
@@ -12,7 +11,7 @@ Use an existing authorized Artifact Signing account and Active Public Trust
 profile. Verify its deployed region/endpoint, actual tenant GUID and full
 certificate publisher subject. A subscription ID or directory domain is not the
 tenant GUID. Each repository needs an approved CI identity, GitHub OIDC trust
-restricted to `repo:Owner/Repository:environment:release`, and the Artifact Signing
+restricted to the repository's actual release-environment OIDC subject, and the Artifact Signing
 Certificate Profile Signer role scoped to its profile. Owner/Contributor alone
 does not grant signing permission. Preserve other identities and assignments.
 
@@ -36,11 +35,10 @@ signing service. Never export a PFX or put administrative passwords in CI.
 
 ## Enable the reviewed builder
 
-Pin a published shared builder that supports an explicit `signing-files` catalog
-and verifies the final shipped bytes/signatures. Standards v1.0.0 contains gclo's
-Velopack signing fix, but lacks this catalog interface; do not enable a partial
-path or pin unpublished commits. After the prepared builder is reviewed and
-published, update the caller's full commit SHA/version comment and add:
+The release caller pins standards v1.1.0 at
+`93b1d6163a4c466ae443e98b62786fc4d80d33bd`. Its reviewed builder supports the
+explicit ownership catalog and verifies final shipped bytes/signatures. The
+configured catalog is:
 
 ```yaml
 sign: true
@@ -69,3 +67,12 @@ trusted signatures, SHA256 digests and RFC3161 timestamps. Verification failures
 must stop publication. For future MSIX packaging, its Publisher must match the
 verified subject. Local signing uses Microsoft's Artifact Signing Client Tools
 and the installed SignTool/dlib paths with an authorized identity.
+
+MarkdownViewr-specific verified OIDC claims and the precise remaining Azure
+administrator steps are in [azure-signing-admin.md](azure-signing-admin.md).
+This repository uses immutable owner/repository IDs in its subject; a copied
+name-only trust from gclo would not match. Azure resource/identity/role and protected release variables are verified. The
+local six-binary and final installer/portable/update-package signing proofs pass.
+The new CI identity and production artifacts still require the protected release
+run; local administrative signing does not prove CI OIDC.
+See the administrator runbook for actual evidence and remaining dependencies.
diff --git a/docs/repository-setup.md b/docs/repository-setup.md
index 0edc409..4e4a682 100644
--- a/docs/repository-setup.md
+++ b/docs/repository-setup.md
@@ -9,7 +9,7 @@ hooks, and run [CONTRIBUTING.md](../CONTRIBUTING.md)'s checks. Node 24 and Power
 The default command works offline and writes thirteen non-secret API requests:
 
 ```powershell
-./build/Initialize-GitHubRepository.ps1 -Repository KofTwentyTwo/windows-app-template
+./build/Initialize-GitHubRepository.ps1 -Repository KofTwentyTwo/MarkdownViewr.Windows
 Get-Content artifacts/repository-setup.json
 ```
 
diff --git a/docs/security/assurance.json b/docs/security/assurance.json
new file mode 100644
index 0000000..3a35dac
--- /dev/null
+++ b/docs/security/assurance.json
@@ -0,0 +1,20 @@
+{
+   "schemaVersion": 1,
+   "badge": {
+      "applicability": "required",
+      "reason": "Public open-source Product enrolled as project 15417. Evidence-backed maintainer assessment remains required; enrollment does not establish passing status.",
+      "projectUrl": "https://www.bestpractices.dev/en/projects/15417",
+      "evidence": "docs/security/best-practices.md"
+   },
+   "fuzzing": {
+      "applicability": "required",
+      "reason": "Untrusted Markdown/HTML/frontmatter, source ranges/folds, resource URLs, imported theme JSON and activation JSON are parser boundaries. Seeded mutation targets verify unsafe acceptance as well as exceptions.",
+      "targets": [
+         "tests/MarkdownViewr.Windows.Core.Tests/SecurityFuzzTests.cs",
+         "tests/MarkdownViewr.Windows.UiTests/ActivationFuzzTests.cs"
+      ],
+      "command": "dotnet test tests/MarkdownViewr.Windows.Core.Tests -c Release -p:Platform=x64 --no-build --no-restore --filter Category=Fuzz",
+      "workflow": ".github/workflows/fuzz.yml",
+      "evidence": "docs/security/fuzzing.md"
+   }
+}
diff --git a/docs/security/best-practices.md b/docs/security/best-practices.md
new file mode 100644
index 0000000..e0429a6
--- /dev/null
+++ b/docs/security/best-practices.md
@@ -0,0 +1,30 @@
+# OpenSSF Best Practices assessment
+
+## Scope and enrollment
+
+MarkdownViewr.Windows is a public open-source Product; K22-REPO-12 requires real enrollment and an evidence-backed assessment. Maintainer: @KofTwentyTwo (James Maes). This entry covers the Windows repository, separately from Darin Kelkhoff's macOS project.
+
+Registered on 2026-10-12 as [project 15417](https://www.bestpractices.dev/en/projects/15417), with repository and home page both pointing to this GitHub repository. The Metal passing assessment was initially **18% complete** after provider import. Registration and a progress badge do not establish passing status.
+
+Reassess by 2027-01-10 and before each MINOR/MAJOR release. The maintainer must confirm actual operating practices and incomplete criteria.
+
+## Evidence
+
+| Area | Evidence and limits |
+| --- | --- |
+| Identity/license | README, MIT LICENSE, CONTRIBUTING, retained author/vendor notices; standards inventory merged in PR #36. |
+| Documentation/change control | User/developer guides, PRODUCT/ADRs, linked issues, signed/DCO commits in app PR #3. Final-head human acknowledgement remains required. |
+| Security reporting | SECURITY.md, private GitHub reporting, response/support policy, and threat model. Actual response practices require maintainer attestation. |
+| Build/test | Locked restore, zero-warning build, analyzers, 100% measured core coverage, parser campaigns, native/published/installed acceptance. Tests do not certify arbitrary documents. |
+| Supply chain | Full-SHA action pins, dependency review/audit, secret/workflow/CodeQL scans, component credits, bundled notices. |
+| Releases/crypto | Current installed fixture updates/coexistence pass. Local signing/distribution proof passes; production CI OIDC signing and published stable/dev assets remain pending. |
+| Governance | Single-maintainer policy is explicit. Automated review is not independent human review; acknowledgements must be genuine. |
+
+## Remaining assessment actions
+
+1. Review each provider criterion against repository evidence and actual operations; mark incomplete items honestly.
+2. Confirm security-response and review practices personally.
+3. Complete production release verification before claiming release-related criteria.
+4. Save the evidence-backed assessment on the provider, with any required agreement confirmed by the maintainer.
+
+No passing badge, approved exception, independent reviewer, or completed production release is claimed by this document.
diff --git a/docs/security/fuzzing.md b/docs/security/fuzzing.md
new file mode 100644
index 0000000..fd735b2
--- /dev/null
+++ b/docs/security/fuzzing.md
@@ -0,0 +1,68 @@
+# Parser fuzzing assessment
+
+## Scope and properties
+
+K22-TEST-25 applies to this public document reader. Owner: @KofTwentyTwo.
+The native .NET/xUnit mutation harness uses the actual parsers and independent
+DOM/path/source properties, with no new dependencies. It is deterministic
+property fuzzing, not coverage-guided instrumentation or an exhaustive proof.
+The existing core coverage gate remains unchanged.
+
+| Target | Inputs and independent assertions |
+| --- | --- |
+| Markdown/HTML/frontmatter/extensions | Mutated synthetic markup; parsed output has no executable elements, event handlers or authored host attributes; checkboxes remain disabled. URLs use browser HTTPS-base semantics. |
+| Source ranges/folds | Actual parser headings have bounded indices/offsets; literal source/copy preserves original newlines after fold/unfold; generated selection ranges fit the committed display. |
+| Resource/heading URLs | Accepted once-decoded paths resolve within a synthetic root; foreign hosts and queried document commands are denied; heading targets remain bounded. Native open-handle containment has separate filesystem tests. |
+| Theme JSON | Mutated real built-in schemas; invalid imports reject explicitly; accepted title/CSS cannot escape their HTML containers or introduce executable DOM. |
+| Activation JSON | Real generated schema and validator; accepted envelopes contain only known properties and bounded absolute literal paths; unknown command fields, malformed syntax and excessive/invalid paths are rejected. No pipe/window/process is opened. |
+
+The two target files and executable CI command are declared in
+[assurance.json](assurance.json). Generated document/theme inputs are at most 4096
+characters; activation envelopes have at most 144 small synthetic paths. No
+attacker script, real document, credential or profile is used. No input causes
+browser execution, network requests or native launches.
+
+## Campaigns and replay
+
+Run from the repository root with the pinned .NET 10 SDK on Windows:
+
+```powershell
+dotnet restore MarkdownViewr.Windows.slnx -p:Platform=x64 --locked-mode
+$env:K22_FUZZ_ITERATIONS = '500'
+dotnet test tests/MarkdownViewr.Windows.Core.Tests -c Release -p:Platform=x64 --filter Category=Fuzz
+dotnet test tests/MarkdownViewr.Windows.UiTests -c Release -p:Platform=x64 --filter Category=Fuzz
+# Weekly and before every MINOR/MAJOR release, repeat both commands with 10000.
+$env:K22_FUZZ_ITERATIONS = '10000'
+```
+
+Each target uses seeds 22023 and 99173. PR/main campaigns run 500 iterations per
+seed/target (5000 generated property evaluations total); weekly and every release
+reuse run 10000 (100000 total). `fuzz.yml` runs on PRs, `main`, weekly and manual
+requests; release.yml calls it and requires success before publication. The
+`fuzzing` check is declared in the repository protection plan; apply and verify
+that live protection after its first hosted run. The job has a 15-minute bound;
+iteration configuration outside 1–100000 fails explicitly.
+
+Failures retain seed, target, zero-based iteration and JSON-escaped synthetic
+input in TRX/CI logs. To replay the sequence, use the same checkout/runtime/seed
+and at least iteration+1 operations (a shorter budget does not reach it). Minimize
+the input into a named regression before changing an assertion or production
+code; retain original failure evidence. Genuine vulnerabilities use
+[SECURITY.md](../../SECURITY.md), not a public issue containing private data.
+
+## Evidence and review
+
+Prepared 2026-10-11 by Codex; maintainer assessment pending; reassess by 2027-01-09,
+on parser-boundary changes and before MINOR/MAJOR publication. The long local
+campaign exposed an oracle error: System.Uri treats backslash input as a Windows
+file URI even with an HTTPS base. AngleSharp's browser URL model preserves the
+actual HTTPS semantics; a minimized regression still requires resource denial.
+No production vulnerability is established from that oracle failure. Original
+failed TRXs are retained; no existing test/assertion/deadline was removed.
+
+Corrected core campaign passes 9/9 at 10000, zero skips (80000 generated inputs plus
+the minimized regression). Final activation passes 2/2 at 10000, zero skips (20000
+envelopes). Full core 677 tests/100% measured lines, zero-warning Release build,
+formatting and 23 repository setup tests and all 64 script tests pass. Hosted execution and required-check
+readback remain pending. This record does not certify
+Best Practices enrollment, production signatures or general parser completeness.
diff --git a/docs/security/scorecard-dispositions.md b/docs/security/scorecard-dispositions.md
new file mode 100644
index 0000000..09d740a
--- /dev/null
+++ b/docs/security/scorecard-dispositions.md
@@ -0,0 +1,49 @@
+# Scorecard process finding assessment
+
+Prepared 2026-10-12 for the first Windows release. These findings describe
+repository processes; they do not identify an exploitable shipped component.
+This assessment does not fabricate a vulnerability waiver, independent reviewer,
+90-day maintenance history or a passing Best Practices badge.
+
+## Single-maintainer review and branch controls
+
+The owner selected the single-maintainer policy. Approved
+[EX-0001](https://github.com/KofTwentyTwo/standards/blob/main/exceptions/register.md#ex-0001)
+applies to every KofTwentyTwo repository and records the missing non-author
+human approval as an accepted risk, with compensating controls.
+
+[Code-Review #8](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/security/code-scanning/8)
+correctly counts no independently approved changesets. The main ruleset has
+no bypass actors, requires PRs, signed commits, linear history, resolved threads
+and seventeen Actions-bound checks, including the maintainer-owned automated
+review record. The current application PR remains blocked until that actual
+record exists; this assessment cannot supply it.
+
+[Branch-Protection #5](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/security/code-scanning/5)
+identifies the same unavailable independent approver, code-owner approval and
+last-push approval. Keep the chosen policy and existing controls intact.
+Reassess when a second maintainer joins; require independent approval then.
+This is an accepted review gap under the existing exception, not maximal
+Scorecard protection or proof that every historical change was reviewed.
+
+## Repository-age finding
+
+[Maintained #9](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/security/code-scanning/9)
+explicitly reports creation within the last90 days. GitHub reports creation on
+2026-10-11; recent issues, signed feature commits and actual CI evidence show
+current activity. The age-based score does not establish abandonment, nor does
+current activity prove long-term maintenance. Reassess on2027-01-09, after the
+90-day boundary, and investigate any remaining maintenance finding honestly.
+
+## Remaining findings and actions
+
+Retain the current alert state until the assessment is reviewed and any authorized
+disposition is recorded. Do not disable Scorecard or invent changesets to raise
+its score. Fuzzing and SAST scores on the scaffold main revision must be
+reassessed after the tested application is merged; native fuzz/property targets
+may not be recognized by Scorecard. The actual Windows-specific Best Practices
+enrollment/assessment remains open in issue#31. No earned badge is claimed.
+
+No OpenVEX statement is fabricated for process findings without a vulnerable
+component. Actual exploitable code/dependency findings still need remediation
+or a reviewed, precisely scoped exception before shipping.
diff --git a/docs/security/threat-model.md b/docs/security/threat-model.md
index 8844df8..dfcffdc 100644
--- a/docs/security/threat-model.md
+++ b/docs/security/threat-model.md
@@ -1,92 +1,428 @@
 # Threat model: MarkdownViewr
 
-<!-- K22-SDLC-03. Update in any pull request that changes the attack surface, and review
-     in every MINOR/MAJOR release checklist (K22-SEC-30). Method: data flow + STRIDE. -->
+- **Version reviewed:** first reader implementation
+- **Last reviewed:** 2026-10-11
+- **Method:** data flow and STRIDE; review again for each attack-surface change.
 
-- **Version reviewed:** template readiness work · **Last reviewed:** 2026-10-10
+## Product and boundaries
 
-## 1. What the product is and does
+A per-user WinUI application reads user-selected local Markdown. AppKit supplies
+settings, logging, crash handling and Velopack updates. The UI-free core parses and
+sanitizes Markdown. WebView2 displays the sanitized result through an intercepted
+HTTPS origin. No application HTTP server or scriptable command-line head exists.
 
-A Windows desktop application installed per user (no administrator rights) with
-Velopack, updating itself from its GitHub Releases. It runs entirely on the user's
-machine: it keeps preferences and logs in the user's profile and has no server
-component. The template's example feature (a greeting) handles only text the user types.
+Document text, HTML, links, images and filesystem aliases are untrusted. The user
+selects the document; this authorizes reading it and passive images within its
+physical directory. It does not authorize native commands or remote resource access.
 
-## 2. Actors and components
+## Interfaces and controls
 
-| Actor or component | Description | Trust level |
+| Interface | Control |
+| --- | --- |
+| Picker / literal process argument | Read-only bounded snapshot; no shell interpolation |
+| Frontmatter | Bounded by document limit; complete leading delimiters only; metadata values HTML-escaped; Markdown mode uses the same sanitizer; no YAML execution or native commands |
+| Markdown / raw HTML | Explicit tag/attribute/scheme allowlist; disabled checkbox inputs; no authored scripts, CSS or IDs; only bounded code-language and fixed document classes survive |
+| Native print/PDF | Deliberate File/Print/Ctrl+P; ready passive document only; copied bounded settings; Windows destination picker; JSON-serialized CSS text in host-owned print stylesheet; same navigation checked after preparation; no authored command/output path; no document/path logs |
+| File change notifications | Directory subscription scoped to selected path; 350 ms quiet-period debounce; replacement/deletion recovery; bounded transient retries; subscriptions released on window close |
+| Theme JSON / CSS | Native editor and saved user overrides use the same bounded validation; corrupt theme settings are discarded before startup; restoration keeps separately named custom themes; embedded original palettes; bounded strict version-one parsing and validated compatible saved/import schemas with explicit newer-import consent; validated hex colors and finite sizes; code-point escaped font names; less-than signs escaped before style embedding; no network capability |
+| Browser viewport | Fixed origin-checked native query; validate two finite fractions; invariant numeric restore only; authored scripts/messages stay disabled |
+| Source pane | Bounded immutable snapshot plus literal native fold projection; original UTF-16 find positions map to visible native CR text; HTML/CSS/script text never enters a renderer or command interpreter; hidden pane removed from accessibility surface |
+| Find | Bounded literal query; pure source positions and native WebView2 finder, with duplicate browser UI suppressed; no query enters executable code or activity logs. Serialized queries and page/navigation checks reject stale completions; existing numeric section operations reveal/restore content |
+| Fixture input diagnostics | Explicit opt-in environment switch; observes handled native pointer/drag events without changing routing; logs owned control names, coordinates and button state only, never document text or keystrokes |
+| Browser surface | Scripts, messages, host objects, permissions, downloads, frames and popups disabled; restrictive CSP |
+| Local images | Per-document URI prefix; one decode; filename/extension policy; final open-handle containment; 16 MiB limit |
+| Remote resources | Denied by CSP and resource interception |
+| External links | HTTP(S) only, actual browser user gesture, external Windows handler; no document navigation outside current page |
+| Heading navigation | Labels extracted after sanitation; authored identity attributes stripped; generated numeric targets only. Fixed host operations reveal/jump/collapse on the current intercepted page; authored scripts, messages and host objects remain disabled |
+| Settings / logs | AppKit sanitation; per-user data root; log operational events without document content or paths |
+| Updates | Repository HTTPS feed, Velopack integrity checks and production signing preflight |
+| Repository / CI | Protected main and release tags; producer-bound checks; no untrusted PR checkout with privileged review token |
+
+## Threats and verification
+
+| Threat | Mitigation and evidence |
+| --- | --- |
+| Document script or native-command execution | Sanitizer regressions pass; host disables scripts/bridge; actual browser malicious-script and reader acceptance passed on 77dd04d |
+| Image traversal, device/ADS paths or encoded separators | Core path-policy tests pass; denied before filesystem access |
+| Junction/symlink escape or check/reopen race | Check normalized physical path on opened image handle; read same handle; real junction rejection test passes |
+| Remote image tracking / resource exfiltration | No-referrer header, no document networking; actual listening-server browser denial passed on 77dd04d |
+| Oversized input / image denial of service | Pre-parse character bound and image byte bound; native limit tests pass; performance acceptance remains |
+| Settings corruption / UI exception | AppKit shell sanitation and crash handling; inherited foundation tests |
+| Tampered installer/update | Fail-closed signing/provenance/checksum release pipeline; real Azure CI authorization and signed artifacts remain unverified |
+| Privileged repository review abuse | Trusted review workflow only; current-SHA human acknowledgement remains required |
+
+## Remaining risks and work
+
+This is a first reader, not a completed port. Native frontmatter/outline/literal-source acceptance passed CI 38106991467 in loose, published and both installed builds. Paired find and configured editor launch passed hosted and installed acceptance; new synchronized source/collapse, broader editor parity,
+print and any future browser bridge need their own controls and tests. Save watching is
+implemented; hosted real browser replacement/deletion/scroll and remote-image denial pass on 77dd04d.
+Local links to other documents and mailto links are currently blocked. WebView2 uses
+the installed evergreen runtime; published and both installed channels passed reader acceptance on 77dd04d and editable themes on 30ca094. Paired-find keyboard/source/viewport/hostile-query acceptance passed on 5a9af63. New source synchronization acceptance remains required.
+
+Historical EX-0002 does not authorize unsigned production publication. Azure setup
+and real final-artifact signature validation are deferred; an active profile alone
+does not establish working release signing.
+
+## Review log
+
+| Date | Reviewer | Changes |
 | --- | --- | --- |
-| User | The person running the app | Trusted for their own data |
-| WinUI shell (`MarkdownViewr.Windows.exe`) | Views and startup plumbing | Runs as the user |
-| Core (`MarkdownViewr.Windows.Core`) | Logic, settings, view models | Runs as the user |
-| Command line (`markdownviewr-windows.exe`) | Optional scriptable head over Core | Runs as the user |
-| AppKit packages | Shell services: logging, settings, secrets, updates, splash, About | Third-party code, pinned and attested |
-| Velopack update service | Checks GitHub Releases, downloads and applies packages | Runs as the user |
-| GitHub Releases | Update feed and download source | Untrusted network data |
+| 2026-10-10 | Codex (GPT-6) | Added directory watching and guarded numeric viewport preservation; hosted reload acceptance pending |
+| 2026-10-10 | Codex (GPT-6) | Replaced template-only interfaces with actual document and browser boundaries; recorded separate unit/native/browser evidence |
 
-## 3. Data flow and trust boundaries
+## Owned-window keyboard boundary
 
-```mermaid
-flowchart LR
-    user([User]) --> shell[MarkdownViewr.Windows.exe]
-    user --> cli[markdownviewr-windows.exe]
-    shell --> core[MarkdownViewr.Windows.Core]
-    cli --> core
-    core --> data[("%LOCALAPPDATA%\markdownviewr-windows<br/>settings.json · logs")]
-    shell -- HTTPS --> gh[(GitHub Releases)]
-    subgraph machine [Trust boundary: the user's machine and account]
-        shell
-        cli
-        core
-        data
-    end
-```
+Browser-focus shortcuts use a current-UI-thread `WH_GETMESSAGE` hook requiring the
+active owned window/child. Ctrl+F remains a native window command. Vim keys require
+the actual passive-browser/read-only-source focus; native text controls retain input.
+Alt/Windows and extra Ctrl modifiers do not become reading commands. Only bounded
+enums leave the key model; prefixes expire/reset and held prefix keys do not complete
+sequences. Layout translation uses ToUnicode flag 4 to preserve dead-key state;
+non-reading input is not translated. Dispatch rechecks focus. Other messages pass
+through; closing removes the callback. No global hook, other-process capture,
+arbitrary command, browser bridge or text logging is introduced. Fixture-only focus
+traces contain native control names/types, never query or source text. Actual hosted
+physical keyboard acceptance is required.
+See Microsoft's [thread-hook contract](https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setwindowshookexw) and [layout conversion contract](https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-tounicode).
 
-## 4. External interfaces
+## Configured editor boundary
 
-| Interface | Direction | Data | Authenticated? | Validated where? |
-| --- | --- | --- | --- | --- |
-| Window input (text boxes, menus) | In | User text | The signed-in user | `GreetingService.Greet` (length limit), each feature's Core service |
-| Command line arguments | In | Command, options | The signed-in user | `CliApp.Run` (unknown commands and options rejected) |
-| `settings.json` | In/out | Preferences | File ACLs of the user profile | `SettingsStore` sanitizes on load; corrupt files fall back to defaults |
-| Log files | Out | Operational events, no secrets | File ACLs | Logging API takes messages only |
-| Data-folder environment variable | In | A folder path | The signed-in user | Used as a path only |
-| Update feed (GitHub Releases over HTTPS) | In | Release metadata and packages | TLS; package hashes checked by Velopack | Velopack |
-| Windows Credential Manager | In/out | Secrets, if a feature stores any | The user's Windows login | AppKit `CredentialManagerVault` |
+Only deliberate native configuration selects existing, bounded, fully qualified
+`.exe` editors. AppKit sanitizes at most 32 named stable-ID choices, discarding
+invalid/duplicate IDs, corrupt names and executable paths. Legacy single-path
+settings migrate into one entry; cancel edits only a copied list. Opening the editor requires a current
+existing document and passes its full file path or selected parent folder as exactly
+one `ArgumentList` value with
+`UseShellExecute=false`; Markdown cannot choose an executable or supply switches.
+The chosen application runs with the user's permissions and receives the document.
+Missing files and native launch errors leave the viewer open; logs omit paths and
+contents. Core tests cover metacharacters/Unicode, relative/script paths, corruption
+and bounds. Actual fixture-process/UI acceptance passed on 5a9af63 in native, published and
+installed channels; new named-list/submenu order, cancellation/removal and actual folder/file probe
+launch acceptance remain pending.
 
-## 5. Assets
+## Source provenance boundary
 
-The integrity of the installed program and its updates (an attacker who controls them
-runs code as the user), the user's preferences and any stored secrets, and availability
-of the app.
+Source anchors originate from Markdig heading spans and AngleSharp raw HTML token
+positions, with original newline/frontmatter/UTF-16 offsets. Repeated titles or
+fenced heading-like text cannot select another heading's identity. A fresh private
+attribute name is admitted only during the internal render and removed before any
+HTML is presented; public renderer policy and authored ID/data-attribute denial
+remain unchanged. Positions pair only with sanitized surviving headings and do
+not grant scripts, messages, native access or resources. The original snapshot is
+immutable. Core regressions cover nested raw markup, Setext, fences, Unicode,
+frontmatter and forged attributes; source scroll/folding UI acceptance is pending.
 
-## 6. Threats (STRIDE)
+## Source synchronization boundary
 
-| # | Boundary / component | Category | Threat | Likelihood | Impact | Mitigation | Status |
-| --- | --- | --- | --- | --- | --- | --- | --- |
-| T1 | Update feed | Tampering | A malicious update is served to installed copies | Low | Critical | Updates only from this repository's immutable, attested GitHub Releases over HTTPS; Velopack verifies package hashes; Authenticode signing once EX-0002 closes | Mitigated (signing pending) |
-| T2 | Download | Spoofing | A tampered installer on a mirror | Medium | High | README verification steps: `SHA256SUMS`, `gh attestation verify`, Authenticode | Mitigated |
-| T3 | Settings file | Tampering | A crafted `settings.json` crashes the app or sets invalid values | Low | Low | Source-generated deserialization, `Sanitize` on load, defaults on failure | Mitigated |
-| T4 | Logs | Information disclosure | Secrets or personal data written to logs | Low | Medium | Log calls take plain messages; secrets go only to Credential Manager (K22-SEC-71); review | Mitigated |
-| T5 | Install folder | Elevation of privilege | DLL planting next to the exe | Low | High | Per-user install under `%LOCALAPPDATA%`, owned by the user; no loading from the working directory | Mitigated |
-| T6 | Shell | Denial of service | An unhandled exception closes the app with unsaved work | Medium | Low | AppKit crash net logs and survives UI exceptions; one-dialog-at-a-time guard | Mitigated |
-| T7 | Input | Denial of service | Very long input slows or breaks the UI | Low | Low | Length limits in Core services | Mitigated |
-| T8 | Repository administration | Tampering | Setup weakens protections, trusts another check producer or targets another repository | Low | High | Offline preview; exact public target/admin checks; verify official Actions identity and every context binding in apply/readback; current-PR checks; refuse conflicting rules and broad release refs; preserve reviewed plan | Local regression tests pass; live bootstrap pending |
-| T9 | PR review workflow | Elevation of privilege | Untrusted PR code runs with a checks write token | Low | High | Comment-triggered workflow executes trusted workflow SHA only; no PR checkout; human current-SHA acknowledgement required | Local tests pass; hosted enforcement pending |
-| T10 | Package-manager distributions | Tampering | Manifest points at wrong bytes or an unsafe executable | Low | High | Stable-only generation; ZIP identity/layout checks; actual SHA256 and provenance verification; exclude helper shims; candidate review before feed publication | Local tests and real archive/schema checks pass; feed lifecycle pending |
-| T11 | Installed update smoke | Tampering | A test overwrites a real app or deletes unrelated files | Low | Medium | Unique test package ID; fresh artifacts-only output; app identity check; literal arguments; offline URL allowlist; exact process path; root/manifest checks before uninstall | Local runtime/boundary tests pass; hosted CI pending |
+Only fixed host operations capture numeric scroll positions, generated heading IDs
+and hidden generated bodies on the matching ready document. Exact JSON shape,
+bounded array lengths, unique in-range integer IDs and finite coordinates are
+required. No source text, heading label or query enters executable code. The native
+adapter serializes polling, rejects stale snapshot/query/page completions and
+suppresses feedback around find selections and its own viewport movements. Closing
+stops the timer; hidden panes do not synchronize. Literal ellipses only affect the
+presentation; canonical document bytes and independent nested fold choices remain.
+Opt-in fixture geometry logs contain numeric positions/counts only.
 
-## 7. Accepted risks
+330 core tests cover editor migration/persistence/folder arguments, folding, original/native offsets and malformed numeric frames
+at 100% measured line coverage. Hosted actual glyph/viewport and fold/find/reload
+acceptance is pending; raw multiline/same-line heading parity still needs audit.
 
-- EX-0002 tracks historical unsigned Windows release risk. The current application
-  release preflight rejects unsigned production publication. Verified deployment,
-  scoped CI authorization and final-artifact signature acceptance remain required;
-  completed publisher validation alone does not prove CI signing.
+Entering read-only source now defers restoration of its prior viewport after native
+focus/caret revelation, guarded by the current snapshot/window and excluding active
+find. An unselected read-only caret is positioned at the first visible native character
+before focus, preventing the observed later caret reset. The original post-focus
+glyph assertion passes on 1c4d1ad; source-to-reader acceptance remains open. Hosted acceptance must verify actual glyph positions before/after
+focus and native source-to-reader movement; numeric fixture logs contain no text.
 
-## 8. Review log
+## Reading zoom
 
-| Date | Version | Reviewer | Changes |
-| --- | --- | --- | --- |
-| 2026-10-09 | template baseline | maintainer | Initial model from the Windows desktop reference architecture |
-| 2026-10-10 | repository setup | Codex (GPT-6) | Added administration and review workflow trust boundaries; live proof pending |
-| 2026-10-10 | check producer readback | Codex (GPT-6) | Verify official Actions identity/bindings without mutating caller plans; clarify signing gate versus historical risk |
+Zoom remains window-local and receives only explicit owned native commands. Its
+finite 0.3–5 scale multiplies validated font sizes with invariant numeric formatting;
+line height, colors, theme JSON and custom CSS retain their existing semantics.
+No authored script, message bridge or new resource capability is enabled. Navigation
+uses existing matching-page viewport/collapse guards and ready-page find replay.
+Ctrl zoom commands require reading focus; editor/theme/find text input retains
+native ownership. 330 core tests/100% measured lines pass; actual glyph/key/reload
+acceptance is pending. Native menus/toolbar do not imply production release proof.
+
+## Print lifecycle
+
+Reading and print styles have separate `screen`/`print` media attributes. Even
+custom CSS braces cannot escape a stylesheet's media restriction. Printing never
+changes reading theme data, source text, find state or generated collapse flags;
+print CSS exposes folded bodies only in print media. Native source feedback pauses
+through the settings/PDF operation, and geometry queries reject print-media frames.
+WebView2 native print UI has no completion callback: opening it is not proof of a
+successful job. Native PDF output is awaited and written only to the user-chosen
+Windows picker destination. PDF export disables headers/footers; fixture acceptance
+cancels print UI and renders owned generated PDFs, never submits a physical job.
+The existing CSP, denied remote requests and opened-handle image containment apply.
+See ADR-0003; full hosted/output/layout verification remains pending.
+
+## Document windows and recent files
+
+Only literal process arguments and deliberate native picker/recent commands open
+documents. The App SDK multiple-file picker is bound to its owning AppWindow.Id.
+A new reader receives its own initial path, browser, watcher and keyboard/window
+lifetime; document content cannot open windows or invoke native menus. Reuse/focus
+is restricted to matching canonical paths within the current process. Browser CSP,
+local-image handle containment and passive-content policy apply independently to
+every reader; closing one stops only its owned callbacks and hooks.
+
+Recent paths remain private in the local AppKit settings file, capped at20 and
+32767 characters per entry; relative paths, URLs/control characters and duplicates
+are discarded. Record only successful parsed opens, never missing/unreadable files.
+No document content or paths enter activity logs. Native Clear removes history,
+not files. Source-generated property-delta merging preserves sibling preferences
+and prevents an older window snapshot from restoring cleared paths. Core tests
+cover corruption, bounds, ordering, independent arrays and stale-window merging.
+Actual hosted lifecycle/clear/reload tests are pending; association/activation
+registration has not been implemented or represented as verified. See ADR-0004.
+
+## Configurable Markdown extensions
+
+Only deliberate native menu commands change the four saved rendering preferences;
+document content cannot modify them. Each asynchronous read captures immutable
+options. Existing Markdig parsing generates passive mark/sup/sub/ins nodes and
+preserves original source offsets. Reference caret/tilde whitespace and protected
+code/newline boundaries remain literal. The sanitizer still removes authored
+styles, identity/event attributes and unsafe links; mark/ins grant no native or
+network access. Host-generated theme CSS uses validated palette variables.
+
+Separate saved fields preserve sibling preference edits. Core tests cover all16
+option combinations, code/escapes, hostile attributes, original source provenance
+and old JSON defaults. Actual native repaint/toggle/reload acceptance is prepared
+for hosted runners and remains unverified. Raw authored-HTML extension edge cases
+remain part of the reference audit; no broader renderer-parity claim is made.
+
+## Complete native typography editing
+
+All font families/sizes and line height use native controls backed by a copied
+core theme edit. Known field names, finite/ranged numbers, bounded escaped font
+strings and hex colors pass the existing renderer validation before saving.
+Unknown fields and invalid drafts are rejected; unrelated schema metadata is
+preserved. No document content can invoke these edits. Custom CSS still cannot
+close its style element, and existing CSP/resource limits apply. Core tests prove
+invalid input leaves originals intact, successful edits retain all fields, and
+hostile font/CSS strings preserve the HTML boundary. Actual glyph/save/cancel
+acceptance compiles for hosted runners and is not yet verified.
+
+## Shared reading appearance
+
+Only deliberate native settings commands save global CSS and content width.
+Copied drafts validate finite200–4000px widths and a128Ki-character CSS bound;
+corrupt persisted values fall back safely. Settings are merged against the latest
+store before broadcasting to open readers. Revision checks reject obsolete
+asynchronous application; updating sibling baselines prevents later local saves
+from restoring an older global preference.
+
+Global CSS is escaped for HTML style embedding and remains in screen-only media.
+Per-theme CSS retains precedence; an enabled width limit is applied last, scaled
+with reading zoom. Print CSS uses its existing independent theme/layout path.
+No new script, host object, message bridge or remote-resource permission is enabled;
+existing CSP and denied network requests still apply.448 core tests/100% measured
+lines pass. Two new hosted cases compile but have not run; actual sibling paint,
+wrapping and PDF isolation are not yet declared verified.
+
+## Shared theme management
+
+Only owned native manager/menu/cycling commands change saved theme lists or the
+active palette. Copied drafts retain cancellation; names are bounded, deduplicated
+and reject control characters. Disabled themes remain editable while disappearing
+from reading menus. Built-in deletion only removes settings overrides and records
+a restorable name; shipped resources and document files are untouched. Restoring
+originals preserves edited JSON/metadata as uniquely named custom copies.
+
+Latest-store field merging and reader save baselines preserve unrelated sibling
+preferences. Catalog/selection broadcasts and browser revision checks discard
+obsolete asynchronous theme applications. Cycling uses only enabled saved order
+and exact Ctrl+Shift arrows with owned reading focus; text controls retain input.
+Existing schema/font/CSS validation, screen/print separation, CSP and resource
+denial remain enforced.471 core tests/100% measured lines pass. Native menu/paint/
+keyboard/sibling and revised restoration acceptance compile but remain unexecuted.
+
+## Native theme transfer and copied manager dialogs
+
+Theme JSON enters only through deliberate owned native file pickers. Serial reads
+allocate at most the128Ki-character bound plus one before schema/depth validation;
+UTF-8 and recognized BOM encodings retain Unicode. Invalid files fail independently
+within a batch. Compatible newer schemas still validate all known colors/fonts/
+sizes/CSS and require explicit native consent before import persistence. Strict
+version-one parsing remains available. Saved approved versions and unknown metadata
+survive rename/edit/restoration/export without enabling new rendering privileges.
+
+Overwrite replaces only the named user override; keep-both reserves unique names
+across the batch; skip/cancel leaves saved data intact. Native new/copy/edit/default
+and transfer actions use copied settings across successive dialogs, with manager
+Save required for persistence. A renamed editor cannot silently overwrite another
+existing palette. Export writes exact validated JSON only to the user's chosen
+native destination, including disabled choices. Suggested names exclude Windows
+path characters and ordinary reserved device names. Errors log exception kind/
+HRESULT only, never selected paths or JSON. Closing the owner stops reopening.
+
+517 core tests/100% measured lines and zero-warning build pass.69 desktop cases
+are discovered headlessly; six new actual picker/choice/export/draft/cancel cases compile
+but have not run. Runtime proof remains pending. Existing CSP, resource denial and
+screen/print separation remain in force; original CSS-selector compatibility is
+still a required audit.
+
+## Public Help links and post-export actions
+
+Help destinations are fixed application metadata: the Windows repository, its issue
+chooser and Discussions. Original Mac/author links appear separately in About; no
+authored document path, content or credential enters these URLs. Native browser
+launches require deliberate menu/link actions; the renderer capability boundary
+is unchanged. Starter setup now requires/readbacks Discussions for support.
+
+Optional PDF/folder opening uses only the destination deliberately chosen in the
+owned save picker. The native exporter must succeed and Windows' PDF loader must
+read pages before success/actions. Cancellation/failure cannot launch them. The
+PDF and folder actions are independent; missing native handlers report an action
+failure while retaining the completed export status. Logs retain phase/runtime
+or exception kind/HRESULT, never private PDF/document paths or content. New actual
+print/PDF/credit acceptance is still pending; the owner's handoff report remains
+unresolved despite earlier hosted PDF proof.
+
+## Native highlighted source and linked component credits
+
+Source is committed as literal text in a read-only RichEditBox; only native
+character formats are applied. No RTF/HTML source loading or authored URL
+attributes are used. Explicit Default input scope disables auto-URL detection.
+Parser classification runs off-thread with snapshot/cancellation guards; native
+paint batches discard stale snapshot/palette generations. Selected document
+accents are contrast-adjusted for shell mode; high contrast uses system colors.
+Copy is a deliberate native action and emits only visible original plain text,
+including Unicode and original line breaks. Folding never copies hidden bodies.
+Clipboard failures report a content-free status; closing cancels background work.
+Core spans/copy/contrast are verified; native accessibility/colors/clipboard and
+scroll/find/fold/reload acceptance remain pending.
+
+About project/license links are curated from restored package metadata, never
+from authored documents. Microsoft binary-package license terms are identified
+separately from MIT libraries. Verbatim SDK/WebView/tensor notices are copied as
+ordinary application data, independent of the XAML resource index. Native Settings
+owns its theme/editor dialogs and pickers; routine checked layout saves preserve
+unsubmitted CSS drafts and update reader/save baselines. UI acceptance remains
+required for the new settings window and exact distributed artifacts.
+
+## Windows file registration and process activation
+
+Installed Velopack callbacks advertise five fixed file extensions under HKCU.
+Commands quote the stable current executable and literal `%1`; no shell script
+is involved. Channel/executable-specific identities and command ownership checks
+bound uninstall cleanup. REG_NONE `AllowSilentDefaultTakeOver` prevents silent
+selection as a default. Extension defaults, UserChoice, HKLM, other registrations
+and portable/development-build registration are outside these operations.
+
+The App SDK chooses a primary per executable/profile directory. The activation
+pipe permits only the current Windows user; it is an additional native ingress
+for literal file paths, never browser content or native command execution. Paths
+are canonicalized at the sender. The generated schema rejects unknown fields,
+relative/control-containing/null/overlong paths and more than128 paths; frames
+are bounded to1MiB, connection/read waits to10seconds and pre-XAML queuing to16
+requests. Normal document size/resource/sanitizer boundaries still apply.
+
+Malformed/disconnected requests are rejected and the listener continues; owned
+shutdown cancels the pipe. Fixed notifications and failure kind/HRESULT logging
+do not expose paths or payloads. UI-dispatched duplicate activation preserves
+existing readers, including pending initial loads. Nine actual isolated adapter
+tests pass; native app, Explorer and installed lifecycle acceptance is pending.
+See ADR-0005 and issue #14. Same-user processes can deliberately request document
+opening; this is not an authorization boundary against an already compromised
+account. No IPC operation executes arbitrary commands, loads plug-ins or changes
+settings, credentials or updater feeds.
+
+The default-file Settings button is a deliberate native user action. It reads the
+owned installed registration again before launching a fixed `ms-settings` URI;
+the query contains only the fixed channel/executable-derived registered value
+name. No document path/content can select the target or invoke this action.
+Portable/unregistered previews cannot initiate it. Selection remains in Windows,
+with no writes to UserChoice/defaults and `.txt` explicitly optional. Eleven
+isolated adapter tests now pass; OS chooser behavior still needs acceptance.
+
+The native General default-status read uses fixed `.md` and Windows
+AssocQueryStringW/ASSOCSTR_PROGID with a1024-character Unicode buffer. Require
+unchanged channel/install registration before displaying Default; missing/error
+responses stay Not default or Unknown. No UserChoice hash, competitor executable
+path, document content or authored native command is read/logged. Returning from
+Windows Settings refreshes status without setting associations. Seven real
+read-only/isolated adapter cases pass; actual OS selection still needs acceptance.
+
+## Reference CSS, Settings drafts and document status
+
+The attributed reference stylesheet is an embedded application resource. Rendered
+Markdown remains sanitized before DocumentPage inserts it into #content-inner;
+titles are HTML-encoded. Only fixed document classes and bounded code-language
+classes survive sanitization. Theme/global CSS uses existing validation and
+blocked-resource policies; it cannot close the style element, add native commands
+or fetch unauthorized remote/local resources. Reading/print container changes do
+not extend renderer message capabilities. Native TOC/source remain separate
+controls; full reference selector parity still requires actual acceptance.
+
+Long theme/editor drafts live inside the native Settings window. Back, Cancel and
+window closure discard them. Validation gates explicit Save, manager child edits
+remain inside its copied draft, and native file pickers/short confirmations retain
+Settings ownership. A display-state change never grants document content access
+to these native operations.
+
+Footer metadata belongs to the same open handle used for the loaded snapshot.
+Watcher notices, failed reloads and bounded metadata polling mark stale content;
+only a successful new snapshot clears that indicator. The explicit Open folder
+button uses StorageFolder and Launcher.LaunchFolderAsync with a literal document
+parent directory; it does not construct shell commands. Diagnostics omit authored
+content/paths. The disabled-editor tooltip reports native configuration state,
+and its timer and footer polling stop on window closure. Native status/hover/
+Explorer acceptance remains pending; passing pure or adapter tests is insufficient.
+
+## Disconnected activation peers
+
+An accepted native pipe connection remains owned until explicitly disconnected,
+even when a broken read clears the managed IsConnected property. Each request
+retains its current-user boundary, bounded frame/deadline and generated-schema
+validation. The deterministic already-closed-peer test uses real pipe handles
+and acknowledgements with a controlled continuation schedule: its pre-fix next
+connection times out; after the cleanup correction it recovers. Four cases and
+25runs/100tests pass locally. Exact hosted published/installed proof remains
+required. No protocol, caller privileges or document/native capability expands.
+
+## Authored HTML extension boundary
+
+Source identities/ranges are captured before visible raw-text formatting. Actual
+HTML tokenizer spans delimit candidate text; attributes, comments and code/pre
+content are not rewritten. Each selected reference pattern has a one-second
+regex limit, and the existing document-size guard applies before parsing. Metadata
+retains the original body-only subscript preprocessing boundary. Every result
+still passes the unchanged tag/attribute/scheme sanitizer and browser CSP; these
+passive formatting tags provide no scripts, host messages or native capabilities.
+Core regressions exercise all16 preference combinations, protected inline/block
+code, comments/attribute lookalikes, entities and exact CRLF/Unicode source ranges.
+Fresh hosted browser/distributed acceptance is required for this correction.
+
+## Native local document-link boundary
+
+Only actual user-initiated browser navigation can request a local reader. Its URI
+must belong to the current private namespace, have no query and use one of .md,
+.markdown, .mdown, .mkd or .txt. Once-decoded segments reject traversal, devices,
+alternate streams, controls and filename aliases. No document link is dispatched
+as an executable, script, arbitrary protocol or OS shell command.
+
+The source snapshot supplies its trusted physical directory. The target's open
+handle is checked against that directory before reading, and that same handle
+supplies the snapshot. A linked reader retains the required root for every reload,
+including watcher/extension/frontmatter refresh. A changed junction cannot replace
+its committed data with outside content. Duplicate focus requires an already
+committed snapshot inside the source grant. Closed source windows cannot launch
+new linked readers. Existing image, sanitizer, CSP and host-message rules remain.
+Core URI and actual filesystem/junction tests pass; the prepared physical-link/
+reload-scope desktop regression still requires hosted execution.
+
+## Repeatable parser assurance
+
+The seeded targets in [fuzzing.md](fuzzing.md) exercise Markdown/HTML/frontmatter,
+literal source/folds, resource URLs, imported theme JSON and activation JSON through
+actual parsers. Independent properties detect unsafe acceptance as well as crashes.
+Synthetic inputs never execute scripts, start native processes or touch real profiles.
+The record in [assurance.json](assurance.json) does not claim coverage-guided
+instrumentation, Best Practices enrollment or verified production signatures.
diff --git a/docs/standards-readiness.md b/docs/standards-readiness.md
new file mode 100644
index 0000000..a13feb5
--- /dev/null
+++ b/docs/standards-readiness.md
@@ -0,0 +1,18 @@
+# Standards readiness
+
+Read-only checks performed on 2026-10-11 against KofTwentyTwo/MarkdownViewr.Windows.
+The full port and public release are not complete; do not add a conformance badge.
+
+| Area | Evidence and remaining work |
+| --- | --- |
+| Repository settings | `build/Initialize-GitHubRepository.ps1 -Mode Validate` returns `SettingsVerified=True`: required contexts are bound to official Actions; protections, action policy and tag-only release environment read back successfully. |
+| Official conformance checker | 34 PASS, 1 FAIL, 1 WARN, 3 REVIEW; full JSON retained at `artifacts/repo-conformance-2026-10-11.json`. |
+| Required inventory | `K22-REPO-42` remains pending: signed inventory proposal6b4fd17 is in standards draftPR36; its checks pass. App/starter are Product with adoption-in-progress status. Review/merge is required before claiming registration in main. |
+| Shared community defaults | `K22-REPO-10` warns: no owner `.github` repository. App governance/security/contributing files exist; shared owner defaults remain optional setup work. |
+| Workflow reviews | `K22-CI-02/03/31` require review of PR/push tests, documented command alignment and full release gate reuse. Current callers visibly run PR/push(main) CI and the release reuses CI/security. No human review acknowledgement is inferred. |
+| Test evidence | Exact9994eda passes586 core tests/100% measured lines, focused20/20 and full native98/98, zero skips. CI38176727468 is terminal: published98/98 and installed stable/dev97/97 each, zero skips; actual apply/restart passes both. Diagnostic-free764c7ac passes98/99 native/published and20/21 focused: the new multiline raw-header fold fails. Local correction passes589 core/100% lines; fresh native/installed registration acceptance remains required. |
+| Release | Stable/dev synthetic installed updates call AppKit apply/restart successfully. Actual verified Azure identity/profile/signer permissions and exact signed distributed artifacts remain deferred. Owner authorized stable1.0/dev publication after all requirements pass; signing and review requirements remain unmet. |
+
+Full acceptance remains in `docs/PRODUCT.md` and `docs/TODO.md`; maintainer review,
+Best Practices owner attestations and final signing cannot be replaced by local
+settings checks or green fixture tests.
diff --git a/docs/user-guide.md b/docs/user-guide.md
new file mode 100644
index 0000000..a8afda4
--- /dev/null
+++ b/docs/user-guide.md
@@ -0,0 +1,77 @@
+# Using MarkdownViewr
+
+## Open and read a document
+
+Choose **File → Open** or press **Ctrl+O**. You can open multiple documents in separate windows, return to recent files from the File menu, or open a file through Explorer after installing and selecting its association.
+
+MarkdownViewr is a reader. Use **Open in editor** to edit a document in your configured external editor; the Source pane is read-only. Configure named editors in **File → Settings → Editors**. A disabled editor command explains what is missing when you hover over it.
+
+## Contents, source, and search
+
+- **Contents** shows document headings. Choose the heading depth in the pane, select a heading to jump, or collapse sections to concentrate on the rest.
+- **Source** shows highlighted Markdown beside the rendered document. Each window starts with an equal split; drag the divider to resize. Focus the divider and use Left/Right, or Home to restore equal panes.
+- **Ctrl+F** searches the document and source. Enter moves to the next match; Shift+Enter moves back; Escape closes search.
+- Use the zoom buttons, **Ctrl++**, **Ctrl+-**, or **Ctrl+0** to adjust reading size or restore 100%.
+
+Contents and Source are hidden in new windows by default. Set independent defaults in **Settings → General**; toolbar toggles affect the current window.
+
+## Choose your appearance
+
+The document palette and application light/dark appearance are separate choices. Use **Theme** in the toolbar to select a document palette. Use the View menu for app appearance and Markdown extension/frontmatter options.
+
+**File → Settings** provides these pages:
+
+| Page | Controls |
+| --- | --- |
+| General | Reading width and custom CSS, Contents presentation, new-window pane defaults, and default file types |
+| Document themes | Palette selection, editing, management, and JSON import/export |
+| Editors | Named external editors, order, and document/folder launch preferences |
+| Printing | Saved print defaults |
+| Advanced | Startup splash, splash duration, and startup update checks |
+
+Immediate settings save as you change them. Custom CSS uses **Apply**; theme/editor drafts use **Save** or **Cancel**. The Printing page provides explicit save/restore actions. Theme editing is intended for your own trusted preferences.
+
+## Follow file changes
+
+Saving a file in another app refreshes both the rendered document and source automatically, while retaining your relative reading position. Replacement saves are supported.
+
+If a file is deleted or cannot be read, the last loaded document stays visible. The footer indicates a stale snapshot or failed reload. Restore the file or choose **File → Reload** to retry. The footer also shows the loaded snapshot's modification time and **Open folder** for Explorer.
+
+## Print or save a PDF
+
+1. Select **Print** in the toolbar, **File → Print**, or **Ctrl+P**.
+2. Choose print theme, image/background options, font scaling, width, borders, and page padding.
+3. Select **Print...** to hand the document to the system print dialog, or **Save PDF...** and choose a destination.
+4. For PDF output, enable the optional actions to open the PDF or its containing folder.
+
+Cancelling leaves the reading view unchanged. Use **Settings → Printing** to save defaults for later jobs.
+
+## Make it your default Markdown reader
+
+This requires an installed edition; a portable copy does not register default-file choices.
+
+1. Open **File → Settings → General → Choose default file types**.
+2. In Windows Default Apps, select MarkdownViewr and assign the extensions you want.
+3. Try opening a Markdown file from Explorer.
+
+Supported choices are `.md`, `.markdown`, `.mdown`, and `.mkd`; `.txt` is optional. Depending on Windows version, the button opens this app's page or the general Default Apps page. You can also right-click a file, choose **Open with**, and select the installed viewer.
+
+The installer preserves your current defaults. Windows requires you to choose the replacement.
+
+## Updates and local data
+
+Installed stable and development editions update within their own channels using **Help → Check for updates**. They have separate settings, recent files, and logs. Portable copies require a fresh download.
+
+Settings and logs are stored locally under `%LOCALAPPDATA%\markdownviewr-windows` or `%LOCALAPPDATA%\markdownviewr-windows-dev`. **Help → Activity log** opens the log viewer and provides a shortcut to its folder.
+
+Documents are rendered locally. Authored scripts and remote images are blocked; local images must stay within the document folder. Following an external link is a deliberate action.
+
+## Troubleshooting and support
+
+- **The app cannot display a document:** check that the file still exists and is readable, then try **File → Reload**.
+- **A remote image is absent:** remote image loading is blocked by the reader's document policy.
+- **Open in editor is disabled:** hover for the reason, then configure an installed editor in Settings.
+- **The viewer is not a default option:** use Setup rather than a portable copy, then reopen Windows Default Apps.
+- **The app does not start:** confirm Microsoft Edge WebView2 Runtime is installed and inspect the activity logs if available.
+
+For help, use [Discussions](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/discussions). Report reproducible problems through [Issues](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues/new/choose), including **Help → About** version, Windows version, and relevant sanitized logs. Report vulnerabilities privately using [SECURITY.md](../SECURITY.md).
diff --git a/src/MarkdownViewr.Windows.Core/AboutComponent.cs b/src/MarkdownViewr.Windows.Core/AboutComponent.cs
new file mode 100644
index 0000000..02e98d9
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/AboutComponent.cs
@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core;
+
+/// <summary>A verified dependency credit with fixed official project and license destinations, never document-supplied links.</summary>
+public sealed record AboutComponent(string Name, string Version, string License, string ProjectUrl, string LicenseUrl);
diff --git a/src/MarkdownViewr.Windows.Core/AboutComponents.cs b/src/MarkdownViewr.Windows.Core/AboutComponents.cs
new file mode 100644
index 0000000..0fcc1aa
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/AboutComponents.cs
@@ -0,0 +1,82 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core;
+
+/// <summary>Dependency credits verified against restored assets/nuspec metadata; keep them current when package locks change.</summary>
+public static class AboutComponents
+{
+   /// <summary>Direct/transitive application dependencies, including the self-contained runtime and Microsoft SDK binary licenses.</summary>
+   public static IReadOnlyList<AboutComponent> Runtime { get; } = Array.AsReadOnly<AboutComponent>(
+   [
+      new("AngleSharp.Css", "1.0.2", "MIT", "https://github.com/AngleSharp/AngleSharp.Css", "https://licenses.nuget.org/MIT"),
+      new("AngleSharp", "1.7.2", "MIT", "https://github.com/AngleSharp/AngleSharp", "https://licenses.nuget.org/MIT"),
+      new("HtmlSanitizer", "9.2.1039", "MIT", "https://github.com/mganss/HtmlSanitizer", "https://licenses.nuget.org/MIT"),
+      new("KofTwentyTwo.AppKit.Updates", "0.1.0", "MIT", "https://github.com/KofTwentyTwo/AppKit", "https://licenses.nuget.org/MIT"),
+      new("KofTwentyTwo.AppKit.WinUI", "0.1.0", "MIT", "https://github.com/KofTwentyTwo/AppKit", "https://licenses.nuget.org/MIT"),
+      new("KofTwentyTwo.AppKit", "0.1.0", "MIT", "https://github.com/KofTwentyTwo/AppKit", "https://licenses.nuget.org/MIT"),
+      new("Markdig", "1.4.0", "BSD-2-Clause", "https://github.com/xoofx/markdig", "https://licenses.nuget.org/BSD-2-Clause"),
+      new("Microsoft.Web.WebView2", "1.0.3719.77", "Microsoft package license", "https://aka.ms/webview", "https://www.nuget.org/packages/Microsoft.Web.WebView2/1.0.3719.77/License"),
+      new("Microsoft.Windows.AI.MachineLearning", "2.1.74", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.Windows.AI.MachineLearning/2.1.74/License"),
+      new("Microsoft.WindowsAppSDK.AI", "2.5.5", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.AI/2.5.5/License"),
+      new("Microsoft.WindowsAppSDK.Base", "2.0.4", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Base/2.0.4/License"),
+      new("Microsoft.WindowsAppSDK.DWrite", "2.1.0", "Microsoft package license", "https://aka.ms/WindowsAppSDK", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.DWrite/2.1.0/License"),
+      new("Microsoft.WindowsAppSDK.Foundation", "2.3.12", "Microsoft package license", "https://aka.ms/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Foundation/2.3.12/License"),
+      new("Microsoft.WindowsAppSDK.InteractiveExperiences", "2.1.9", "Microsoft package license", "https://aka.ms/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.InteractiveExperiences/2.1.9/License"),
+      new("Microsoft.WindowsAppSDK.ML", "2.1.94", "Microsoft package license", "https://github.com/microsoft/windowsml", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.ML/2.1.94/License"),
+      new("Microsoft.WindowsAppSDK.Runtime", "2.5.1", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Runtime/2.5.1/License"),
+      new("Microsoft.WindowsAppSDK.Search", "2.5.5", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Search/2.5.5/License"),
+      new("Microsoft.WindowsAppSDK.Widgets", "2.0.5", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.Widgets/2.0.5/License"),
+      new("Microsoft.WindowsAppSDK.WinUI", "2.3.9", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK.WinUI/2.3.9/License"),
+      new("Microsoft.WindowsAppSDK", "2.5.1", "Microsoft package license", "https://github.com/microsoft/windowsappsdk", "https://www.nuget.org/packages/Microsoft.WindowsAppSDK/2.5.1/License"),
+      new("System.Numerics.Tensors", "9.0.0", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("Velopack", "1.2.161", "MIT", "https://github.com/velopack/velopack", "https://licenses.nuget.org/MIT"),
+      new(".NET Runtime", "10", "MIT and third-party notices", "https://github.com/dotnet/runtime", "https://github.com/dotnet/runtime/blob/main/LICENSE.TXT"),
+   ]);
+
+
+
+   /// <summary>User-facing acknowledgements include shipped open-source libraries; the full inventory remains available for license audits.</summary>
+   public static IReadOnlyList<AboutComponent> OpenSource { get; } = Array.AsReadOnly(Runtime
+      .Where(component => !component.License.Contains("Microsoft package license", StringComparison.Ordinal))
+      .Append(new AboutComponent("WinUI 3", "2.3.9 (package)", "MIT (open-source project)", "https://github.com/microsoft/microsoft-ui-xaml", "https://github.com/microsoft/microsoft-ui-xaml/blob/main/LICENSE"))
+      .ToArray());
+
+
+
+   /// <summary>Build, analysis and test dependencies remain in the audit inventory rather than the user-facing About dialog.</summary>
+   public static IReadOnlyList<AboutComponent> Development { get; } = Array.AsReadOnly<AboutComponent>(
+   [
+      new("Meziantou.Analyzer", "3.0.296", "MIT", "https://github.com/meziantou/Meziantou.Analyzer", "https://licenses.nuget.org/MIT"),
+      new("Microsoft.Windows.SDK.BuildTools.MSIX", "1.7.251221100", "Microsoft package license", "https://aka.ms/WinSDKProjectURL", "https://www.nuget.org/packages/Microsoft.Windows.SDK.BuildTools.MSIX/1.7.251221100/License"),
+      new("Microsoft.Windows.SDK.BuildTools", "10.0.28000.2705", "Package license", "https://aka.ms/WinSDKProjectURL", "https://www.nuget.org/packages/Microsoft.Windows.SDK.BuildTools/10.0.28000.2705/License"),
+      new("Microsoft.CodeCoverage", "18.10.1", "MIT", "https://github.com/microsoft/vstest", "https://licenses.nuget.org/MIT"),
+      new("Microsoft.NET.Test.Sdk", "18.10.1", "MIT", "https://github.com/microsoft/vstest", "https://licenses.nuget.org/MIT"),
+      new("Microsoft.TestPlatform.ObjectModel", "18.10.1", "MIT", "https://github.com/microsoft/vstest", "https://licenses.nuget.org/MIT"),
+      new("Microsoft.TestPlatform.TestHost", "18.10.1", "MIT", "https://github.com/microsoft/vstest", "https://licenses.nuget.org/MIT"),
+      new("coverlet.collector", "10.1.0", "MIT", "https://github.com/coverlet-coverage/coverlet", "https://licenses.nuget.org/MIT"),
+      new("xunit.abstractions", "2.0.3", "Package license", "https://github.com/xunit/xunit", "https://www.nuget.org/packages/xunit.abstractions/2.0.3/License"),
+      new("xunit.analyzers", "1.18.0", "Apache-2.0", "https://github.com/xunit/xunit.analyzers", "https://licenses.nuget.org/Apache-2.0"),
+      new("xunit.assert", "2.9.3", "Apache-2.0", "https://github.com/xunit/xunit", "https://licenses.nuget.org/Apache-2.0"),
+      new("xunit.core", "2.9.3", "Apache-2.0", "https://github.com/xunit/xunit", "https://licenses.nuget.org/Apache-2.0"),
+      new("xunit.extensibility.core", "2.9.3", "Apache-2.0", "https://github.com/xunit/xunit", "https://licenses.nuget.org/Apache-2.0"),
+      new("xunit.extensibility.execution", "2.9.3", "Apache-2.0", "https://github.com/xunit/xunit", "https://licenses.nuget.org/Apache-2.0"),
+      new("xunit.runner.visualstudio", "4.0.0", "Apache-2.0", "https://github.com/xunit/visualstudio.xunit", "https://licenses.nuget.org/Apache-2.0"),
+      new("xunit", "2.9.3", "Apache-2.0", "https://github.com/xunit/xunit", "https://licenses.nuget.org/Apache-2.0"),
+      new("FlaUI.Core", "5.0.0", "MIT", "https://github.com/FlaUI/FlaUI", "https://www.nuget.org/packages/FlaUI.Core/5.0.0/License"),
+      new("FlaUI.UIA3", "5.0.0", "MIT", "https://github.com/FlaUI/FlaUI", "https://www.nuget.org/packages/FlaUI.UIA3/5.0.0/License"),
+      new("Interop.UIAutomationClient", "10.19041.0", "MIT", "https://github.com/Roemer/UIAutomation-Interop", "https://www.nuget.org/packages/Interop.UIAutomationClient/10.19041.0/License"),
+      new("Microsoft.Win32.SystemEvents", "8.0.0", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.CodeDom", "8.0.0", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.Configuration.ConfigurationManager", "8.0.1", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.Diagnostics.EventLog", "8.0.1", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.Diagnostics.PerformanceCounter", "8.0.1", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.Drawing.Common", "8.0.10", "MIT", "https://github.com/dotnet/winforms", "https://licenses.nuget.org/MIT"),
+      new("System.Management", "8.0.0", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.Security.Cryptography.ProtectedData", "8.0.0", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.Security.Permissions", "8.0.0", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+      new("System.Windows.Extensions", "8.0.0", "MIT", "https://github.com/dotnet/runtime", "https://licenses.nuget.org/MIT"),
+   ]);
+}
diff --git a/src/MarkdownViewr.Windows.Core/AppIdentity.cs b/src/MarkdownViewr.Windows.Core/AppIdentity.cs
index d90f3ae..c284366 100644
--- a/src/MarkdownViewr.Windows.Core/AppIdentity.cs
+++ b/src/MarkdownViewr.Windows.Core/AppIdentity.cs
@@ -22,7 +22,7 @@ public static class AppIdentity
    {
       Id = "markdownviewr-windows",
       DisplayName = "MarkdownViewr",
-      Tagline = "Built on the KofTwentyTwo Windows app template",
+      Tagline = "A Windows Markdown reader",
       Description = "A Windows Markdown viewer with live reload, themes and document navigation.",
       RepositoryUrl = new Uri("https://github.com/KofTwentyTwo/MarkdownViewr.Windows"),
       Author = "James Maes",
@@ -30,28 +30,48 @@ public static class AppIdentity
       // Keep the gradient in step with the mark (regenerate both with AppKit's BrandTool).
       Brand = new AppBrand
       {
-         GradientStart = "#0F766E",
-         GradientEnd = "#134E4A",
+         GradientStart = "#1A2B4D",
+         GradientEnd = "#0C1836",
          IconSvgPath = "Assets/Brand/app-icon.svg",
          IconIcoPath = "Assets/Brand/app.ico",
       },
-      Attributions =
-      [
-         new("KofTwentyTwo.AppKit", "MIT License"),
-         new("CommunityToolkit.Mvvm", "MIT License"),
-         new("Velopack", "MIT License"),
-         new("Windows App SDK / WinUI 3", "MIT License, with Microsoft binary components"),
-         new(".NET Runtime", "MIT License"),
-      ],
+      Attributions = AboutComponents.Runtime.Select(component => new Attribution(component.Name, component.License)).ToArray(),
    };
 
 
 
+   /// <summary>Installed package channels select a separate development identity; loose builds retain the stable identity.</summary>
+   public static AppInfo ForChannel(string? channel) => string.Equals(channel, "dev", StringComparison.Ordinal)
+      ? Info with { Id = "markdownviewr-windows-dev", DisplayName = "MarkdownViewr (dev)" }
+      : Info;
+
+
+
    /// <summary>Where the app keeps its per-user data; honors the data-folder override variable.</summary>
    public static AppPaths Paths { get; } = new(Info);
 
 
 
+   /// <summary>Darin Kelkhoff's original macOS viewer, credited without changing Windows support destinations.</summary>
+   public static Uri OriginalRepositoryUrl { get; } = new("https://github.com/darinkelkhoff/markdownViewr");
+
+
+
+   /// <summary>The original author's website, verified against his GitHub profile.</summary>
+   public static Uri OriginalAuthorWebsite { get; } = new("https://kelkhoff.com/");
+
+
+
+   /// <summary>The app's bug/feature templates, independent of any upstream project credited in About.</summary>
+   public static Uri IssuesUrl { get; } = new(Info.RepositoryUrl!.AbsoluteUri.TrimEnd('/') + "/issues/new/choose");
+
+
+
+   /// <summary>Community questions and tips in the app's own repository.</summary>
+   public static Uri SupportUrl { get; } = new(Info.RepositoryUrl!.AbsoluteUri.TrimEnd('/') + "/discussions");
+
+
+
    /// <summary>Loads and saves <see cref="AppSettings"/> at <see cref="AppPaths.SettingsFile"/>.</summary>
    public static SettingsStore<AppSettings> SettingsStore { get; } = new(Paths.SettingsFile, AppSettingsContext.Default.AppSettings);
 
diff --git a/src/MarkdownViewr.Windows.Core/AppSettings.cs b/src/MarkdownViewr.Windows.Core/AppSettings.cs
index b620b4f..2e0b17b 100644
--- a/src/MarkdownViewr.Windows.Core/AppSettings.cs
+++ b/src/MarkdownViewr.Windows.Core/AppSettings.cs
@@ -3,27 +3,208 @@
  * SPDX-License-Identifier: MIT
  */
 
+using System.Text.Json;
+using System.Text.Json.Serialization;
 using KofTwentyTwo.AppKit.Settings;
 
 
 namespace MarkdownViewr.Windows.Core;
 
-/// <summary>
-/// The app's preferences: AppKit's shell settings (theme, splash, update checks) plus the
-/// app's own. Add properties here, repair them in <see cref="Sanitize"/>, and they are
-/// saved by <see cref="AppIdentity.SettingsStore"/>.
-/// </summary>
+/// <summary>Persistent AppKit shell and Markdown reading preferences.</summary>
 public sealed class AppSettings : ShellSettings
 {
-   /// <summary>The name last greeted, offered again at the next start.</summary>
-   public string LastName { get; set; } = "";
+   /// <summary>The selected document theme; independent of the Windows shell theme.</summary>
+   public string DocumentTheme { get; set; } = "Catppuccin Mocha";
+
+
+   /// <summary>Validated JSON themes, saved atomically with the AppKit preferences.</summary>
+   public string[] UserThemes { get; set; } = [];
 
 
 
-   /// <summary>Repairs the shell settings, then restores a missing name (JSON can supply null).</summary>
+   /// <summary>Visible theme order, including disabled choices managed separately from their JSON data.</summary>
+   public string[] ThemeOrder { get; set; } = [];
+
+
+
+   /// <summary>Disabled choices remain editable but are omitted from reading menus and cycling.</summary>
+   public string[] DisabledThemes { get; set; } = [];
+
+
+
+   /// <summary>Hidden bundled themes can be restored without damaging shipped resources.</summary>
+   public string[] DeletedBuiltInThemes { get; set; } = [];
+
+
+
+   /// <summary>The frontmatter display mode, saved independently of document contents.</summary>
+   public string Frontmatter { get; set; } = "Hide";
+
+
+
+   /// <summary>Repairs unknown saved mode values to the reference's default.</summary>
+   [JsonIgnore]
+   public Documents.FrontmatterMode FrontmatterKind => Enum.TryParse(Frontmatter, out Documents.FrontmatterMode mode) && Enum.IsDefined(mode) ? mode : Documents.FrontmatterMode.Hide;
+
+
+   /// <summary>Renders double-equals highlights; disabled syntax remains literal.</summary>
+   public bool RenderHighlight { get; set; } = true;
+
+
+
+   /// <summary>Renders single-caret superscripts independently of other Markdown extensions.</summary>
+   public bool RenderSuperscript { get; set; } = true;
+
+
+
+   /// <summary>Renders single-tilde subscripts while double-tilde GFM strikethrough remains enabled.</summary>
+   public bool RenderSubscript { get; set; } = true;
+
+
+
+   /// <summary>Renders double-plus inserted/underlined content.</summary>
+   public bool RenderUnderline { get; set; } = true;
+
+
+
+   /// <summary>An immutable snapshot captures this window's options before asynchronous parsing begins.</summary>
+   [JsonIgnore]
+   public Documents.MarkdownExtensions MarkdownExtensions => new(RenderHighlight, RenderSuperscript, RenderSubscript, RenderUnderline);
+
+
+
+   /// <summary>Limits reader content width, independently of print layout.</summary>
+   public bool ContentWidthEnabled { get; set; } = true;
+
+
+
+   /// <summary>The reference's 1000-pixel default scales with reading zoom.</summary>
+   public double ContentWidthPx { get; set; } = 1000;
+
+
+
+   /// <summary>Native user CSS shared across themes; saved separately from each theme's own CSS.</summary>
+   public string GlobalCss { get; set; } = "";
+
+
+
+   /// <summary>An immutable window snapshot keeps asynchronous style changes independent of saved theme data.</summary>
+   [JsonIgnore]
+   public Themes.ReadingAppearance ReadingAppearance => new(ContentWidthEnabled, ContentWidthPx, GlobalCss);
+
+
+
+   /// <summary>New document windows start with Contents hidden unless explicitly enabled in Settings.</summary>
+   public bool ShowOutlineByDefault { get; set; }
+
+
+
+   /// <summary>New document windows start with Source hidden unless explicitly enabled in Settings.</summary>
+   public bool ShowSourceByDefault { get; set; }
+
+
+
+   /// <summary>Shows the native heading sidebar in this window without changing the selected startup default.</summary>
+   public bool ShowOutline { get; set; }
+
+
+
+   /// <summary>Maximum heading depth displayed in the sidebar.</summary>
+   public int OutlineDepth { get; set; } = 3;
+
+
+
+   /// <summary>Long Contents entries wrap in full; otherwise they use one line with an ellipsis and full-title tooltip.</summary>
+   public bool WrapOutlineEntries { get; set; }
+
+
+
+   /// <summary>Optional native depth markers distinguish heading levels without changing titles or identities.</summary>
+   public bool ShowOutlineDepthMarkers { get; set; }
+
+
+
+   /// <summary>Last native sidebar width in device-independent pixels.</summary>
+   public double OutlineWidth { get; set; } = 220;
+
+
+   /// <summary>Shows the literal, read-only Markdown snapshot beside the rendered document.</summary>
+   public bool ShowSource { get; set; }
+
+
+
+   /// <summary>Legacy fixed-width preference retained for older settings; current source opens at50/50 and resizes within each window.</summary>
+   public double SourceWidth { get; set; } = 320;
+
+
+
+   /// <summary>Legacy single-editor path, migrated into the list and kept as the first choice for compatible settings readers.</summary>
+   public string ExternalEditor { get; set; } = "";
+
+
+
+   /// <summary>Ordered named editor choices; the legacy path migrates into one entry on load.</summary>
+   public Editors.EditorConfiguration[] ConfiguredEditors { get; set; } = [];
+
+
+
+   /// <summary>Private bounded successful-open history; clearable without deleting documents.</summary>
+   public string[] RecentFiles { get; set; } = [];
+
+
+
+   /// <summary>Saved print choices are independent of the reading theme and window-local zoom.</summary>
+   public Printing.PrintOptions Print { get; set; } = new();
+
+
+
+   /// <inheritdoc/>
    public override void Sanitize()
    {
       base.Sanitize();
-      LastName ??= "";
+      Themes.ReadingAppearance appearance = ReadingAppearance.Sanitize();
+      ContentWidthPx = appearance.WidthPixels;
+      GlobalCss = appearance.GlobalCss;
+      RecentFiles = Documents.RecentDocuments.Sanitize(RecentFiles);
+      Print = (Print ?? new Printing.PrintOptions()).Sanitize();
+      ExternalEditor = Editors.EditorLaunch.IsExecutablePath(ExternalEditor) ? ExternalEditor : "";
+      ConfiguredEditors = Editors.EditorConfiguration.Sanitize(ConfiguredEditors);
+      if(ConfiguredEditors.Length == 0 && ExternalEditor.Length > 0)
+      {
+         ConfiguredEditors = [new Editors.EditorConfiguration(Guid.NewGuid(), "Editor", ExternalEditor)];
+      }
+      ExternalEditor = ConfiguredEditors.FirstOrDefault()?.Executable ?? "";
+      SourceWidth = double.IsFinite(SourceWidth) ? Math.Clamp(SourceWidth, 160, 600) : 320;
+      OutlineDepth = Math.Clamp(OutlineDepth, 1, 6);
+      OutlineWidth = double.IsFinite(OutlineWidth) ? Math.Clamp(OutlineWidth, 140, 500) : 220;
+      Frontmatter = FrontmatterKind.ToString();
+      if(string.IsNullOrWhiteSpace(DocumentTheme) || DocumentTheme.Length > 80 || DocumentTheme.Any(char.IsControl))
+      {
+         DocumentTheme = "Catppuccin Mocha";
+      }
+      UserThemes = (UserThemes ?? []).Where(IsValidTheme).ToArray();
+      ThemeOrder = Themes.ThemeManagement.SanitizeNames(ThemeOrder);
+      DisabledThemes = Themes.ThemeManagement.SanitizeNames(DisabledThemes);
+      DeletedBuiltInThemes = Themes.ThemeManagement.SanitizeNames(DeletedBuiltInThemes);
+   }
+
+
+
+   /// <summary>A corrupt saved theme cannot prevent application startup or damage the bundled catalog.</summary>
+   private static bool IsValidTheme(string json)
+   {
+      if(string.IsNullOrEmpty(json))
+      {
+         return false;
+      }
+      try
+      {
+         _ = Themes.ReaderTheme.ParseCompatible(json);
+         return true;
+      }
+      catch(JsonException)
+      {
+         return false;
+      }
    }
 }
diff --git a/src/MarkdownViewr.Windows.Core/AppSettingsContext.cs b/src/MarkdownViewr.Windows.Core/AppSettingsContext.cs
index 58d9729..0ad1c6f 100644
--- a/src/MarkdownViewr.Windows.Core/AppSettingsContext.cs
+++ b/src/MarkdownViewr.Windows.Core/AppSettingsContext.cs
@@ -11,6 +11,6 @@ namespace MarkdownViewr.Windows.Core;
 /// <summary>Source-generated JSON serializer for <see cref="AppSettings"/>, so trimmed builds need no reflection.</summary>
 [JsonSourceGenerationOptions(WriteIndented = true)]
 [JsonSerializable(typeof(AppSettings))]
-internal sealed partial class AppSettingsContext : JsonSerializerContext
+public sealed partial class AppSettingsContext : JsonSerializerContext
 {
 }
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentFind.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentFind.cs
new file mode 100644
index 0000000..a5f7deb
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentFind.cs
@@ -0,0 +1,91 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Pairs literal source occurrences with rendered matches without counting the two views twice.</summary>
+public sealed class DocumentFind
+{
+   /// <summary>Bounds a native search term independently of document size.</summary>
+   public const int MaximumQueryCharacters = 256;
+
+   private int _renderedCount;
+
+
+
+   /// <summary>Finds nonoverlapping case-insensitive literal text; user input is never a regular expression.</summary>
+   public DocumentFind(string source, string query)
+   {
+      ArgumentNullException.ThrowIfNull(source);
+      ArgumentNullException.ThrowIfNull(query);
+      if(source.Length > MarkdownRenderer.MaximumCharacters || query.Length > MaximumQueryCharacters)
+      {
+         throw new ArgumentException("The document or find term exceeds its supported size.", source.Length > MarkdownRenderer.MaximumCharacters ? nameof(source) : nameof(query));
+      }
+      Query = query;
+      var matches = new List<int>();
+      if(query.Length > 0)
+      {
+         int offset = 0;
+         while(offset <= source.Length - query.Length)
+         {
+            int position = source.IndexOf(query, offset, StringComparison.OrdinalIgnoreCase);
+            if(position < 0)
+            {
+               break;
+            }
+            matches.Add(position);
+            offset = position + query.Length;
+         }
+      }
+      SourceMatches = matches.AsReadOnly();
+      Current = matches.Count > 0 ? 1 : 0;
+   }
+
+
+
+   /// <summary>The literal query shared by both surfaces.</summary>
+   public string Query { get; }
+
+
+
+   /// <summary>UTF-16 offsets into the literal source, in document order.</summary>
+   public IReadOnlyList<int> SourceMatches { get; }
+
+
+
+   /// <summary>Uses the reference's paired occurrence count, including text visible in only one surface.</summary>
+   public int Total => Math.Max(SourceMatches.Count, _renderedCount);
+
+
+
+   /// <summary>One-based current occurrence; zero means no matches.</summary>
+   public int Current { get; private set; }
+
+
+
+   /// <summary>The current source range, or no range when the rendered document has more occurrences.</summary>
+   public (int Start, int Length)? SourceSelection => Current > 0 && Current <= SourceMatches.Count ? (SourceMatches[Current - 1], Query.Length) : null;
+
+
+
+   /// <summary>Browser count changes retain a valid occurrence and cannot create a negative total.</summary>
+   public void SetRenderedCount(int count)
+   {
+      _renderedCount = Query.Length > 0 ? Math.Max(0, count) : 0;
+      Current = Total > 0 ? Math.Clamp(Current, 1, Total) : 0;
+   }
+
+
+
+   /// <summary>Advances one paired occurrence and wraps at the end.</summary>
+   public void Next() => Current = Total > 0 ? (Current >= Total ? 1 : Current + 1) : 0;
+
+
+
+   /// <summary>Moves back one paired occurrence and wraps at the beginning.</summary>
+   public void Previous() => Current = Total > 0 ? (Current <= 1 ? Total : Current - 1) : 0;
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentFrontmatter.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentFrontmatter.cs
new file mode 100644
index 0000000..4265de8
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentFrontmatter.cs
@@ -0,0 +1,80 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Net;
+using System.Text;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Adapts Darin's delimiter and line-based metadata display without interpreting YAML as commands.</summary>
+internal static class DocumentFrontmatter
+{
+   /// <summary>An absent closing delimiter leaves the original document untouched.</summary>
+   public static (string? Metadata, string Body) Split(string markdown)
+   {
+      string[] lines = markdown.Split('\n');
+      if(lines.Length < 2 || !string.Equals(lines[0].Trim(), "---", StringComparison.Ordinal))
+      {
+         return (null, markdown);
+      }
+      int end = Array.FindIndex(lines, 1, line => string.Equals(line.Trim(), "---", StringComparison.Ordinal));
+      if(end < 0)
+      {
+         return (null, markdown);
+      }
+      return (string.Join('\n', lines[1..end]), string.Join('\n', lines[(end + 1)..]));
+   }
+
+
+
+   /// <summary>Metadata is display text: split only at the first colon and escape every value before creating table markup.</summary>
+   public static string RenderMetadata(string metadata)
+   {
+      var html = new StringBuilder("<div class=\"frontmatter\"><table><caption>Document metadata</caption>");
+      foreach(string line in metadata.Split('\n'))
+      {
+         string text = line.Trim();
+         if(text.Length == 0)
+         {
+            continue;
+         }
+         int colon = text.IndexOf(':');
+         html.Append("<tr>");
+         if(colon >= 0)
+         {
+            html.Append("<th class=\"fm-key\">").Append(WebUtility.HtmlEncode(PlainValue(text[..colon]))).Append("</th>");
+            html.Append("<td class=\"fm-value\">").Append(WebUtility.HtmlEncode(PlainValue(text[(colon + 1)..]))).Append("</td>");
+         }
+         else
+         {
+            html.Append("<td class=\"fm-value\" colspan=\"2\">").Append(WebUtility.HtmlEncode(PlainValue(text))).Append("</td>");
+         }
+         html.Append("</tr>");
+      }
+      return html.Append("</table></div>").ToString();
+   }
+
+
+
+   /// <summary>Matches the reference's plain metadata labels while preserving mid-word punctuation.</summary>
+   private static string PlainValue(string text)
+   {
+      foreach(string marker in new[] { "***", "**", "__", "~~" })
+      {
+         text = text.Replace(marker, "", StringComparison.Ordinal);
+      }
+      text = text.Trim();
+      foreach(char marker in new[] { '*', '_', '`' })
+      {
+         if(text.StartsWith(marker) && text.EndsWith(marker))
+         {
+            text = text.Length > 1 ? text[1..^1] : "";
+         }
+      }
+      return text.Trim();
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentHeading.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentHeading.cs
new file mode 100644
index 0000000..da3c06e
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentHeading.cs
@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>A passive heading label and host-generated numeric identity for native navigation.</summary>
+public sealed record DocumentHeading(int Index, int Level, string Title);
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentLoadScheduler.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentLoadScheduler.cs
new file mode 100644
index 0000000..69d0536
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentLoadScheduler.cs
@@ -0,0 +1,54 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Serializes UI document requests, coalescing reloads while preserving a new picker selection.</summary>
+public sealed class DocumentLoadScheduler
+{
+   private bool _active;
+   private string? _pendingReloadPath;
+   private string? _pendingOpenPath;
+
+
+
+   /// <summary>Starts an idle loader; busy reloads coalesce and the latest explicit selection takes priority.</summary>
+   public bool TryBegin(string path, bool reload)
+   {
+      if(!_active)
+      {
+         _active = true;
+         return true;
+      }
+      if(reload)
+      {
+         _pendingReloadPath = path;
+      }
+      else
+      {
+         _pendingOpenPath = path;
+      }
+      return false;
+   }
+
+
+
+   /// <summary>Finishes one load and consumes at most one queued request for the current document.</summary>
+   public (string Path, bool Reload)? Complete(string? currentPath)
+   {
+      _active = false;
+      if(_pendingOpenPath is not null)
+      {
+         string path = _pendingOpenPath;
+         _pendingOpenPath = null;
+         return (path, false);
+      }
+      (string Path, bool Reload)? next = _pendingReloadPath is not null && currentPath is not null &&
+         string.Equals(_pendingReloadPath, currentPath, StringComparison.Ordinal) ? (currentPath, true) : null;
+      _pendingReloadPath = null;
+      return next;
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentOutline.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentOutline.cs
new file mode 100644
index 0000000..2864589
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentOutline.cs
@@ -0,0 +1,118 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using AngleSharp.Dom;
+using AngleSharp.Html.Parser;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Builds native heading data and nested passive sections only after Markdown has been sanitized.</summary>
+public sealed class DocumentOutline
+{
+   private readonly List<DocumentHeading> _headings = [];
+   private readonly Dictionary<IElement, DocumentHeading> _elements = [];
+
+
+
+   /// <summary>Sanitizes first; authored identifiers cannot impersonate the generated navigation targets.</summary>
+   public DocumentOutline(string markdown, FrontmatterMode frontmatter = FrontmatterMode.Hide, MarkdownExtensions? extensions = null)
+   {
+      var sources = new DocumentSourceMap(markdown);
+      var sourceHeadings = new List<DocumentSourceHeading>();
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer(extensions).RenderWithSources(markdown, frontmatter, sources));
+      IElement body = document.Body!;
+      var fragments = new Dictionary<string, string>(StringComparer.Ordinal);
+      foreach(IElement element in body.QuerySelectorAll("h1,h2,h3,h4,h5,h6"))
+      {
+         var heading = new DocumentHeading(_headings.Count, element.LocalName[1] - '0', element.TextContent.Trim());
+         _headings.Add(heading);
+         if(element.GetAttribute(sources.AttributeName) is { } identity && sources.TryGetPosition(identity, out (int Start, int End) position))
+         {
+            sourceHeadings.Add(new DocumentSourceHeading(heading.Index, position.Start, position.End));
+         }
+         _elements.Add(element, heading);
+         element.Id = "mv-heading-" + heading.Index.ToString(CultureInfo.InvariantCulture);
+         string slug = Markdig.Helpers.LinkHelper.UrilizeAsGfm(heading.Title);
+         string fragment = slug;
+         for(int suffix = 1; fragments.ContainsKey(fragment); suffix++)
+         {
+            fragment = slug + "-" + suffix.ToString(CultureInfo.InvariantCulture);
+         }
+         fragments.Add(fragment, element.Id);
+      }
+      foreach(IElement element in body.QuerySelectorAll("[" + sources.AttributeName + "]"))
+      {
+         element.RemoveAttribute(sources.AttributeName);
+      }
+      foreach(IElement link in body.QuerySelectorAll("a[href]"))
+      {
+         string href = link.GetAttribute("href")!;
+         if(href.StartsWith('#') && fragments.TryGetValue(Uri.UnescapeDataString(href[1..]), out string? target))
+         {
+            link.SetAttribute("href", "#" + target);
+         }
+      }
+      foreach(IElement element in body.QuerySelectorAll("*").Reverse())
+      {
+         if(!_elements.ContainsKey(element))
+         {
+            WrapSections(element, document);
+         }
+      }
+      WrapSections(body, document);
+      Html = body.InnerHtml;
+      Headings = _headings.AsReadOnly();
+      SourceHeadings = sourceHeadings.AsReadOnly();
+   }
+
+
+
+   /// <summary>Sanitized HTML plus only the host's generated identifiers and structural attributes.</summary>
+   public string Html { get; }
+
+
+
+   /// <summary>Headings in document order, including duplicate labels and headings inside authored containers.</summary>
+   public IReadOnlyList<DocumentHeading> Headings { get; }
+
+
+
+   /// <summary>Parser-derived offsets of surviving headings in the original literal snapshot, independent of duplicate labels.</summary>
+   public IReadOnlyList<DocumentSourceHeading> SourceHeadings { get; }
+
+
+
+   /// <summary>Groups each heading until the next peer or ancestor, keeping nested section collapse independent.</summary>
+   private void WrapSections(IElement parent, IDocument document)
+   {
+      INode[] children = parent.ChildNodes.ToArray();
+
+      parent.TextContent = "";
+      var sections = new Stack<(int Level, IElement Content)>();
+      foreach(INode child in children)
+      {
+         if(child is IElement element && _elements.TryGetValue(element, out DocumentHeading? heading))
+         {
+            while(sections.TryPeek(out (int Level, IElement Content) top) && top.Level >= heading.Level)
+            {
+               sections.Pop();
+            }
+            IElement section = document.CreateElement("section");
+            IElement content = document.CreateElement("div");
+            content.SetAttribute("data-mv-body", heading.Index.ToString(CultureInfo.InvariantCulture));
+            section.AppendChild(element);
+            section.AppendChild(content);
+            (sections.Count > 0 ? sections.Peek().Content : parent).AppendChild(section);
+            sections.Push((heading.Level, content));
+         }
+         else
+         {
+            (sections.Count > 0 ? sections.Peek().Content : parent).AppendChild(child);
+         }
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentPage.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentPage.cs
new file mode 100644
index 0000000..2192243
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentPage.cs
@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Net;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Preserves the reference rendered-document containers; TOC/source remain native Windows controls.</summary>
+public static class DocumentPage
+{
+   /// <summary>Wraps already-sanitized renderer output; title and theme CSS cannot break their HTML boundaries.</summary>
+   public static string Build(string sanitizedHtml, string title, ReaderTheme theme, ReadingAppearance appearance, double zoomScale)
+   {
+      ArgumentNullException.ThrowIfNull(sanitizedHtml);
+      ArgumentNullException.ThrowIfNull(title);
+      ArgumentNullException.ThrowIfNull(theme);
+      ArgumentNullException.ThrowIfNull(appearance);
+      return $"""<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>{WebUtility.HtmlEncode(title)}</title><style media="screen">{theme.GetReadingStyles(appearance, zoomScale)}</style></head><body><div id="content" role="main" aria-label="Document reading area" tabindex="0"><div id="content-inner">{sanitizedHtml}</div></div></body></html>""";
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentResourcePolicy.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentResourcePolicy.cs
new file mode 100644
index 0000000..7c9a983
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentResourcePolicy.cs
@@ -0,0 +1,99 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Bounds passive image requests and user-initiated native document links to one opened document namespace.</summary>
+public sealed class DocumentResourcePolicy
+{
+   private static readonly HashSet<string> s_imageExtensions = new(StringComparer.OrdinalIgnoreCase)
+   {
+      ".png", ".jpg", ".jpeg", ".gif", ".bmp", ".webp", ".svg", ".avif", ".ico",
+   };
+
+   private static readonly HashSet<string> s_documentExtensions = new(StringComparer.OrdinalIgnoreCase)
+   {
+      ".md", ".markdown", ".mdown", ".mkd", ".txt",
+   };
+
+   private static readonly HashSet<string> s_deviceNames = new(StringComparer.OrdinalIgnoreCase)
+   {
+      "CON", "PRN", "AUX", "NUL", "COM1", "COM2", "COM3", "COM4", "COM5", "COM6", "COM7", "COM8", "COM9",
+      "LPT1", "LPT2", "LPT3", "LPT4", "LPT5", "LPT6", "LPT7", "LPT8", "LPT9", "COM¹", "COM²", "COM³", "LPT¹", "LPT²", "LPT³",
+   };
+
+   private readonly string _prefix;
+
+
+
+   /// <summary>Creates an isolated logical resource namespace for this document; no HTTP server is started.</summary>
+   public DocumentResourcePolicy()
+   {
+      _prefix = $"/documents/{Guid.NewGuid():N}/";
+      DocumentUri = new Uri("https://viewer.markdownviewr.invalid" + _prefix + "index.html");
+   }
+
+
+
+   /// <summary>The only top-level document URI the browser host may serve.</summary>
+   public Uri DocumentUri { get; }
+
+
+
+   /// <summary>Allows only an in-range generated heading fragment on this exact document, without query/native arguments.</summary>
+   public int? GetHeadingIndex(Uri request, int headingCount)
+   {
+      ArgumentNullException.ThrowIfNull(request);
+      if(!request.IsAbsoluteUri || request.Query.Length != 0 || !string.Equals(request.GetLeftPart(UriPartial.Path), DocumentUri.AbsoluteUri, StringComparison.Ordinal))
+      {
+         return null;
+      }
+      return request.Fragment.StartsWith("#mv-heading-", StringComparison.Ordinal) &&
+         int.TryParse(request.Fragment.AsSpan(12), System.Globalization.NumberStyles.None, System.Globalization.CultureInfo.InvariantCulture, out int index) && index < headingCount ? index : null;
+   }
+
+
+   /// <summary>Returns a decoded relative image path, or denies the request before filesystem access.</summary>
+   public string? GetImageRelativePath(Uri request) => GetRelativePath(request, s_imageExtensions);
+
+
+
+   /// <summary>A deliberate local document link may read a supported type, never another scheme, query or native command.</summary>
+   public string? GetDocumentRelativePath(Uri request)
+   {
+      ArgumentNullException.ThrowIfNull(request);
+      return request.IsAbsoluteUri && request.Query.Length == 0 ? GetRelativePath(request, s_documentExtensions) : null;
+   }
+
+
+
+   /// <summary>Shares once-only decoding and segment containment between images and native document-link requests.</summary>
+   private string? GetRelativePath(Uri request, HashSet<string> extensions)
+   {
+      ArgumentNullException.ThrowIfNull(request);
+      if(!request.IsAbsoluteUri || !string.Equals(request.Scheme, "https", StringComparison.Ordinal) || !string.Equals(request.Host, DocumentUri.Host, StringComparison.Ordinal) || request.Port != 443 ||
+         request.UserInfo.Length != 0 || !request.AbsolutePath.StartsWith(_prefix, StringComparison.Ordinal))
+      {
+         return null;
+      }
+      string relative = Uri.UnescapeDataString(request.AbsolutePath[_prefix.Length..]);
+      if(!extensions.Contains(Path.GetExtension(relative)) || relative.Split('/').Any(segment => !IsSafeSegment(segment)))
+      {
+         return null;
+      }
+      return relative;
+   }
+
+
+
+   /// <summary>Rejects traversal, device names, separators, controls and Windows filename aliases.</summary>
+   private static bool IsSafeSegment(string segment)
+   {
+      return segment.Length > 0 && segment is not ("." or "..") && !segment.EndsWith(' ') && !segment.EndsWith('.') &&
+         !segment.Any(character => char.IsControl(character) || "<>:\\|?*".Contains(character, StringComparison.Ordinal)) &&
+         !s_deviceNames.Contains(segment.Split('.')[0]);
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentScrollState.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentScrollState.cs
new file mode 100644
index 0000000..fe355da
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentScrollState.cs
@@ -0,0 +1,136 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Validated numeric geometry from a fixed host query, used for bidirectional heading-anchored synchronization.</summary>
+public sealed class DocumentScrollState
+{
+   /// <summary>Stores only current generated identities, finite geometry and bounded collapse choices.</summary>
+   private DocumentScrollState(double position, double maximum, Dictionary<int, double> headings, List<int> collapsed)
+   {
+      Position = Math.Clamp(position, 0, maximum);
+      Maximum = maximum;
+      Headings = headings;
+      Collapsed = collapsed.AsReadOnly();
+   }
+
+
+
+   /// <summary>The actual vertical viewport offset, bounded by the available scroll range.</summary>
+   public double Position { get; }
+
+
+
+   /// <summary>The available vertical scroll range, independent of content height.</summary>
+   public double Maximum { get; }
+
+
+
+   /// <summary>Visible generated heading identities and document-coordinate tops.</summary>
+   public IReadOnlyDictionary<int, double> Headings { get; }
+
+
+
+   /// <summary>Actual hidden generated section bodies, including independent nested choices.</summary>
+   public IReadOnlyList<int> Collapsed { get; }
+
+
+
+   /// <summary>Rejects malformed, oversized, duplicate or out-of-range geometry rather than allowing arbitrary browser data into commands.</summary>
+   public static DocumentScrollState? FromBrowserResult(string? json, int headingCount)
+   {
+      ArgumentOutOfRangeException.ThrowIfNegative(headingCount);
+      if(json is null || json.Length > headingCount * 128L + 512)
+      {
+         return null;
+      }
+      try
+      {
+         using var document = JsonDocument.Parse(json);
+         JsonElement root = document.RootElement;
+         if(root.ValueKind != JsonValueKind.Array || root.GetArrayLength() != 4 || !Number(root[0], out double position) || !Number(root[1], out double maximum) || maximum < 0 ||
+            root[2].ValueKind != JsonValueKind.Array || root[2].GetArrayLength() > headingCount || root[3].ValueKind != JsonValueKind.Array || root[3].GetArrayLength() > headingCount)
+         {
+            return null;
+         }
+         var headings = new Dictionary<int, double>();
+         foreach(JsonElement entry in root[2].EnumerateArray())
+         {
+            if(entry.ValueKind != JsonValueKind.Array || entry.GetArrayLength() != 2 || !Identity(entry[0], headingCount, out int index) || !Number(entry[1], out double top) || !headings.TryAdd(index, top))
+            {
+               return null;
+            }
+         }
+         var collapsed = new List<int>();
+         var seen = new HashSet<int>();
+         foreach(JsonElement entry in root[3].EnumerateArray())
+         {
+            if(!Identity(entry, headingCount, out int index) || !seen.Add(index))
+            {
+               return null;
+            }
+            collapsed.Add(index);
+         }
+         return new DocumentScrollState(position, maximum, headings, collapsed);
+      }
+      catch(JsonException)
+      {
+         return null;
+      }
+   }
+
+
+
+   /// <summary>Interpolates paired heading coordinates with explicit top/bottom anchors; no-heading documents use relative scrolling.</summary>
+   public static double MapPosition(double position, double fromMaximum, double toMaximum, IEnumerable<(double From, double To)> anchors)
+   {
+      ArgumentNullException.ThrowIfNull(anchors);
+      if(!double.IsFinite(position) || !double.IsFinite(fromMaximum) || !double.IsFinite(toMaximum) || fromMaximum <= 0 || toMaximum <= 0)
+      {
+         return 0;
+      }
+      double current = Math.Clamp(position, 0, fromMaximum);
+      double previousFrom = 0;
+      double previousTo = 0;
+      foreach((double from, double to) in anchors.Where(pair => double.IsFinite(pair.From) && double.IsFinite(pair.To) && pair.From > 0 && pair.From < fromMaximum).OrderBy(pair => pair.From))
+      {
+         if(from <= previousFrom)
+         {
+            continue;
+         }
+         double target = Math.Clamp(to, 0, toMaximum);
+         if(current <= from)
+         {
+            return Math.Clamp(previousTo + (current - previousFrom) / (from - previousFrom) * (target - previousTo), 0, toMaximum);
+         }
+         previousFrom = from;
+         previousTo = target;
+      }
+      return Math.Clamp(previousTo + (current - previousFrom) / (fromMaximum - previousFrom) * (toMaximum - previousTo), 0, toMaximum);
+   }
+
+
+
+   /// <summary>Only finite JSON numbers participate in pixel interpolation.</summary>
+   private static bool Number(JsonElement element, out double value)
+   {
+      value = 0;
+      return element.ValueKind == JsonValueKind.Number && element.TryGetDouble(out value) && double.IsFinite(value);
+   }
+
+
+
+   /// <summary>Only the exact current generated heading range can be addressed.</summary>
+   private static bool Identity(JsonElement element, int count, out int value)
+   {
+      value = -1;
+      return element.ValueKind == JsonValueKind.Number && element.TryGetInt32(out value) && value >= 0 && value < count;
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceHeading.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceHeading.cs
new file mode 100644
index 0000000..374ed81
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceHeading.cs
@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Original UTF-16 heading syntax offsets, with an exclusive end, paired with a generated rendered identity.</summary>
+public sealed record DocumentSourceHeading(int Index, int Start, int End);
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceMap.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceMap.cs
new file mode 100644
index 0000000..649e605
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceMap.cs
@@ -0,0 +1,282 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using AngleSharp.Dom;
+using AngleSharp.Html.Parser;
+using Markdig;
+using Markdig.Helpers;
+using Markdig.Renderers.Html;
+using Markdig.Syntax;
+using Markdig.Syntax.Inlines;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Carries parser provenance through sanitation using a fresh private attribute removed before presentation.</summary>
+internal sealed class DocumentSourceMap
+{
+   private readonly int[] _lineEnds;
+   private readonly Dictionary<string, (int Start, int End)> _positions = new(StringComparer.Ordinal);
+
+
+
+   /// <summary>A document cannot predict the per-render attribute or provide its own source identities.</summary>
+   public DocumentSourceMap(string source)
+   {
+      ArgumentNullException.ThrowIfNull(source);
+      var ends = new List<int>();
+      for(int index = 0; index < source.Length; index++)
+      {
+         if(source[index] is '\r' or '\n')
+         {
+            ends.Add(index);
+            if(source[index] == '\r' && index + 1 < source.Length && source[index + 1] == '\n')
+            {
+               index++;
+            }
+         }
+      }
+      ends.Add(source.Length);
+      _lineEnds = ends.ToArray();
+      AttributeName = "data-mv-source-" + Guid.NewGuid().ToString("N");
+   }
+
+
+
+   /// <summary>Allowed only during this internal render, never in the public renderer's authored attribute policy.</summary>
+   public string AttributeName { get; }
+
+
+
+   /// <summary>Maps only surviving host-marked headings, not matching text labels or authored attributes.</summary>
+   public bool TryGetPosition(string identity, out (int Start, int End) position) => _positions.TryGetValue(identity, out position);
+
+
+
+   /// <summary>AST headings include Setext and exclude fences; raw HTML uses parser tokens and original line slices.</summary>
+   public string Render(string markdown, MarkdownPipeline pipeline, int offset, Func<MarkdownDocument, string> render)
+   {
+      MarkdownDocument document = Markdown.Parse(markdown, pipeline);
+      foreach(MarkdownObject node in document.Descendants())
+      {
+         if(node is HeadingBlock heading)
+         {
+            heading.GetAttributes().AddProperty(AttributeName, AddPosition(offset + heading.Span.Start, EndOfLine(offset + heading.Span.End)));
+         }
+         else if(node is HtmlBlock block)
+         {
+            AnnotateHtmlBlock(block, offset);
+         }
+         if(node is LeafBlock { Inline: not null } leaf)
+         {
+            AnnotateInlineHeadings(leaf, offset);
+         }
+      }
+      return render(document);
+   }
+
+
+
+   /// <summary>A real opening heading tag is distinguished from comments, closing tags and heading-like tag names.</summary>
+   private static bool IsHeadingTag(string tag) => tag.Length > 3 && tag.StartsWith("<h", StringComparison.OrdinalIgnoreCase) && tag[2] is >= '1' and <= '6' && (tag[3] is '>' or '/' || char.IsWhiteSpace(tag[3]));
+
+
+
+   /// <summary>Pairs actual inline heading nodes within one Markdown leaf, excluding fenced/inline code and comment lookalikes.</summary>
+   private void AnnotateInlineHeadings(LeafBlock leaf, int offset)
+   {
+      HtmlInline? opening = null;
+      foreach(HtmlInline inline in leaf.Inline!.Descendants().OfType<HtmlInline>())
+      {
+         if(IsHeadingTag(inline.Tag))
+         {
+            if(opening is not null)
+            {
+               AnnotateInlineHeading(opening, opening.Span.End, offset);
+            }
+            opening = inline;
+         }
+         else if(opening is not null && inline.Tag.Length > 4 && inline.Tag.StartsWith("</h", StringComparison.OrdinalIgnoreCase)
+            && inline.Tag[3] is >= '1' and <= '6' && (inline.Tag[4] == '>' || char.IsWhiteSpace(inline.Tag[4])))
+         {
+            AnnotateInlineHeading(opening, inline.Span.End, offset);
+            opening = null;
+         }
+      }
+      if(opening is not null)
+      {
+         AnnotateInlineHeading(opening, InlineHeadingEnd(leaf, opening), offset);
+      }
+   }
+
+
+
+   /// <summary>Consecutive raw HTML blocks can finish an inline title; a new heading or Markdown block prevents borrowing later syntax.</summary>
+   private static int InlineHeadingEnd(LeafBlock leaf, HtmlInline opening)
+   {
+      ContainerBlock parent = leaf.Parent!;
+      for(int index = parent.IndexOf(leaf) + 1; index < parent.Count && parent[index] is HtmlBlock block; index++)
+      {
+         (int? end, bool boundary) = HeadingBoundary(block);
+         if(end is { } close)
+         {
+            return close;
+         }
+         if(boundary)
+         {
+            break;
+         }
+      }
+      return opening.Span.End;
+   }
+
+
+
+   /// <summary>Actual HTML tokens distinguish a finishing tag from a new heading, excluding comments and quoted-attribute lookalikes.</summary>
+   private static (int? End, bool Boundary) HeadingBoundary(HtmlBlock block)
+   {
+      StringLine[] lines = block.Lines.Lines;
+      string html = string.Join('\n', lines.Take(block.Lines.Count).Select(line => line.Slice.ToString()));
+      int? close = null;
+      bool seenTag = false;
+      var parser = new HtmlParser(new HtmlParserOptions
+      {
+         OnToken = (token, range) =>
+         {
+            if(!seenTag && token.Type is HtmlTokenType.StartTag or HtmlTokenType.EndTag
+               && token.Name.Length == 2 && token.Name[0] == 'h' && token.Name[1] is >= '1' and <= '6')
+            {
+               seenTag = true;
+               if(token.Type == HtmlTokenType.EndTag)
+               {
+                  close = range.End.Index - 1;
+               }
+            }
+         },
+      });
+      using AngleSharp.Html.Dom.IHtmlDocument document = parser.ParseDocument(html);
+      if(close is not { } position)
+      {
+         return (null, seenTag);
+      }
+      int index = 0;
+      while(position >= lines[index].Slice.Length)
+      {
+         position -= lines[index].Slice.Length + 1;
+         index++;
+      }
+      return (lines[index].Slice.Start + position, true);
+   }
+
+
+
+   /// <summary>Retains original syntax through the parsed closing line while inserting only the private identity in the opening tag.</summary>
+   private void AnnotateInlineHeading(HtmlInline opening, int end, int offset)
+   {
+      opening.Tag = opening.Tag.Insert(3, Attribute(AddPosition(offset + opening.Span.Start, EndOfLine(offset + end))));
+   }
+
+
+
+   /// <summary>Registers the parser-derived range under a generated identity; offsets stay in the immutable original snapshot.</summary>
+   private string AddPosition(int start, int end)
+   {
+      string identity = _positions.Count.ToString(CultureInfo.InvariantCulture);
+      _positions.Add(identity, (start, end));
+      return identity;
+   }
+
+
+
+   /// <summary>Raw heading markup stays on its original source line; the canonical snapshot is never rewritten.</summary>
+   private int EndOfLine(int start)
+   {
+      int index = Array.BinarySearch(_lineEnds, start);
+      return _lineEnds[index >= 0 ? index : ~index];
+   }
+
+
+
+   /// <summary>The private marker contains only generated ASCII identities, never document text.</summary>
+   private string Attribute(string identity) => " " + AttributeName + "=\"" + identity + "\"";
+
+
+
+   /// <summary>Tokenizer spans preserve complete raw headings across lines without mistaking quoted attributes or comments for closing syntax.</summary>
+   private static HtmlParser CreateSourceParser(Dictionary<int, int> headingEnds)
+   {
+      int pendingHeading = -1;
+      return new HtmlParser(new HtmlParserOptions
+      {
+         IsKeepingSourceReferences = true,
+         OnToken = (token, range) =>
+         {
+            if(token.Name.Length == 2 && token.Name[0] == 'h' && token.Name[1] is >= '1' and <= '6')
+            {
+               if(token.Type == HtmlTokenType.StartTag)
+               {
+                  pendingHeading = range.Start.Index;
+                  headingEnds.Add(pendingHeading, range.End.Index - 1);
+               }
+               else if(token.Type == HtmlTokenType.EndTag && pendingHeading >= 0)
+               {
+                  headingEnds[pendingHeading] = range.End.Index - 1;
+                  pendingHeading = -1;
+               }
+            }
+         },
+      });
+   }
+
+
+
+   /// <summary>Source slices retain quote/list indentation offsets while emitted raw HTML omits those Markdown prefixes.</summary>
+   private void AnnotateHtmlBlock(HtmlBlock block, int offset)
+   {
+      StringLine[] lines = block.Lines.Lines;
+      string html = string.Join('\n', lines.Take(block.Lines.Count).Select(line => line.Slice.ToString()));
+      var headingEnds = new Dictionary<int, int>();
+      using AngleSharp.Html.Dom.IHtmlDocument document = CreateSourceParser(headingEnds).ParseDocument(html);
+      int[] lineStarts = new int[block.Lines.Count];
+      int length = 0;
+      for(int index = 0; index < lineStarts.Length; index++)
+      {
+         lineStarts[index] = length;
+         length += lines[index].Slice.Length + 1;
+      }
+      var inserts = new Dictionary<int, List<(int Position, string Attribute)>>();
+      foreach(IElement heading in document.QuerySelectorAll("h1,h2,h3,h4,h5,h6"))
+      {
+         int position = heading.SourceReference!.Position.Index;
+         int index = Array.BinarySearch(lineStarts, position);
+         if(index < 0)
+         {
+            index = ~index - 1;
+         }
+         int column = position - lineStarts[index];
+         int start = offset + lines[index].Slice.Start + column;
+         if(!inserts.TryGetValue(index, out List<(int Position, string Attribute)>? changes))
+         {
+            changes = [];
+            inserts.Add(index, changes);
+         }
+         int endPosition = headingEnds[position];
+         int endIndex = Array.BinarySearch(lineStarts, endPosition);
+         endIndex = endIndex >= 0 ? endIndex : ~endIndex - 1;
+         int end = offset + lines[endIndex].Slice.Start + endPosition - lineStarts[endIndex];
+         changes.Add((column + 3, Attribute(AddPosition(start, EndOfLine(end)))));
+      }
+      foreach((int index, List<(int Position, string Attribute)> changes) in inserts)
+      {
+         string line = lines[index].Slice.ToString();
+         foreach((int position, string attribute) in changes.OrderByDescending(change => change.Position))
+         {
+            line = line.Insert(position, attribute);
+         }
+         lines[index].Slice = new StringSlice(line) { NewLine = lines[index].Slice.NewLine };
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceText.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceText.cs
new file mode 100644
index 0000000..b4b8321
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentSourceText.cs
@@ -0,0 +1,247 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Mirrors section folds in a literal native display while preserving the original snapshot and source identities.</summary>
+public sealed class DocumentSourceText
+{
+   private const string Ellipsis = "⋯\r";
+   private readonly string _source;
+   private readonly string _native;
+   private readonly int[] _crlfBreaks;
+   private readonly int[] _lineStarts;
+   private readonly DocumentSourceHeading[] _originalHeadings;
+   private readonly (int Index, int Start, int End)[] _sections;
+   private HashSet<int>? _collapsed;
+   private (int Start, int End)[] _ranges = [];
+   private int[] _rangeStarts = [];
+   private int[] _removed = [0];
+   private string _copyText = "";
+   private int[] _copyBreaks = [];
+
+
+
+   /// <summary>Indexes original/native line coordinates once and derives section boundaries from parser identities and heading levels.</summary>
+   public DocumentSourceText(string source, DocumentOutline outline)
+   {
+      ArgumentNullException.ThrowIfNull(source);
+      ArgumentNullException.ThrowIfNull(outline);
+      if(source.Length > MarkdownRenderer.MaximumCharacters)
+      {
+         throw new ArgumentException("The source exceeds the document size limit.", nameof(source));
+      }
+      if(outline.SourceHeadings.Any(heading => heading.Start < 0 || heading.End < heading.Start || heading.End > source.Length))
+      {
+         throw new ArgumentException("Source positions must belong to the committed snapshot.", nameof(outline));
+      }
+      _source = source;
+      _native = source.Replace("\r\n", "\r", StringComparison.Ordinal).Replace('\n', '\r');
+      var crlfBreaks = new List<int>();
+      var lineStarts = new List<int> { 0 };
+      for(int index = 0; index < source.Length; index++)
+      {
+         if(source[index] is '\r' or '\n')
+         {
+            if(source[index] == '\r' && index + 1 < source.Length && source[index + 1] == '\n')
+            {
+               index++;
+               crlfBreaks.Add(index);
+            }
+            lineStarts.Add(index + 1);
+         }
+      }
+      _crlfBreaks = crlfBreaks.ToArray();
+      _lineStarts = lineStarts.ToArray();
+      _originalHeadings = outline.SourceHeadings.OrderBy(heading => heading.Start).ToArray();
+      _sections = new (int, int, int)[_originalHeadings.Length];
+      var stack = new Stack<int>();
+      for(int index = 0; index < _originalHeadings.Length; index++)
+      {
+         DocumentSourceHeading heading = _originalHeadings[index];
+         int level = outline.Headings[heading.Index].Level;
+         while(stack.TryPeek(out int previous) && outline.Headings[_originalHeadings[previous].Index].Level >= level)
+         {
+            stack.Pop();
+            (int Index, int Start, int End) section = _sections[previous];
+            _sections[previous] = (section.Index, section.Start, LineStart(heading.Start));
+         }
+         _sections[index] = (heading.Index, AfterLineBreak(heading.End), source.Length);
+         stack.Push(index);
+      }
+      SetCollapsed([]);
+   }
+
+
+
+   /// <summary>Visible literal text with native CR newlines and a plain ellipsis for omitted bodies, never HTML or rich text.</summary>
+   public string Text { get; private set; } = "";
+
+
+
+   /// <summary>Only visible headings, with offsets into the actual displayed native string.</summary>
+   public IReadOnlyList<DocumentSourceHeading> Headings { get; private set; } = [];
+
+
+
+   /// <summary>Nested folds remain independent; overlapping parent/child bodies merge without losing saved choices.</summary>
+   public bool SetCollapsed(IEnumerable<int> collapsed)
+   {
+      ArgumentNullException.ThrowIfNull(collapsed);
+      var choices = collapsed.ToHashSet();
+      if(_collapsed is not null && _collapsed.SetEquals(choices))
+      {
+         return false;
+      }
+      _collapsed = choices;
+      var ranges = new List<(int Start, int End)>();
+      foreach((int index, int start, int end) in _sections.Where(section => choices.Contains(section.Index) && section.Start < section.End).OrderBy(section => section.Start))
+      {
+         if(ranges.Count > 0 && start <= ranges[^1].End)
+         {
+            ranges[^1] = (ranges[^1].Start, Math.Max(end, ranges[^1].End));
+         }
+         else
+         {
+            ranges.Add((start, end));
+         }
+      }
+      _ranges = ranges.Select(range => (ToNative(range.Start), ToNative(range.End))).ToArray();
+      _rangeStarts = _ranges.Select(range => range.Start).ToArray();
+      _removed = new int[_ranges.Length + 1];
+      var text = new StringBuilder();
+      int cursor = 0;
+      for(int index = 0; index < _ranges.Length; index++)
+      {
+         (int start, int end) = _ranges[index];
+         text.Append(_native, cursor, start - cursor).Append(Ellipsis);
+         _removed[index + 1] = _removed[index] + end - start - Ellipsis.Length;
+         cursor = end;
+      }
+      text.Append(_native, cursor, _native.Length - cursor);
+      Text = text.ToString();
+      BuildCopyText(ranges);
+      var headings = new List<DocumentSourceHeading>();
+      foreach(DocumentSourceHeading heading in _originalHeadings)
+      {
+         if(GetDisplayRange(heading.Start, heading.End - heading.Start) is { } range)
+         {
+            headings.Add(new DocumentSourceHeading(heading.Index, range.Start, range.Start + range.Length));
+         }
+      }
+      Headings = headings.AsReadOnly();
+      return true;
+   }
+
+
+
+   /// <summary>Maps original query spans into the visible native display; hidden or partly folded occurrences have no selection.</summary>
+   public (int Start, int Length)? GetDisplayRange(int start, int length)
+   {
+      ArgumentOutOfRangeException.ThrowIfNegative(start);
+      ArgumentOutOfRangeException.ThrowIfNegative(length);
+      if(start > _source.Length || length > _source.Length - start)
+      {
+         throw new ArgumentOutOfRangeException(nameof(length));
+      }
+      int nativeStart = ToNative(start);
+      int nativeEnd = ToNative(start + length);
+      int index = Array.BinarySearch(_rangeStarts, nativeStart);
+      index = index >= 0 ? index : ~index - 1;
+      if(index >= 0 && nativeStart < _ranges[index].End || index + 1 < _ranges.Length && nativeEnd > _ranges[index + 1].Start)
+      {
+         return null;
+      }
+      return (nativeStart - _removed[index + 1], nativeEnd - nativeStart);
+   }
+
+
+
+   /// <summary>Indexes copied visible original chunks separately from native paragraph coordinates.</summary>
+   private void BuildCopyText(List<(int Start, int End)> ranges)
+   {
+      var copy = new StringBuilder();
+      int cursor = 0;
+      foreach((int start, int end) in ranges)
+      {
+         copy.Append(_source, cursor, start - cursor).Append(Ellipsis);
+         cursor = end;
+      }
+      copy.Append(_source, cursor, _source.Length - cursor);
+      _copyText = copy.ToString();
+      var copyBreaks = new List<int>();
+      for(int index = 0; index + 1 < _copyText.Length; index++)
+      {
+         if(_copyText[index] == '\r' && _copyText[index + 1] == '\n')
+         {
+            copyBreaks.Add(index + 1 - copyBreaks.Count);
+            index++;
+         }
+      }
+      _copyBreaks = copyBreaks.ToArray();
+   }
+
+
+
+   /// <summary>Copies visible literal source with its original newline spelling; folded bodies remain omitted.</summary>
+   public string GetCopyText(int start, int length)
+   {
+      ArgumentOutOfRangeException.ThrowIfNegative(start);
+      ArgumentOutOfRangeException.ThrowIfNegative(length);
+      if(start > Text.Length || length > Text.Length - start)
+      {
+         throw new ArgumentOutOfRangeException(nameof(length));
+      }
+      int copyStart = ToCopy(start);
+      return _copyText.Substring(copyStart, ToCopy(start + length) - copyStart);
+   }
+
+
+
+   /// <summary>A native boundary after a CR includes the original LF of that CRLF, without altering lone line breaks.</summary>
+   private int ToCopy(int position)
+   {
+      int index = Array.BinarySearch(_copyBreaks, position);
+      return position + (index >= 0 ? index + 1 : ~index);
+   }
+
+
+
+   /// <summary>Each original CRLF loses its LF in WinUI text; lone CR/LF and Unicode retain their lengths.</summary>
+   private int ToNative(int position)
+   {
+      int index = Array.BinarySearch(_crlfBreaks, position);
+      return position - (index >= 0 ? index : ~index);
+   }
+
+
+
+   /// <summary>Preserves the complete next heading line, including quote/list prefixes.</summary>
+   private int LineStart(int position)
+   {
+      int index = Array.BinarySearch(_lineStarts, position);
+      return _lineStarts[index >= 0 ? index : ~index - 1];
+   }
+
+
+
+   /// <summary>A fold starts after the full ATX/Setext heading line and its original line break.</summary>
+   private int AfterLineBreak(int position)
+   {
+      if(position < _source.Length && _source[position] == '\r')
+      {
+         position++;
+      }
+      if(position < _source.Length && _source[position] == '\n')
+      {
+         position++;
+      }
+      return position;
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/DocumentViewport.cs b/src/MarkdownViewr.Windows.Core/Documents/DocumentViewport.cs
new file mode 100644
index 0000000..3c7f26b
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/DocumentViewport.cs
@@ -0,0 +1,60 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+using System.Text.Json;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>A validated relative viewport that keeps the reading position when document height changes.</summary>
+[StructLayout(LayoutKind.Auto)]
+public readonly record struct DocumentViewport
+{
+   /// <summary>Constructs a validated pair; arbitrary browser strings never become executable script.</summary>
+   private DocumentViewport(double x, double y)
+   {
+      HorizontalFraction = Math.Clamp(x, 0, 1);
+      VerticalFraction = Math.Clamp(y, 0, 1);
+   }
+
+
+
+   /// <summary>The horizontal position as a fraction of the available scroll range.</summary>
+   public double HorizontalFraction { get; }
+
+
+
+   /// <summary>The vertical position as a fraction of the available scroll range.</summary>
+   public double VerticalFraction { get; }
+
+
+
+   /// <summary>Reads the exact two-number result of the application's fixed viewport query.</summary>
+   public static DocumentViewport FromBrowserResult(string? json)
+   {
+      if(json is null || json.Length > 128)
+      {
+         return default;
+      }
+      try
+      {
+         using var document = JsonDocument.Parse(json);
+         JsonElement root = document.RootElement;
+         if(root.ValueKind == JsonValueKind.Array && root.GetArrayLength() == 2 &&
+            root[0].ValueKind == JsonValueKind.Number && root[1].ValueKind == JsonValueKind.Number &&
+            root[0].TryGetDouble(out double x) && root[1].TryGetDouble(out double y) &&
+            double.IsFinite(x) && double.IsFinite(y))
+         {
+            return new DocumentViewport(x, y);
+         }
+      }
+      catch(JsonException)
+      {
+         // An unavailable or malformed browser result falls back to the top of the document.
+      }
+      return default;
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/FrontmatterMode.cs b/src/MarkdownViewr.Windows.Core/Documents/FrontmatterMode.cs
new file mode 100644
index 0000000..9c94b88
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/FrontmatterMode.cs
@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>The reference app's three ways to display a leading frontmatter block.</summary>
+public enum FrontmatterMode
+{
+   /// <summary>Keep metadata out of the reading surface.</summary>
+   Hide,
+   /// <summary>Show escaped, line-based key/value rows.</summary>
+   Metadata,
+   /// <summary>Render the frontmatter block through the normal Markdown boundary.</summary>
+   Markdown,
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/MarkdownExtensions.cs b/src/MarkdownViewr.Windows.Core/Documents/MarkdownExtensions.cs
new file mode 100644
index 0000000..ed1a9b3
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/MarkdownExtensions.cs
@@ -0,0 +1,43 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Markdig.Extensions.EmphasisExtras;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Independent reference Markdown extensions, enabled by default without altering the literal source.</summary>
+/// <param name="Highlight">Renders double-equals text as a passive mark.</param>
+/// <param name="Superscript">Renders single-caret text above the baseline.</param>
+/// <param name="Subscript">Renders single-tilde text below the baseline, leaving double-tilde strikethrough available.</param>
+/// <param name="Underline">Renders double-plus text as inserted/underlined content.</param>
+public sealed record MarkdownExtensions(bool Highlight = true, bool Superscript = true, bool Subscript = true, bool Underline = true)
+{
+   /// <summary>GFM strikethrough remains available regardless of the four independent extension preferences.</summary>
+   internal EmphasisExtraOptions EmphasisOptions
+   {
+      get
+      {
+         EmphasisExtraOptions options = EmphasisExtraOptions.Strikethrough;
+         if(Highlight)
+         {
+            options |= EmphasisExtraOptions.Marked;
+         }
+         if(Superscript)
+         {
+            options |= EmphasisExtraOptions.Superscript;
+         }
+         if(Subscript)
+         {
+            options |= EmphasisExtraOptions.Subscript;
+         }
+         if(Underline)
+         {
+            options |= EmphasisExtraOptions.Inserted;
+         }
+         return options;
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/MarkdownRenderer.cs b/src/MarkdownViewr.Windows.Core/Documents/MarkdownRenderer.cs
new file mode 100644
index 0000000..a911826
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/MarkdownRenderer.cs
@@ -0,0 +1,275 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text;
+using System.Text.RegularExpressions;
+using AngleSharp.Dom;
+using AngleSharp.Html.Dom;
+using AngleSharp.Html.Parser;
+using Ganss.Xss;
+using Markdig;
+using Markdig.Extensions.Tables;
+using Markdig.Syntax;
+using Markdig.Syntax.Inlines;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Renders GitHub Flavored Markdown into passive HTML for the isolated document surface.</summary>
+public sealed class MarkdownRenderer
+{
+   /// <summary>Bounds parser work before an opened document can consume unbounded memory.</summary>
+   public const int MaximumCharacters = 16 * 1024 * 1024;
+
+   private readonly MarkdownPipeline _pipeline;
+
+   private readonly MarkdownExtensions _extensions;
+
+   private readonly HtmlSanitizer _sanitizer;
+
+
+
+   /// <summary>Allows document formatting without scripts, CSS, forms or native host capabilities.</summary>
+   public MarkdownRenderer(MarkdownExtensions? extensions = null)
+   {
+      _extensions = extensions ?? new MarkdownExtensions();
+      MarkdownPipelineBuilder pipeline = new MarkdownPipelineBuilder()
+         .UsePipeTables(new PipeTableOptions { UseGfmRules = true })
+         .UseTaskLists()
+         .UseEmphasisExtras(_extensions.EmphasisOptions)
+         .UseAutoLinks()
+         .UsePreciseSourceLocation();
+      pipeline.DocumentProcessed += PreserveLiteralExtensionBoundaries;
+      _pipeline = pipeline.Build();
+      _sanitizer = new HtmlSanitizer();
+      _sanitizer.AllowedTags.Clear();
+      _sanitizer.AllowedTags.UnionWith(["a", "abbr", "b", "blockquote", "br", "caption", "code", "dd", "del", "details", "div", "dl", "dt", "em", "h1", "h2", "h3", "h4", "h5", "h6", "hr", "i", "img", "input", "ins", "kbd", "li", "mark", "ol", "p", "pre", "s", "small", "span", "strong", "sub", "summary", "sup", "table", "tbody", "td", "th", "thead", "tr", "ul"]);
+      _sanitizer.AllowedAttributes.Clear();
+      _sanitizer.AllowedAttributes.UnionWith(["href", "src", "alt", "title", "align", "colspan", "rowspan", "width", "height", "type", "checked", "disabled", "class"]);
+      _sanitizer.AllowedSchemes.Clear();
+      _sanitizer.AllowedSchemes.UnionWith(["http", "https", "mailto"]);
+      _sanitizer.AllowedCssProperties.Clear();
+      _sanitizer.AllowedAtRules.Clear();
+      _sanitizer.PostProcessNode += MakeInputsPassive;
+      _sanitizer.PostProcessNode += FilterStylingClasses;
+   }
+
+
+
+   /// <summary>Preserves useful markup while sanitizing every parser result, including authored raw HTML.</summary>
+   public string Render(string markdown, FrontmatterMode frontmatter = FrontmatterMode.Hide) => Render(markdown, frontmatter, null);
+
+
+
+   /// <summary>Admits only the current private provenance attribute, then restores the ordinary authored-markup policy.</summary>
+   internal string RenderWithSources(string markdown, FrontmatterMode frontmatter, DocumentSourceMap sources)
+   {
+      _sanitizer.AllowedAttributes.Add(sources.AttributeName);
+      try
+      {
+         return Render(markdown, frontmatter, sources);
+      }
+      finally
+      {
+         _sanitizer.AllowedAttributes.Remove(sources.AttributeName);
+      }
+   }
+
+
+
+   /// <summary>Uses the same bounded parser and passive sanitation for public HTML and internal source-aware outlines.</summary>
+   private string Render(string markdown, FrontmatterMode frontmatter, DocumentSourceMap? sources)
+   {
+      ArgumentNullException.ThrowIfNull(markdown);
+      if(markdown.Length > MaximumCharacters)
+      {
+         throw new ArgumentException("The document exceeds the 16 Mi-character rendering limit.", nameof(markdown));
+      }
+      if(!Enum.IsDefined(frontmatter))
+      {
+         throw new ArgumentOutOfRangeException(nameof(frontmatter));
+      }
+      (string? metadata, string body) = DocumentFrontmatter.Split(markdown);
+      string prefix = !string.IsNullOrEmpty(metadata) ? frontmatter switch
+      {
+         FrontmatterMode.Metadata => RenderDocument(Markdown.Parse(DocumentFrontmatter.RenderMetadata(metadata), _pipeline), extendSubscript: false),
+         FrontmatterMode.Markdown => sources is null ? RenderDocument(Markdown.Parse("---\n" + metadata + "\n---", _pipeline)) : sources.Render("---\n" + metadata + "\n---", _pipeline, markdown.IndexOf('\n') + 1 - 4, RenderDocument),
+         _ => "",
+      } : "";
+      string html = sources is null ? RenderDocument(Markdown.Parse(body, _pipeline)) : sources.Render(body, _pipeline, markdown.Length - body.Length, RenderDocument);
+      return _sanitizer.Sanitize(prefix + html);
+   }
+
+
+
+   /// <summary>Normal documents use every selected extension; source annotation remains upstream of visible raw-text formatting.</summary>
+   private string RenderDocument(MarkdownDocument document) => RenderDocument(document, extendSubscript: true);
+
+
+
+   /// <summary>Formats visible authored HTML text without touching attributes/code; reference metadata excludes body-only subscript preprocessing.</summary>
+   private string RenderDocument(MarkdownDocument document, bool extendSubscript)
+   {
+      int codeDepth = 0;
+      foreach(MarkdownObject node in document.Descendants().Where(item => item is HtmlInline or HtmlBlock))
+      {
+         if(node is HtmlInline inline)
+         {
+            codeDepth = Math.Max(0, codeDepth + HtmlCodeBoundary(inline));
+            continue;
+         }
+         var block = (HtmlBlock)node;
+         string html = string.Join('\n', block.Lines.Lines.Take(block.Lines.Count).Select(line => line.Slice.ToString()));
+         var changes = new List<(int Start, int End, string Value)>();
+         var parser = new HtmlParser(new HtmlParserOptions
+         {
+            OnToken = (token, range) =>
+            {
+               if(token.Type is HtmlTokenType.StartTag or HtmlTokenType.EndTag && token.Name is "code" or "pre")
+               {
+                  codeDepth = Math.Max(0, codeDepth + (token.Type == HtmlTokenType.StartTag ? 1 : -1));
+               }
+               else if(token.Type == HtmlTokenType.Character && codeDepth == 0)
+               {
+                  string text = html[range.Start.Index..range.End.Index];
+                  string formatted = FormatRawText(text, extendSubscript);
+                  if(!string.Equals(text, formatted, StringComparison.Ordinal))
+                  {
+                     changes.Add((range.Start.Index, range.End.Index, formatted));
+                  }
+               }
+            },
+         });
+         using IHtmlDocument parsed = parser.ParseDocument(html);
+         if(changes.Count == 0)
+         {
+            continue;
+         }
+         var rewritten = new StringBuilder(html);
+         for(int index = changes.Count - 1; index >= 0; index--)
+         {
+            (int start, int end, string value) = changes[index];
+            rewritten.Remove(start, end - start).Insert(start, value);
+         }
+         string[] lines = rewritten.ToString().Split('\n');
+         for(int index = 0; index < block.Lines.Count; index++)
+         {
+            block.Lines.Lines[index].Slice = new Markdig.Helpers.StringSlice(lines[index]);
+         }
+      }
+      return Markdown.ToHtml(document, _pipeline);
+   }
+
+
+
+   /// <summary>Reference extension syntax applies only to tokenized visible text, with bounded regex work and unchanged entity spelling.</summary>
+   private string FormatRawText(string text, bool extendSubscript)
+   {
+      foreach((bool enabled, string pattern, string tag) in new[]
+      {
+         (_extensions.Highlight, "==(.+?)==", "mark"),
+         (_extensions.Superscript, "\\^([^\\s\\^]+)\\^", "sup"),
+         (_extensions.Subscript && extendSubscript, "(?<!~)~([^\\s~]+)~(?!~)", "sub"),
+         (_extensions.Underline, "\\+\\+(.+?)\\+\\+", "ins"),
+      })
+      {
+         if(enabled)
+         {
+            text = Regex.Replace(text, pattern, "<" + tag + ">$1</" + tag + ">", RegexOptions.CultureInvariant, TimeSpan.FromSeconds(1));
+         }
+      }
+      return text;
+   }
+
+
+
+   /// <summary>Reference delimiters cannot span code/newlines; single caret/tilde pairs also cannot contain whitespace.</summary>
+   private static void PreserveLiteralExtensionBoundaries(MarkdownDocument document)
+   {
+      int codeDepth = 0;
+      foreach(MarkdownObject node in document.Descendants().Where(item => item is EmphasisInline or HtmlInline or HtmlBlock).ToArray())
+      {
+         if(node is HtmlInline html)
+         {
+            codeDepth = Math.Max(0, codeDepth + HtmlCodeBoundary(html));
+         }
+         else if(node is HtmlBlock block)
+         {
+            var parser = new HtmlParser(new HtmlParserOptions
+            {
+               OnToken = (token, _) =>
+               {
+                  if(token.Type is HtmlTokenType.StartTag or HtmlTokenType.EndTag && token.Name is "code" or "pre")
+                  {
+                     codeDepth = Math.Max(0, codeDepth + (token.Type == HtmlTokenType.StartTag ? 1 : -1));
+                  }
+               },
+            });
+            using IHtmlDocument htmlDocument = parser.ParseDocument(string.Join('\n', block.Lines.Lines.Take(block.Lines.Count).Select(line => line.Slice.ToString())));
+         }
+         if(node is not EmphasisInline emphasis || emphasis.DelimiterChar is not ('=' or '+' or '^' or '~') || (emphasis.DelimiterChar == '~' && emphasis.DelimiterCount == 2))
+         {
+            continue;
+         }
+         bool single = emphasis.DelimiterChar is '^' or '~';
+         if(codeDepth > 0 || emphasis.Descendants().Any(child => child is CodeInline or LineBreakInline || child is HtmlInline boundary && HtmlCodeBoundary(boundary) != 0 || (single && child is LiteralInline literal && literal.Content.ToString().Any(char.IsWhiteSpace))))
+         {
+            string delimiter = new(emphasis.DelimiterChar, emphasis.DelimiterCount);
+            Inline last = emphasis.ReplaceBy(new LiteralInline(delimiter));
+            last.InsertAfter(new LiteralInline(delimiter));
+         }
+      }
+   }
+
+
+
+   /// <summary>Only actual authored code/pre tag names protect extension delimiters, including mixed-case tags.</summary>
+   private static int HtmlCodeBoundary(HtmlInline html)
+   {
+      ReadOnlySpan<char> tag = html.Tag.AsSpan(1);
+      bool closing = tag.StartsWith("/", StringComparison.Ordinal);
+      if(closing)
+      {
+         tag = tag[1..];
+      }
+      tag = tag[..tag.IndexOfAny(" />\t\r\n\f".AsSpan())];
+      return tag.Equals("code", StringComparison.OrdinalIgnoreCase) || tag.Equals("pre", StringComparison.OrdinalIgnoreCase) ? closing ? -1 : 1 : 0;
+   }
+
+
+
+   /// <summary>Retains only passive reference styling classes; native identifiers, handlers and arbitrary document classes remain unavailable.</summary>
+   private static void FilterStylingClasses(object? sender, PostProcessNodeEventArgs args)
+   {
+      if(args.Node is IElement element && element.GetAttribute("class") is { } classes)
+      {
+         string[] allowed = classes.Split((char[]?)null, StringSplitOptions.RemoveEmptyEntries).Where(value =>
+            value is "task-list" or "task-list-item" or "frontmatter" or "fm-key" or "fm-value" ||
+            value.StartsWith("language-", StringComparison.Ordinal) && value.Length is > 9 and <= 80 &&
+            value[9..].All(character => char.IsAsciiLetterOrDigit(character) || character is '_' or '-' or '+' or '#')).Distinct(StringComparer.Ordinal).ToArray();
+         if(allowed.Length == 0)
+         {
+            element.RemoveAttribute("class");
+         }
+         else
+         {
+            element.SetAttribute("class", string.Join(' ', allowed));
+         }
+      }
+   }
+
+
+
+   /// <summary>Task markers are display-only checkboxes; authored inputs cannot become active controls.</summary>
+   private static void MakeInputsPassive(object? sender, PostProcessNodeEventArgs args)
+   {
+      if(args.Node is IHtmlInputElement input)
+      {
+         input.Type = "checkbox";
+         input.IsDisabled = true;
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/MarkdownSourceHighlighting.cs b/src/MarkdownViewr.Windows.Core/Documents/MarkdownSourceHighlighting.cs
new file mode 100644
index 0000000..b9e2b77
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/MarkdownSourceHighlighting.cs
@@ -0,0 +1,85 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Markdig;
+using Markdig.Extensions.TaskLists;
+using Markdig.Extensions.Yaml;
+using Markdig.Syntax;
+using Markdig.Syntax.Inlines;
+
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Classifies literal UTF16 source spans with the existing parser; no token renders or executes document content.</summary>
+public static class MarkdownSourceHighlighting
+{
+   private static readonly MarkdownPipeline s_pipeline = new MarkdownPipelineBuilder().UsePipeTables().UseTaskLists().UseEmphasisExtras().UseAutoLinks().UseYamlFrontMatter().UsePreciseSourceLocation().Build();
+
+
+
+   /// <summary>Parser work is bounded by the supported document limit; cancellation discards stale classification during traversal.</summary>
+   public static IReadOnlyList<SourceToken> Parse(string source, CancellationToken cancellationToken = default)
+   {
+      ArgumentNullException.ThrowIfNull(source);
+      if(source.Length > MarkdownRenderer.MaximumCharacters)
+      {
+         throw new ArgumentException("The source exceeds the document size limit.", nameof(source));
+      }
+      cancellationToken.ThrowIfCancellationRequested();
+      MarkdownDocument document = Markdown.Parse(source, s_pipeline);
+      var tokens = new List<SourceToken>();
+      foreach(MarkdownObject node in document.Descendants())
+      {
+         cancellationToken.ThrowIfCancellationRequested();
+         SourceTokenKind? kind = Kind(node);
+         if(kind is { } value && node.Span.Start >= 0 && node.Span.End >= node.Span.Start && node.Span.End < source.Length)
+         {
+            int length = node.Span.End - node.Span.Start + 1;
+            if(node is ListItemBlock)
+            {
+               length = ListMarkerLength(source.AsSpan(node.Span.Start, length));
+            }
+            if(length > 0)
+            {
+               tokens.Add(new SourceToken(node.Span.Start, length, value));
+            }
+         }
+      }
+      return tokens.AsReadOnly();
+   }
+
+
+
+   /// <summary>Preorder parent/child spans permit nested markup to refine a block's color without changing its literal characters.</summary>
+   private static SourceTokenKind? Kind(MarkdownObject node) => node switch
+   {
+      YamlFrontMatterBlock => SourceTokenKind.Frontmatter,
+      HeadingBlock => SourceTokenKind.Heading,
+      CodeBlock or CodeInline => SourceTokenKind.Code,
+      EmphasisInline emphasis when emphasis.DelimiterChar == '~' && emphasis.DelimiterCount == 2 => SourceTokenKind.Strikethrough,
+      EmphasisInline emphasis when emphasis.DelimiterCount == 2 => SourceTokenKind.Strong,
+      EmphasisInline => SourceTokenKind.Emphasis,
+      LinkInline { IsImage: true } => SourceTokenKind.Image,
+      LinkInline or AutolinkInline => SourceTokenKind.Link,
+      ListItemBlock or TaskList => SourceTokenKind.List,
+      QuoteBlock => SourceTokenKind.Quote,
+      HtmlBlock or HtmlInline => SourceTokenKind.Html,
+      _ => null,
+   };
+
+
+
+   /// <summary>Only a list marker is colored; ordinary list prose remains readable and child code/emphasis keeps its own style.</summary>
+   private static int ListMarkerLength(ReadOnlySpan<char> span)
+   {
+      int length = 0;
+      while(length < span.Length && char.IsAsciiDigit(span[length]))
+      {
+         length++;
+      }
+      // Markdig's valid ListItemBlock span begins at its bullet or ordered marker.
+      return length + 1;
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/RecentDocuments.cs b/src/MarkdownViewr.Windows.Core/Documents/RecentDocuments.cs
new file mode 100644
index 0000000..a33eeab
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/RecentDocuments.cs
@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Keeps a bounded private history of successfully opened absolute Windows paths.</summary>
+public static class RecentDocuments
+{
+   /// <summary>Limits the menu and persisted history without probing files or disclosing paths in logs.</summary>
+   public const int MaximumCount = 20;
+
+
+
+   /// <summary>Repairs corrupt history and preserves most-recent order, using Windows path comparison.</summary>
+   public static string[] Sanitize(IEnumerable<string?>? paths)
+      => (paths ?? []).Where(IsValid).Select(path => path!).Distinct(StringComparer.OrdinalIgnoreCase).Take(MaximumCount).ToArray();
+
+
+
+   /// <summary>Promotes only a path whose native document open has already succeeded.</summary>
+   public static string[] Record(IEnumerable<string?>? paths, string path)
+      => Sanitize(new[] { path }.Concat(paths ?? []));
+
+
+
+   /// <summary>Saved history must not carry relative paths, URLs, control characters or unbounded strings.</summary>
+   private static bool IsValid(string? path)
+      => !string.IsNullOrWhiteSpace(path) && path.Length <= 32767 && !path.Any(char.IsControl) && Path.IsPathFullyQualified(path);
+}
diff --git a/src/MarkdownViewr.Windows.Core/Documents/SourceToken.cs b/src/MarkdownViewr.Windows.Core/Documents/SourceToken.cs
new file mode 100644
index 0000000..bb4bc1f
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/SourceToken.cs
@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Offsets are UTF16 positions into the exact supplied text, including all whitespace and line breaks.</summary>
+public sealed record SourceToken(int Start, int Length, SourceTokenKind Kind);
diff --git a/src/MarkdownViewr.Windows.Core/Documents/SourceTokenKind.cs b/src/MarkdownViewr.Windows.Core/Documents/SourceTokenKind.cs
new file mode 100644
index 0000000..deded8e
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Documents/SourceTokenKind.cs
@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Documents;
+
+/// <summary>Semantic source colors remain independent of HTML/CSS and native capabilities.</summary>
+public enum SourceTokenKind
+{
+   Heading,
+   Code,
+   Emphasis,
+   Strong,
+   Strikethrough,
+   Link,
+   Image,
+   List,
+   Quote,
+   Frontmatter,
+   Html,
+}
diff --git a/src/MarkdownViewr.Windows.Core/Editors/EditorConfiguration.cs b/src/MarkdownViewr.Windows.Core/Editors/EditorConfiguration.cs
new file mode 100644
index 0000000..c92a14e
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Editors/EditorConfiguration.cs
@@ -0,0 +1,30 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Editors;
+
+/// <summary>A stable named native editor choice; folder mode passes the document parent instead of the file.</summary>
+public sealed record EditorConfiguration(Guid Id, string Name, string Executable, bool OpensFolder = false)
+{
+   /// <summary>The maximum persisted and native editor command count.</summary>
+   public const int MaximumEditors = 32;
+
+
+
+   /// <summary>Stored choices cannot introduce empty identities, unbounded labels or executable command strings.</summary>
+   public static bool IsValid(EditorConfiguration? editor)
+      => editor is not null && editor.Id != Guid.Empty && editor.Name is { Length: > 0 and <= 80 } &&
+         !string.IsNullOrWhiteSpace(editor.Name) && !editor.Name.Any(char.IsControl) && EditorLaunch.IsExecutablePath(editor.Executable);
+
+
+
+   /// <summary>Preserves valid order/identities and missing installed editors; bounds and repairs untrusted saved settings.</summary>
+   public static EditorConfiguration[] Sanitize(IEnumerable<EditorConfiguration?>? editors)
+   {
+      var seen = new HashSet<Guid>();
+      return (editors ?? []).Take(MaximumEditors).Where(editor => IsValid(editor) && seen.Add(editor!.Id)).Select(editor => editor! with { Name = editor.Name.Trim() }).ToArray();
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Editors/EditorLaunch.cs b/src/MarkdownViewr.Windows.Core/Editors/EditorLaunch.cs
new file mode 100644
index 0000000..6bba494
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Editors/EditorLaunch.cs
@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Diagnostics;
+
+
+namespace MarkdownViewr.Windows.Core.Editors;
+
+/// <summary>Builds an explicit editor process without interpreting a document path as a shell command.</summary>
+public static class EditorLaunch
+{
+   /// <summary>Only a bounded, fully qualified Windows executable can be persisted as the chosen editor.</summary>
+   public static bool IsExecutablePath(string? path)
+      => path is { Length: > 0 and <= 32767 } && !path.Any(char.IsControl) && Path.IsPathFullyQualified(path) && string.Equals(Path.GetExtension(path), ".exe", StringComparison.OrdinalIgnoreCase);
+
+
+
+   /// <summary>Supplies exactly one literal file or parent-folder argument; availability is checked by the Windows adapter.</summary>
+   public static ProcessStartInfo Create(string executable, string document, bool opensFolder = false)
+   {
+      if(!IsExecutablePath(executable))
+      {
+         throw new ArgumentException("Choose an editor executable using its full path.", nameof(executable));
+      }
+      if(string.IsNullOrEmpty(document) || document.Length > 32767 || document.Any(char.IsControl) || !Path.IsPathFullyQualified(document) || Path.GetFileName(document).Length == 0)
+      {
+         throw new ArgumentException("The document must have a full file path.", nameof(document));
+      }
+      var start = new ProcessStartInfo
+      {
+         FileName = executable,
+         UseShellExecute = false,
+         WorkingDirectory = Path.GetDirectoryName(document),
+      };
+      start.ArgumentList.Add(opensFolder ? Path.GetDirectoryName(document)! : document);
+      return start;
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Greetings/GreetingService.cs b/src/MarkdownViewr.Windows.Core/Greetings/GreetingService.cs
deleted file mode 100644
index 2d9eb5f..0000000
--- a/src/MarkdownViewr.Windows.Core/Greetings/GreetingService.cs
+++ /dev/null
@@ -1,60 +0,0 @@
-/*
- * Copyright (c) 2026 James Maes
- * SPDX-License-Identifier: MIT
- */
-
-namespace MarkdownViewr.Windows.Core.Greetings;
-
-/// <summary>
-/// The template's example feature: a greeting that depends on the time of day. It shows
-/// the shape every feature takes: UI-free logic in Core, the clock injected through
-/// <see cref="TimeProvider"/> so tests are deterministic (K22-TEST-20), and input
-/// validated where it enters (K22-CODE-22). Replace it with the app's real features.
-/// </summary>
-public sealed class GreetingService
-{
-   /// <summary>Longest name accepted, so a pasted document cannot become a greeting.</summary>
-   public const int MaxNameLength = 100;
-
-   private readonly TimeProvider _time;
-
-
-
-   /// <summary>Creates the service over <paramref name="time"/>; the system clock when null.</summary>
-   public GreetingService(TimeProvider? time = null)
-   {
-      _time = time ?? TimeProvider.System;
-   }
-
-
-
-   /// <summary>
-   /// "Good morning, Ada!" (or afternoon, or evening, by local time). A blank name greets
-   /// "there".
-   /// </summary>
-   /// <exception cref="ArgumentException">The name is longer than <see cref="MaxNameLength"/>.</exception>
-   public string Greet(string? name)
-   {
-      string trimmed = name?.Trim() ?? "";
-      if(trimmed.Length > MaxNameLength)
-      {
-         throw new ArgumentException($"A name can be at most {MaxNameLength} characters.", nameof(name));
-      }
-
-      return $"{PartOfDay()}, {(trimmed.Length == 0 ? "there" : trimmed)}!";
-   }
-
-
-
-   /// <summary>Morning before noon, afternoon before six, evening after.</summary>
-   private string PartOfDay()
-   {
-      int hour = _time.GetLocalNow().Hour;
-      return hour switch
-      {
-         < 12 => "Good morning",
-         < 18 => "Good afternoon",
-         _ => "Good evening",
-      };
-   }
-}
diff --git a/src/MarkdownViewr.Windows.Core/Greetings/GreetingViewModel.cs b/src/MarkdownViewr.Windows.Core/Greetings/GreetingViewModel.cs
deleted file mode 100644
index e667101..0000000
--- a/src/MarkdownViewr.Windows.Core/Greetings/GreetingViewModel.cs
+++ /dev/null
@@ -1,77 +0,0 @@
-/*
- * Copyright (c) 2026 James Maes
- * SPDX-License-Identifier: MIT
- */
-
-using CommunityToolkit.Mvvm.ComponentModel;
-using CommunityToolkit.Mvvm.Input;
-using KofTwentyTwo.AppKit.Logging;
-using KofTwentyTwo.AppKit.Settings;
-
-
-namespace MarkdownViewr.Windows.Core.Greetings;
-
-/// <summary>
-/// Presentation state for the greeting screen. It lives in Core, not in the WinUI project,
-/// so it is tested headlessly; the window binds to it with x:Bind and holds no logic.
-/// </summary>
-public sealed partial class GreetingViewModel : ObservableObject
-{
-   private readonly GreetingService _greetings;
-   private readonly AppSettings _settings;
-   private readonly SettingsStore<AppSettings> _store;
-   private readonly IActivityLog _log;
-
-
-
-   /// <summary>Creates the view model, starting from the name saved last time.</summary>
-   public GreetingViewModel(GreetingService greetings, AppSettings settings, SettingsStore<AppSettings> store, IActivityLog log)
-   {
-      ArgumentNullException.ThrowIfNull(greetings);
-      ArgumentNullException.ThrowIfNull(settings);
-      ArgumentNullException.ThrowIfNull(store);
-      ArgumentNullException.ThrowIfNull(log);
-      _greetings = greetings;
-      _settings = settings;
-      _store = store;
-      _log = log;
-      Name = settings.LastName;
-   }
-
-
-
-   /// <summary>The name typed by the user.</summary>
-   [ObservableProperty]
-   public partial string Name { get; set; } = "";
-
-
-
-   /// <summary>The greeting shown, or the reason the name was rejected.</summary>
-   [ObservableProperty]
-   public partial string Message { get; set; } = "";
-
-
-
-   /// <summary>Greets <see cref="Name"/>, remembers it for next time, and logs the event.</summary>
-   [RelayCommand]
-   private void Greet()
-   {
-      try
-      {
-         Message = _greetings.Greet(Name);
-      }
-      catch(ArgumentException ex)
-      {
-         Message = ex.Message;
-         _log.Warning($"Greeting rejected: {ex.Message}");
-         return;
-      }
-
-      _settings.LastName = Name.Trim();
-      if(!_store.Save(_settings))
-      {
-         _log.Warning("Could not save the last greeted name.");
-      }
-      _log.Info("Greeted the user.");
-   }
-}
diff --git a/src/MarkdownViewr.Windows.Core/Layout/SourcePaneLayout.cs b/src/MarkdownViewr.Windows.Core/Layout/SourcePaneLayout.cs
new file mode 100644
index 0000000..b418a81
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Layout/SourcePaneLayout.cs
@@ -0,0 +1,39 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.Core.Layout;
+
+/// <summary>Allocates the space shared only by the document and source, preserving usable columns without a fixed maximum source width.</summary>
+public static class SourcePaneLayout
+{
+   /// <summary>A narrow window keeps the two panes equal; larger windows reserve160 source pixels and200 document pixels.</summary>
+   public static double Fraction(double available, double preferred = 0.5)
+   {
+      if(!double.IsFinite(available) || available <= 0)
+      {
+         return 0.5;
+      }
+      if(!double.IsFinite(preferred))
+      {
+         preferred = 0.5;
+      }
+      double minimum = Math.Min(160, available / 2) / available;
+      double maximum = 1 - Math.Min(200, available / 2) / available;
+      return Math.Clamp(preferred, minimum, maximum);
+   }
+
+
+
+   /// <summary>Dragging right reduces the source; invalid input cannot hide either reading surface.</summary>
+   public static double Resize(double available, double sourceWidth, double horizontalChange)
+   {
+      if(!double.IsFinite(available) || available <= 0 || !double.IsFinite(sourceWidth) || !double.IsFinite(horizontalChange))
+      {
+         return 0.5;
+      }
+      return Fraction(available, (sourceWidth - horizontalChange) / available);
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/MarkdownViewr.Windows.Core.csproj b/src/MarkdownViewr.Windows.Core/MarkdownViewr.Windows.Core.csproj
index 89f49de..317c5d4 100644
--- a/src/MarkdownViewr.Windows.Core/MarkdownViewr.Windows.Core.csproj
+++ b/src/MarkdownViewr.Windows.Core/MarkdownViewr.Windows.Core.csproj
@@ -11,7 +11,6 @@
    </PropertyGroup>
 
    <ItemGroup>
-      <PackageReference Include="CommunityToolkit.Mvvm" />
       <PackageReference Include="KofTwentyTwo.AppKit" />
    </ItemGroup>
 
@@ -19,4 +18,14 @@
       <InternalsVisibleTo Include="MarkdownViewr.Windows.Core.Tests" />
    </ItemGroup>
 
+   <ItemGroup>
+      <PackageReference Include="Markdig" />
+      <PackageReference Include="HtmlSanitizer" />
+   </ItemGroup>
+
+   <ItemGroup>
+      <EmbeddedResource Include="Themes/BuiltIn/*.json" />
+      <EmbeddedResource Include="Themes/Document.css" LogicalName="MarkdownViewr.Windows.Core.Themes.Document.css" />
+   </ItemGroup>
+
 </Project>
diff --git a/src/MarkdownViewr.Windows.Core/Navigation/ReaderCommand.cs b/src/MarkdownViewr.Windows.Core/Navigation/ReaderCommand.cs
new file mode 100644
index 0000000..c464695
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Navigation/ReaderCommand.cs
@@ -0,0 +1,33 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Navigation;
+
+/// <summary>Bounded native reading commands adapted from the pinned reference's vim navigation.</summary>
+public enum ReaderCommand
+{
+   None,
+   Prefix,
+   LineDown,
+   LineUp,
+   HalfPageDown,
+   HalfPageUp,
+   PageUp,
+   Top,
+   Bottom,
+   NextHeading,
+   PreviousHeading,
+   FocusFind,
+   NextMatch,
+   PreviousMatch,
+   CloseFind,
+   ZoomIn,
+   ZoomOut,
+   ZoomReset,
+   Print,
+   NextTheme,
+   PreviousTheme,
+}
diff --git a/src/MarkdownViewr.Windows.Core/Navigation/ReaderKey.cs b/src/MarkdownViewr.Windows.Core/Navigation/ReaderKey.cs
new file mode 100644
index 0000000..87d0e21
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Navigation/ReaderKey.cs
@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Navigation;
+
+/// <summary>A transient reading key and modifiers; uppercase and layout punctuation come from native translation.</summary>
+public readonly record struct ReaderKey(char Character, bool Control = false, bool Shift = false, bool Alt = false, bool Windows = false, bool Repeat = false);
diff --git a/src/MarkdownViewr.Windows.Core/Navigation/ReaderKeyboard.cs b/src/MarkdownViewr.Windows.Core/Navigation/ReaderKeyboard.cs
new file mode 100644
index 0000000..ff91b1c
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Navigation/ReaderKeyboard.cs
@@ -0,0 +1,103 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Navigation;
+
+/// <summary>Resolves the reference's vim sequences without interfering with text entry or modified native shortcuts.</summary>
+public sealed class ReaderKeyboard
+{
+   private char _prefix;
+   private long _prefixAt;
+
+
+
+   /// <summary>Uses injected monotonic milliseconds; a held prefix cannot imitate a deliberate two-key sequence.</summary>
+   public ReaderCommand Resolve(ReaderKey key, bool readingFocused, long milliseconds)
+   {
+      if(key.Alt || key.Windows)
+      {
+         Reset();
+         return ReaderCommand.None;
+      }
+      if(key.Control)
+      {
+         Reset();
+         return ResolveControl(key, readingFocused);
+      }
+      if(!readingFocused)
+      {
+         Reset();
+         return ReaderCommand.None;
+      }
+      long elapsed = milliseconds - _prefixAt;
+      if(_prefix != '\0' && key.Character == _prefix && !key.Repeat && elapsed is >= 0 and < 500)
+      {
+         char prefix = _prefix;
+         Reset();
+         return prefix switch { 'g' => ReaderCommand.Top, ']' => ReaderCommand.NextHeading, _ => ReaderCommand.PreviousHeading };
+      }
+      Reset();
+      if(key.Character is 'g' or ']' or '[')
+      {
+         _prefix = key.Character;
+         _prefixAt = milliseconds;
+         return ReaderCommand.Prefix;
+      }
+      return key.Character switch
+      {
+         'j' => ReaderCommand.LineDown,
+         'k' => ReaderCommand.LineUp,
+         'G' => ReaderCommand.Bottom,
+         'n' => ReaderCommand.NextMatch,
+         'N' => ReaderCommand.PreviousMatch,
+         '/' => ReaderCommand.FocusFind,
+         '\u001B' => ReaderCommand.CloseFind,
+         _ => ReaderCommand.None,
+      };
+   }
+
+
+
+   /// <summary>Windows find ignores Caps Lock; Shift-modified commands remain available to native controls.</summary>
+   private static ReaderCommand ResolveControl(ReaderKey key, bool readingFocused)
+   {
+      if(readingFocused && key.Character is '+' or '=' && (!key.Shift || key.Character == '+'))
+      {
+         return ReaderCommand.ZoomIn;
+      }
+      if(readingFocused && !key.Shift && key.Character is '-' or '0')
+      {
+         return key.Character == '-' ? ReaderCommand.ZoomOut : ReaderCommand.ZoomReset;
+      }
+      if(readingFocused && key.Shift && key.Character is '\u2193' or '\u2191')
+      {
+         return key.Character == '\u2193' ? ReaderCommand.NextTheme : ReaderCommand.PreviousTheme;
+      }
+      if(key.Shift)
+      {
+         return ReaderCommand.None;
+      }
+      if(readingFocused && char.ToUpperInvariant(key.Character) == 'P')
+      {
+         return ReaderCommand.Print;
+      }
+      if(char.ToUpperInvariant(key.Character) == 'F')
+      {
+         return ReaderCommand.FocusFind;
+      }
+      return readingFocused ? char.ToLowerInvariant(key.Character) switch
+      {
+         'd' => ReaderCommand.HalfPageDown,
+         'u' => ReaderCommand.HalfPageUp,
+         'b' => ReaderCommand.PageUp,
+         _ => ReaderCommand.None,
+      } : ReaderCommand.None;
+   }
+
+
+   /// <summary>Clears only the bounded prefix on focus, page or window changes; no arbitrary key history is stored.</summary>
+   public void Reset() => _prefix = '\0';
+}
diff --git a/src/MarkdownViewr.Windows.Core/Navigation/ReaderZoom.cs b/src/MarkdownViewr.Windows.Core/Navigation/ReaderZoom.cs
new file mode 100644
index 0000000..f88e344
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Navigation/ReaderZoom.cs
@@ -0,0 +1,28 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Navigation;
+
+/// <summary>Keeps the pinned reference's bounded reading scale within one document window.</summary>
+public sealed class ReaderZoom
+{
+   /// <summary>Starts at actual size and never persists across independent windows.</summary>
+   public double Scale { get; private set; } = 1;
+
+
+
+   /// <summary>Applies only explicit zoom commands, retaining 30–500 percent bounds.</summary>
+   public void Apply(ReaderCommand command)
+   {
+      Scale = command switch
+      {
+         ReaderCommand.ZoomIn => Math.Min(Scale * 1.1, 5),
+         ReaderCommand.ZoomOut => Math.Max(Scale / 1.1, 0.3),
+         ReaderCommand.ZoomReset => 1,
+         _ => Scale,
+      };
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Printing/PrintOptions.cs b/src/MarkdownViewr.Windows.Core/Printing/PrintOptions.cs
new file mode 100644
index 0000000..c3889f0
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Printing/PrintOptions.cs
@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Printing;
+
+/// <summary>Immutable print preferences adapted from the reference; cancellation retains the saved draft.</summary>
+public sealed record PrintOptions(string Theme = "Clean Printing", bool Backgrounds = false, bool Images = true,
+   bool MatchScreenZoom = false, bool FullPage = true, bool Borders = false, double PaddingPixels = 0)
+{
+   /// <summary>Repairs corrupt preferences without allowing arbitrary CSS values or unbounded padding.</summary>
+   public PrintOptions Sanitize() => this with
+   {
+      Theme = string.IsNullOrWhiteSpace(Theme) || Theme.Length > 80 || Theme.Any(char.IsControl) ? "Clean Printing" : Theme,
+      PaddingPixels = double.IsFinite(PaddingPixels) ? Math.Clamp(PaddingPixels, 0, 96) : 0,
+   };
+}
diff --git a/src/MarkdownViewr.Windows.Core/Printing/PrintStyles.cs b/src/MarkdownViewr.Windows.Core/Printing/PrintStyles.cs
new file mode 100644
index 0000000..a853420
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Printing/PrintStyles.cs
@@ -0,0 +1,87 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Printing;
+
+/// <summary>Generates print-only CSS; the native host keeps reading styles in a separate screen stylesheet.</summary>
+public static class PrintStyles
+{
+   private static readonly ReaderTheme s_clean = ReaderTheme.Parse("""
+      {"name":"Clean Printing","schemaVersion":1,
+       "colors":{"background":"#ffffff","text":"#24292e","heading1":"#1b1f23","heading2":"#1b1f23",
+         "heading3":"#1b1f23","heading4":"#1b1f23","heading5":"#1b1f23","heading6":"#1b1f23",
+         "link":"#0366d6","codeBackground":"#f6f8fa","codeText":"#24292e","blockquoteBorder":"#dfe2e5",
+         "blockquoteBackground":"#fafbfc","highlightBackground":"#fff5b1","highlightText":"#24292e"},
+       "fonts":{"body":"System","heading":"System","code":"SF Mono"},
+       "sizes":{"baseFontSize":14,"h1Size":28,"h2Size":23,"h3Size":20,"h4Size":18,"h5Size":16,"h6Size":15,
+         "codeFontSize":13,"lineHeight":1.7},"customCSS":""}
+      """);
+
+
+
+   /// <summary>Resolves the reference's special choices and current catalog without mutating any theme or document state.</summary>
+   public static string Build(PrintOptions options, ReaderTheme activeTheme, IEnumerable<ReaderTheme> themes, double readingZoom)
+   {
+      ArgumentNullException.ThrowIfNull(options);
+      ArgumentNullException.ThrowIfNull(activeTheme);
+      ArgumentNullException.ThrowIfNull(themes);
+      if(!double.IsFinite(readingZoom) || readingZoom is < 0.3 or > 5)
+      {
+         throw new ArgumentOutOfRangeException(nameof(readingZoom));
+      }
+      options = options.Sanitize();
+      ReaderTheme? theme = options.Theme switch
+      {
+         "Active Theme" => activeTheme,
+         "Plain HTML" => null,
+         "Clean Printing" => s_clean,
+         _ => themes.FirstOrDefault(candidate => string.Equals(candidate.Name, options.Theme, StringComparison.Ordinal)) ?? s_clean,
+      };
+      var css = new StringBuilder("#content-inner{max-width:900px;margin:0 auto;}" + (theme?.GetStyles(options.MatchScreenZoom ? readingZoom : 1) ?? ""));
+      css.Append("""
+         html,body,#content{height:auto!important;overflow:visible!important;display:block!important;}
+         #content{width:100%!important;max-width:none!important;margin:0!important;padding:0!important;}
+         #content-inner{padding:0!important;}
+         [data-mv-body][hidden]{display:block!important;}
+         *{-webkit-print-color-adjust:exact!important;print-color-adjust:exact!important;}
+         h1,h2,h3,h4,h5,h6{break-after:avoid!important;}
+         pre,blockquote,tr,li,img{break-inside:avoid!important;}
+         pre{white-space:pre-wrap!important;overflow:visible!important;}
+         img{max-width:100%!important;}thead{display:table-header-group!important;}
+         th,td{overflow-wrap:anywhere!important;white-space:normal!important;}
+         """);
+      css.Append("body{padding:").Append(options.PaddingPixels.ToString("R", CultureInfo.InvariantCulture)).Append("px!important;}");
+      if(options.FullPage)
+      {
+         css.Append("body{width:auto!important;max-width:none!important;margin:0!important;}#content-inner{width:auto!important;max-width:none!important;margin:0!important;}");
+      }
+      if(!options.Backgrounds)
+      {
+         css.Append("""
+            html,body{background:#ffffff!important;color:#000000!important;}
+            *{background:transparent!important;background-image:none!important;color:#000000!important;
+              -webkit-print-color-adjust:economy!important;print-color-adjust:economy!important;}
+            a{color:#0969da!important;text-decoration:underline!important;}
+            hr,h1,h2{border-bottom:1px solid #dddddd!important;}
+            th,td{border:1px solid #dddddd!important;}blockquote{border-left:3px solid #cccccc!important;}
+            """);
+      }
+      if(options.Borders)
+      {
+         css.Append("pre,blockquote,code,details{border:1px solid currentColor!important;}");
+      }
+      if(!options.Images)
+      {
+         css.Append("img{display:none!important;}");
+      }
+      return css.ToString();
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/SettingsChanges.cs b/src/MarkdownViewr.Windows.Core/SettingsChanges.cs
new file mode 100644
index 0000000..6a73458
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/SettingsChanges.cs
@@ -0,0 +1,36 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+using System.Text.Json.Nodes;
+
+
+namespace MarkdownViewr.Windows.Core;
+
+/// <summary>Merges only a document window's changed preferences so its older snapshot cannot overwrite sibling settings.</summary>
+public static class SettingsChanges
+{
+   /// <summary>Copies the source-generated settings contract without reflection or shared mutable arrays.</summary>
+   public static AppSettings Copy(AppSettings settings)
+      => JsonSerializer.SerializeToNode(settings, AppSettingsContext.Default.AppSettings)!.Deserialize(AppSettingsContext.Default.AppSettings)!;
+
+
+
+   /// <summary>Preserves current store values for every property the window has not changed since its last successful save.</summary>
+   public static AppSettings Merge(AppSettings current, AppSettings before, AppSettings edited)
+   {
+      JsonObject result = JsonSerializer.SerializeToNode(current, AppSettingsContext.Default.AppSettings)!.AsObject();
+      JsonObject baseline = JsonSerializer.SerializeToNode(before, AppSettingsContext.Default.AppSettings)!.AsObject();
+      JsonObject changes = JsonSerializer.SerializeToNode(edited, AppSettingsContext.Default.AppSettings)!.AsObject();
+      foreach((string name, JsonNode? value) in changes)
+      {
+         if(!JsonNode.DeepEquals(value, baseline[name]))
+         {
+            result[name] = value?.DeepClone();
+         }
+      }
+      return result.Deserialize(AppSettingsContext.Default.AppSettings)!;
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/catppuccin-latte.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/catppuccin-latte.json
new file mode 100644
index 0000000..f37aadf
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/catppuccin-latte.json
@@ -0,0 +1,37 @@
+{
+    "name": "Catppuccin Latte",
+    "colors": {
+        "background": "#eff1f5",
+        "text": "#4c4f69",
+        "heading1": "#d20f39",
+        "heading2": "#1e66f5",
+        "heading3": "#8839ef",
+        "heading4": "#df8e1d",
+        "heading5": "#40a02b",
+        "heading6": "#179299",
+        "link": "#1e66f5",
+        "codeBackground": "#e6e9ef",
+        "codeText": "#40a02b",
+        "blockquoteBorder": "#8839ef",
+        "blockquoteBackground": "#e6e9ef",
+        "highlightBackground": "#f9e2af",
+        "highlightText": "#4c4f69"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/catppuccin-mocha.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/catppuccin-mocha.json
new file mode 100644
index 0000000..d09a3ce
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/catppuccin-mocha.json
@@ -0,0 +1,37 @@
+{
+    "name": "Catppuccin Mocha",
+    "colors": {
+        "background": "#1e1e2e",
+        "text": "#cdd6f4",
+        "heading1": "#cba6f7",
+        "heading2": "#89b4fa",
+        "heading3": "#89b4fa",
+        "heading4": "#74c7ec",
+        "heading5": "#74c7ec",
+        "heading6": "#74c7ec",
+        "link": "#89dceb",
+        "codeBackground": "#181825",
+        "codeText": "#a6e3a1",
+        "blockquoteBorder": "#cba6f7",
+        "blockquoteBackground": "#24243a",
+        "highlightBackground": "#f9e2af",
+        "highlightText": "#1e1e2e"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/dracula.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/dracula.json
new file mode 100644
index 0000000..0cc21ea
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/dracula.json
@@ -0,0 +1,37 @@
+{
+    "name": "Dracula",
+    "colors": {
+        "background": "#282a36",
+        "text": "#f8f8f2",
+        "heading1": "#bd93f9",
+        "heading2": "#8be9fd",
+        "heading3": "#8be9fd",
+        "heading4": "#ff79c6",
+        "heading5": "#ff79c6",
+        "heading6": "#ff79c6",
+        "link": "#8be9fd",
+        "codeBackground": "#1e1f29",
+        "codeText": "#50fa7b",
+        "blockquoteBorder": "#bd93f9",
+        "blockquoteBackground": "#2e3042",
+        "highlightBackground": "#f1fa8c",
+        "highlightText": "#282a36"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/everforest-dark.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/everforest-dark.json
new file mode 100644
index 0000000..c571594
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/everforest-dark.json
@@ -0,0 +1,37 @@
+{
+    "name": "Everforest Dark",
+    "colors": {
+        "background": "#2d353b",
+        "text": "#d3c6aa",
+        "heading1": "#e67e80",
+        "heading2": "#7fbbb3",
+        "heading3": "#d699b6",
+        "heading4": "#dbbc7f",
+        "heading5": "#a7c080",
+        "heading6": "#83c092",
+        "link": "#7fbbb3",
+        "codeBackground": "#272e33",
+        "codeText": "#a7c080",
+        "blockquoteBorder": "#d699b6",
+        "blockquoteBackground": "#343f44",
+        "highlightBackground": "#dbbc7f",
+        "highlightText": "#2d353b"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/github-dark.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/github-dark.json
new file mode 100644
index 0000000..99d9893
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/github-dark.json
@@ -0,0 +1,37 @@
+{
+    "name": "GitHub Dark",
+    "colors": {
+        "background": "#0d1117",
+        "text": "#e6edf3",
+        "heading1": "#79c0ff",
+        "heading2": "#79c0ff",
+        "heading3": "#79c0ff",
+        "heading4": "#79c0ff",
+        "heading5": "#79c0ff",
+        "heading6": "#79c0ff",
+        "link": "#58a6ff",
+        "codeBackground": "#161b22",
+        "codeText": "#e6edf3",
+        "blockquoteBorder": "#3b434b",
+        "blockquoteBackground": "#141a22",
+        "highlightBackground": "#e3b341",
+        "highlightText": "#0d1117"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/github-light.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/github-light.json
new file mode 100644
index 0000000..e38d9a7
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/github-light.json
@@ -0,0 +1,37 @@
+{
+    "name": "GitHub Light",
+    "colors": {
+        "background": "#ffffff",
+        "text": "#1f2328",
+        "heading1": "#0550ae",
+        "heading2": "#0550ae",
+        "heading3": "#0550ae",
+        "heading4": "#0550ae",
+        "heading5": "#0550ae",
+        "heading6": "#0550ae",
+        "link": "#0969da",
+        "codeBackground": "#f6f8fa",
+        "codeText": "#1f2328",
+        "blockquoteBorder": "#d0d7de",
+        "blockquoteBackground": "#f6f8fa",
+        "highlightBackground": "#fff8c5",
+        "highlightText": "#1f2328"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/gruvbox-dark.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/gruvbox-dark.json
new file mode 100644
index 0000000..56ef78d
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/gruvbox-dark.json
@@ -0,0 +1,37 @@
+{
+    "name": "Gruvbox Dark",
+    "colors": {
+        "background": "#282828",
+        "text": "#ebdbb2",
+        "heading1": "#fb4934",
+        "heading2": "#83a598",
+        "heading3": "#b8bb26",
+        "heading4": "#fabd2f",
+        "heading5": "#d3869b",
+        "heading6": "#8ec07c",
+        "link": "#83a598",
+        "codeBackground": "#1d2021",
+        "codeText": "#b8bb26",
+        "blockquoteBorder": "#d65d0e",
+        "blockquoteBackground": "#32302f",
+        "highlightBackground": "#fabd2f",
+        "highlightText": "#282828"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/gruvbox-light.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/gruvbox-light.json
new file mode 100644
index 0000000..18a6101
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/gruvbox-light.json
@@ -0,0 +1,37 @@
+{
+    "name": "Gruvbox Light",
+    "colors": {
+        "background": "#fbf1c7",
+        "text": "#3c3836",
+        "heading1": "#cc241d",
+        "heading2": "#458588",
+        "heading3": "#98971a",
+        "heading4": "#d79921",
+        "heading5": "#b16286",
+        "heading6": "#689d6a",
+        "link": "#458588",
+        "codeBackground": "#f2e5bc",
+        "codeText": "#79740e",
+        "blockquoteBorder": "#d65d0e",
+        "blockquoteBackground": "#f2e5bc",
+        "highlightBackground": "#fabd2f",
+        "highlightText": "#282828"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/kanagawa.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/kanagawa.json
new file mode 100644
index 0000000..31533a9
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/kanagawa.json
@@ -0,0 +1,37 @@
+{
+    "name": "Kanagawa",
+    "colors": {
+        "background": "#1f1f28",
+        "text": "#dcd7ba",
+        "heading1": "#c34043",
+        "heading2": "#7e9cd8",
+        "heading3": "#957fb8",
+        "heading4": "#e6c384",
+        "heading5": "#76946a",
+        "heading6": "#6a9589",
+        "link": "#7fb4ca",
+        "codeBackground": "#16161d",
+        "codeText": "#98bb6c",
+        "blockquoteBorder": "#957fb8",
+        "blockquoteBackground": "#2a2a37",
+        "highlightBackground": "#ff9e3b",
+        "highlightText": "#1f1f28"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/monokai.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/monokai.json
new file mode 100644
index 0000000..c6980d3
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/monokai.json
@@ -0,0 +1,37 @@
+{
+    "name": "Monokai",
+    "colors": {
+        "background": "#272822",
+        "text": "#f8f8f2",
+        "heading1": "#f92672",
+        "heading2": "#66d9ef",
+        "heading3": "#a6e22e",
+        "heading4": "#e6db74",
+        "heading5": "#fd971f",
+        "heading6": "#ae81ff",
+        "link": "#66d9ef",
+        "codeBackground": "#1e1f1c",
+        "codeText": "#a6e22e",
+        "blockquoteBorder": "#f92672",
+        "blockquoteBackground": "#2e2f2a",
+        "highlightBackground": "#e6db74",
+        "highlightText": "#272822"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/nord.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/nord.json
new file mode 100644
index 0000000..bac0dd6
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/nord.json
@@ -0,0 +1,37 @@
+{
+    "name": "Nord",
+    "colors": {
+        "background": "#2e3440",
+        "text": "#d8dee9",
+        "heading1": "#88c0d0",
+        "heading2": "#81a1c1",
+        "heading3": "#5e81ac",
+        "heading4": "#b48ead",
+        "heading5": "#a3be8c",
+        "heading6": "#ebcb8b",
+        "link": "#88c0d0",
+        "codeBackground": "#3b4252",
+        "codeText": "#a3be8c",
+        "blockquoteBorder": "#81a1c1",
+        "blockquoteBackground": "#3b4252",
+        "highlightBackground": "#ebcb8b",
+        "highlightText": "#2e3440"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/one-dark.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/one-dark.json
new file mode 100644
index 0000000..f1d4176
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/one-dark.json
@@ -0,0 +1,37 @@
+{
+    "name": "One Dark",
+    "colors": {
+        "background": "#282c34",
+        "text": "#abb2bf",
+        "heading1": "#e06c75",
+        "heading2": "#61afef",
+        "heading3": "#c678dd",
+        "heading4": "#e5c07b",
+        "heading5": "#98c379",
+        "heading6": "#56b6c2",
+        "link": "#61afef",
+        "codeBackground": "#21252b",
+        "codeText": "#98c379",
+        "blockquoteBorder": "#c678dd",
+        "blockquoteBackground": "#2c313c",
+        "highlightBackground": "#e5c07b",
+        "highlightText": "#282c34"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/one-light.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/one-light.json
new file mode 100644
index 0000000..ded76a9
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/one-light.json
@@ -0,0 +1,37 @@
+{
+    "name": "One Light",
+    "colors": {
+        "background": "#fafafa",
+        "text": "#383a42",
+        "heading1": "#e45649",
+        "heading2": "#4078f2",
+        "heading3": "#a626a4",
+        "heading4": "#c18401",
+        "heading5": "#50a14f",
+        "heading6": "#0184bc",
+        "link": "#4078f2",
+        "codeBackground": "#f0f0f0",
+        "codeText": "#50a14f",
+        "blockquoteBorder": "#a626a4",
+        "blockquoteBackground": "#f0f0f0",
+        "highlightBackground": "#ffd700",
+        "highlightText": "#383a42"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/rose-pine-dawn.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/rose-pine-dawn.json
new file mode 100644
index 0000000..54562d0
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/rose-pine-dawn.json
@@ -0,0 +1,37 @@
+{
+    "name": "Rosé Pine Dawn",
+    "colors": {
+        "background": "#faf4ed",
+        "text": "#575279",
+        "heading1": "#907aa9",
+        "heading2": "#286983",
+        "heading3": "#286983",
+        "heading4": "#56949f",
+        "heading5": "#56949f",
+        "heading6": "#56949f",
+        "link": "#286983",
+        "codeBackground": "#f2e9e1",
+        "codeText": "#d7827e",
+        "blockquoteBorder": "#907aa9",
+        "blockquoteBackground": "#f2e9e1",
+        "highlightBackground": "#f6c177",
+        "highlightText": "#575279"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/rose-pine.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/rose-pine.json
new file mode 100644
index 0000000..bcfafc0
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/rose-pine.json
@@ -0,0 +1,37 @@
+{
+    "name": "Ros\u00e9 Pine",
+    "colors": {
+        "background": "#191724",
+        "text": "#e0def4",
+        "heading1": "#eb6f92",
+        "heading2": "#9ccfd8",
+        "heading3": "#c4a7e7",
+        "heading4": "#f6c177",
+        "heading5": "#31748f",
+        "heading6": "#ebbcba",
+        "link": "#9ccfd8",
+        "codeBackground": "#1f1d2e",
+        "codeText": "#9ccfd8",
+        "blockquoteBorder": "#c4a7e7",
+        "blockquoteBackground": "#1f1d2e",
+        "highlightBackground": "#f6c177",
+        "highlightText": "#191724"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/solarized-dark.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/solarized-dark.json
new file mode 100644
index 0000000..1ce911a
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/solarized-dark.json
@@ -0,0 +1,37 @@
+{
+    "name": "Solarized Dark",
+    "colors": {
+        "background": "#002b36",
+        "text": "#839496",
+        "heading1": "#b58900",
+        "heading2": "#268bd2",
+        "heading3": "#268bd2",
+        "heading4": "#2aa198",
+        "heading5": "#2aa198",
+        "heading6": "#2aa198",
+        "link": "#268bd2",
+        "codeBackground": "#073642",
+        "codeText": "#859900",
+        "blockquoteBorder": "#b58900",
+        "blockquoteBackground": "#073642",
+        "highlightBackground": "#b58900",
+        "highlightText": "#002b36"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/solarized-light.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/solarized-light.json
new file mode 100644
index 0000000..86e2d4f
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/solarized-light.json
@@ -0,0 +1,37 @@
+{
+    "name": "Solarized Light",
+    "colors": {
+        "background": "#fdf6e3",
+        "text": "#657b83",
+        "heading1": "#dc322f",
+        "heading2": "#268bd2",
+        "heading3": "#6c71c4",
+        "heading4": "#b58900",
+        "heading5": "#2aa198",
+        "heading6": "#859900",
+        "link": "#268bd2",
+        "codeBackground": "#eee8d5",
+        "codeText": "#859900",
+        "blockquoteBorder": "#6c71c4",
+        "blockquoteBackground": "#eee8d5",
+        "highlightBackground": "#b58900",
+        "highlightText": "#fdf6e3"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/tokyo-night-light.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/tokyo-night-light.json
new file mode 100644
index 0000000..443f590
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/tokyo-night-light.json
@@ -0,0 +1,37 @@
+{
+    "name": "Tokyo Night Light",
+    "colors": {
+        "background": "#d5d6db",
+        "text": "#343b58",
+        "heading1": "#8c4351",
+        "heading2": "#34548a",
+        "heading3": "#5a4a78",
+        "heading4": "#8f5e15",
+        "heading5": "#33635c",
+        "heading6": "#0f4b6e",
+        "link": "#34548a",
+        "codeBackground": "#cbccd1",
+        "codeText": "#33635c",
+        "blockquoteBorder": "#5a4a78",
+        "blockquoteBackground": "#cbccd1",
+        "highlightBackground": "#f9c859",
+        "highlightText": "#343b58"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/tokyo-night.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/tokyo-night.json
new file mode 100644
index 0000000..15a9610
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/tokyo-night.json
@@ -0,0 +1,37 @@
+{
+    "name": "Tokyo Night",
+    "colors": {
+        "background": "#1a1b26",
+        "text": "#a9b1d6",
+        "heading1": "#f7768e",
+        "heading2": "#7aa2f7",
+        "heading3": "#bb9af7",
+        "heading4": "#e0af68",
+        "heading5": "#9ece6a",
+        "heading6": "#73daca",
+        "link": "#7aa2f7",
+        "codeBackground": "#16161e",
+        "codeText": "#9ece6a",
+        "blockquoteBorder": "#bb9af7",
+        "blockquoteBackground": "#1f2335",
+        "highlightBackground": "#e0af68",
+        "highlightText": "#1a1b26"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/zenburn.json b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/zenburn.json
new file mode 100644
index 0000000..17b4cda
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/BuiltIn/zenburn.json
@@ -0,0 +1,37 @@
+{
+    "name": "Zenburn",
+    "colors": {
+        "background": "#3f3f3f",
+        "text": "#dcdccc",
+        "heading1": "#cc9393",
+        "heading2": "#7cb8bb",
+        "heading3": "#8cd0d3",
+        "heading4": "#f0dfaf",
+        "heading5": "#dfaf8f",
+        "heading6": "#c3bf9f",
+        "link": "#93e0e3",
+        "codeBackground": "#2b2b2b",
+        "codeText": "#7f9f7f",
+        "blockquoteBorder": "#cc9393",
+        "blockquoteBackground": "#4f4f4f",
+        "highlightBackground": "#f0dfaf",
+        "highlightText": "#3f3f3f"
+    },
+    "fonts": {
+        "body": "System",
+        "heading": "System",
+        "code": "SF Mono"
+    },
+    "sizes": {
+        "baseFontSize": 14,
+        "h1Size": 28,
+        "h2Size": 23,
+        "h3Size": 20,
+        "h4Size": 18,
+        "h5Size": 16,
+        "h6Size": 15,
+        "codeFontSize": 13,
+        "lineHeight": 1.7
+    },
+    "customCSS": ""
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/Document.css b/src/MarkdownViewr.Windows.Core/Themes/Document.css
new file mode 100644
index 0000000..5d567ea
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/Document.css
@@ -0,0 +1,260 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ * Document rules adapted from markdownViewr template.html at
+ * 6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021.
+ * TOC/source/resizers are native WinUI controls; print rules are owned by PrintStyles.
+ */
+
+* {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+}
+
+::-webkit-scrollbar {
+    width: 12px;
+    height: 12px;
+}
+
+::-webkit-scrollbar-track {
+    background: var(--bg);
+}
+
+::-webkit-scrollbar-thumb {
+    background: color-mix(in srgb, var(--text) 30%, var(--bg));
+    border: 3px solid var(--bg);
+    border-radius: 999px;
+}
+
+::-webkit-scrollbar-thumb:hover {
+    background: color-mix(in srgb, var(--text) 45%, var(--bg));
+}
+
+::-webkit-scrollbar-corner {
+    background: var(--bg);
+}
+
+html {
+    height: 100%;
+    overflow: hidden;
+}
+
+body {
+    background: var(--bg);
+    color: var(--text);
+    font-family: var(--body-font);
+    font-size: var(--base-font-size);
+    line-height: var(--line-height);
+    padding: 0;
+    -webkit-font-smoothing: antialiased;
+    display: flex;
+    align-items: flex-start;
+    height: 100vh;
+    overflow: hidden;
+}
+
+#content {
+    flex: 1;
+    min-width: 0;
+    height: 100vh;
+    overflow-x: hidden;
+    overflow-y: auto;
+}
+
+#content-inner {
+    padding: 32px 48px;
+}
+
+h1, h2, h3, h4, h5, h6 { font-family: var(--heading-font); font-weight: 600; cursor: pointer; user-select: none; scroll-margin-top: 1rem; }
+h1 .collapse-arrow, h2 .collapse-arrow, h3 .collapse-arrow,
+h4 .collapse-arrow, h5 .collapse-arrow, h6 .collapse-arrow {
+    display: inline-block;
+    width: 0.6em;
+    font-size: 0.6em;
+    margin-right: 10px;
+    transition: transform 0.15s ease;
+    opacity: 0.4;
+    vertical-align: middle;
+}
+h1:hover .collapse-arrow, h2:hover .collapse-arrow, h3:hover .collapse-arrow,
+h4:hover .collapse-arrow, h5:hover .collapse-arrow, h6:hover .collapse-arrow {
+    opacity: 0.8;
+}
+h1.collapsed .collapse-arrow, h2.collapsed .collapse-arrow, h3.collapsed .collapse-arrow,
+h4.collapsed .collapse-arrow, h5.collapsed .collapse-arrow, h6.collapsed .collapse-arrow {
+    transform: rotate(-90deg);
+}
+h1 { color: var(--h1); font-size: var(--h1-size); margin: 24px 0 16px 0; padding-bottom: 8px; border-bottom: 1px solid color-mix(in srgb, var(--text) 20%, transparent); }
+h2 { color: var(--h2); font-size: var(--h2-size); margin: 20px 0 12px 0; padding-bottom: 6px; border-bottom: 1px solid color-mix(in srgb, var(--text) 10%, transparent); }
+h3 { color: var(--h3); font-size: var(--h3-size); margin: 18px 0 10px 0; }
+h4 { color: var(--h4); font-size: var(--h4-size); margin: 16px 0 8px 0; }
+h5 { color: var(--h5); font-size: var(--h5-size); margin: 14px 0 6px 0; }
+h6 { color: var(--h6); font-size: var(--h6-size); margin: 14px 0 6px 0; }
+
+h1:first-child, h2:first-child, h3:first-child { margin-top: 0; }
+
+p {
+    margin: 0 0 16px 0;
+}
+
+a {
+    color: var(--link);
+    text-decoration: none;
+}
+
+a:hover {
+    text-decoration: underline;
+}
+
+pre {
+    background: var(--code-bg);
+    border-radius: 8px;
+    padding: 16px;
+    margin: 0 0 16px 0;
+    overflow-x: auto;
+}
+
+pre code {
+    font-family: var(--code-font);
+    font-size: var(--code-font-size);
+    color: var(--code-text);
+    background: none;
+    padding: 0;
+    border-radius: 0;
+}
+
+code {
+    font-family: var(--code-font);
+    font-size: 0.9em;
+    background: var(--code-bg);
+    color: var(--code-text);
+    padding: 2px 6px;
+    border-radius: 4px;
+}
+
+blockquote {
+    border-left: 3px solid var(--blockquote-border);
+    padding: 8px 16px;
+    margin: 0 0 16px 0;
+    background: color-mix(in srgb, var(--blockquote-bg) 50%, transparent);
+    border-radius: 0 8px 8px 0;
+}
+
+blockquote blockquote {
+    background: color-mix(in srgb, var(--blockquote-bg) 75%, transparent);
+}
+
+blockquote blockquote blockquote {
+    background: var(--blockquote-bg);
+}
+
+blockquote p:last-child {
+    margin-bottom: 0;
+}
+
+ul, ol {
+    padding-left: 24px;
+    margin: 0 0 16px 0;
+}
+
+li {
+    margin-bottom: 4px;
+}
+
+li.task-list-item {
+    list-style: none;
+}
+
+li.task-list-item > input[type="checkbox"] {
+    margin: 0 0.4em 0.15em -1.4em;
+    vertical-align: middle;
+}
+
+li > ul, li > ol {
+    margin-top: 4px;
+    margin-bottom: 4px;
+}
+
+hr {
+    border: none;
+    border-top: 1px solid color-mix(in srgb, var(--text) 20%, transparent);
+    margin: 24px 0;
+}
+
+table {
+    border-collapse: collapse;
+    width: 100%;
+    margin: 0 0 16px 0;
+}
+
+th, td {
+    border: 1px solid color-mix(in srgb, var(--text) 20%, transparent);
+    padding: 8px 12px;
+    text-align: left;
+}
+
+th {
+    background: var(--code-bg);
+    font-weight: 600;
+}
+
+img {
+    max-width: 100%;
+    height: auto;
+    border-radius: 4px;
+}
+
+del {
+    opacity: 0.6;
+}
+
+mark {
+    background-color: var(--highlight-bg);
+    color: var(--highlight-text);
+    border-radius: 2px;
+    padding: 0 2px;
+}
+
+.frontmatter {
+    margin: 0 0 24px 0;
+    padding: 12px 16px;
+    background: var(--blockquote-bg);
+    border-radius: 8px;
+    border-left: 3px solid var(--blockquote-border);
+    font-size: 0.85em;
+}
+
+.frontmatter table {
+    width: auto;
+    border: none;
+    margin: 0;
+}
+
+.frontmatter td {
+    border: none;
+    padding: 2px 12px 2px 0;
+    vertical-align: top;
+}
+
+.frontmatter .fm-key {
+    color: var(--link);
+    font-weight: 600;
+    white-space: nowrap;
+}
+
+/* Generated collapse sections retain the spacing of the original flat document. */
+#content-inner section > h1 { margin-top: 24px; }
+#content-inner section > h2 { margin-top: 20px; }
+#content-inner section > h3 { margin-top: 18px; }
+#content-inner > section:first-child > h1,
+#content-inner > section:first-child > h2,
+#content-inner > section:first-child > h3 { margin-top: 0; }
+
+/* Windows keeps accessible metadata row headings and literal overflow safe. */
+#content-inner { overflow-wrap: anywhere; }
+.frontmatter th { border: none; padding: 2px 12px 2px 0; vertical-align: top; background: none; }
+kbd { font-family: var(--code-font); color: var(--code-text); }
+ins { text-decoration: underline; }
+::selection { background: var(--highlight-bg); color: var(--highlight-text); }
diff --git a/src/MarkdownViewr.Windows.Core/Themes/ReaderTheme.cs b/src/MarkdownViewr.Windows.Core/Themes/ReaderTheme.cs
new file mode 100644
index 0000000..3dc0eec
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/ReaderTheme.cs
@@ -0,0 +1,299 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+
+
+namespace MarkdownViewr.Windows.Core.Themes;
+
+/// <summary>Validates Darin's version-one theme format before generating passive document CSS.</summary>
+public sealed class ReaderTheme
+{
+   /// <summary>Bounds schema input before a native file read allocates the complete JSON text.</summary>
+   public const int MaximumCharacters = 128 * 1024;
+   private static readonly string[] s_colors = ["background", "text", "heading1", "heading2", "heading3", "heading4", "heading5", "heading6", "link", "codeBackground", "codeText", "blockquoteBorder", "blockquoteBackground", "highlightBackground", "highlightText"];
+   private static readonly string[] s_sizes = ["baseFontSize", "h1Size", "h2Size", "h3Size", "h4Size", "h5Size", "h6Size", "codeFontSize", "lineHeight"];
+   private static readonly string s_baseStyles = LoadBaseStyles();
+
+
+
+   /// <summary>Retains only the validated display name and generated CSS.</summary>
+   private ReaderTheme(string name, string styles, string json, int schemaVersion)
+   {
+      Name = name;
+      Styles = styles;
+      Json = json;
+      SchemaVersion = schemaVersion;
+   }
+
+
+
+   /// <summary>The display name, never an HTML or filesystem identifier.</summary>
+   public string Name { get; }
+
+
+
+   /// <summary>CSS safe for an inline style element; document resource policy still applies.</summary>
+   public string Styles { get; }
+
+
+
+   /// <summary>The validated source retained for editing without losing palette fields.</summary>
+   public string Json { get; }
+
+
+
+   /// <summary>A compatible newer schema requires deliberate native confirmation before import, while its version is retained on export.</summary>
+   public int SchemaVersion { get; }
+
+
+
+   /// <summary>Copies a validated theme under another display name without dropping metadata or changing its schema version.</summary>
+   public ReaderTheme Rename(string name)
+   {
+      JsonNode source = JsonNode.Parse(Json)!;
+      source["name"] = name;
+      return ParseCompatible(source.ToJsonString());
+   }
+
+
+
+   /// <summary>Edits a copy of the original schema, preserving unrelated metadata and rejecting invalid controls before persistence.</summary>
+   public ReaderTheme Edit(string name, IReadOnlyDictionary<string, string> fonts, IReadOnlyDictionary<string, double> sizes, IReadOnlyDictionary<string, string> colors, string customCss)
+   {
+      ArgumentNullException.ThrowIfNull(name);
+      ArgumentNullException.ThrowIfNull(fonts);
+      ArgumentNullException.ThrowIfNull(sizes);
+      ArgumentNullException.ThrowIfNull(colors);
+      ArgumentNullException.ThrowIfNull(customCss);
+      JsonNode source = JsonNode.Parse(Json)!;
+      source["name"] = name.Trim();
+      source["customCSS"] = customCss;
+      foreach((string key, string value) in fonts)
+      {
+         if(key is not ("body" or "heading" or "code"))
+         {
+            throw new ArgumentException("Unknown theme font field.", nameof(fonts));
+         }
+         source["fonts"]![key] = value?.Trim();
+      }
+      foreach((string key, double value) in sizes)
+      {
+         if(!s_sizes.Contains(key, StringComparer.Ordinal))
+         {
+            throw new ArgumentException("Unknown theme size field.", nameof(sizes));
+         }
+         if(!double.IsFinite(value))
+         {
+            throw new JsonException("Enter finite font sizes between 6 and 96, and line height between 0.5 and 4.");
+         }
+         source["sizes"]![key] = value;
+      }
+      foreach((string key, string value) in colors)
+      {
+         if(!s_colors.Contains(key, StringComparer.Ordinal))
+         {
+            throw new ArgumentException("Unknown theme color field.", nameof(colors));
+         }
+         source["colors"]![key] = value?.Trim();
+      }
+      return ParseCompatible(source.ToJsonString());
+   }
+
+
+
+   /// <summary>Scales only validated font sizes; colors, fonts, line height and custom CSS retain their original semantics.</summary>
+   public string GetStyles(double zoomScale)
+   {
+      if(!double.IsFinite(zoomScale) || zoomScale is < 0.3 or > 5)
+      {
+         throw new ArgumentOutOfRangeException(nameof(zoomScale));
+      }
+      using var document = JsonDocument.Parse(Json);
+      return BuildStyles(document.RootElement, zoomScale);
+   }
+
+
+
+   /// <summary>Applies reference global/theme/width precedence only to reading styles, leaving print styles and theme JSON independent.</summary>
+   public string GetReadingStyles(ReadingAppearance appearance, double zoomScale)
+   {
+      ArgumentNullException.ThrowIfNull(appearance);
+      appearance.Validate();
+      if(!double.IsFinite(zoomScale) || zoomScale is < 0.3 or > 5)
+      {
+         throw new ArgumentOutOfRangeException(nameof(zoomScale));
+      }
+      using var document = JsonDocument.Parse(Json);
+      return BuildStyles(document.RootElement, zoomScale, appearance);
+   }
+
+
+
+   /// <summary>Accepts the original schema, including themes without an explicit version number.</summary>
+   public static ReaderTheme Parse(string json) => ParseSchema(json, allowNewer: false);
+
+
+
+   /// <summary>Validates every known field of saved themes or pending imports; native import still requires explicit newer-version confirmation.</summary>
+   public static ReaderTheme ParseCompatible(string json) => ParseSchema(json, allowNewer: true);
+
+
+
+   /// <summary>Compatibility never bypasses JSON depth, field, font, color, size or CSS checks.</summary>
+   private static ReaderTheme ParseSchema(string json, bool allowNewer)
+   {
+      ArgumentNullException.ThrowIfNull(json);
+      if(json.Length > MaximumCharacters)
+      {
+         throw new JsonException("The theme exceeds the 128 Ki-character limit.");
+      }
+      using var document = JsonDocument.Parse(json, new JsonDocumentOptions { MaxDepth = 16 });
+      JsonElement root = document.RootElement;
+      RequireObject(root);
+      int schemaVersion = 1;
+      if(root.TryGetProperty("schemaVersion", out JsonElement version) && (version.ValueKind != JsonValueKind.Number || !version.TryGetInt32(out schemaVersion) || schemaVersion < 1 || !allowNewer && schemaVersion != 1))
+      {
+         throw new JsonException("The theme schema version is invalid or unsupported.");
+      }
+      string name = ReadString(root, "name");
+      if(string.IsNullOrWhiteSpace(name) || name.Length > 80 || name.Any(char.IsControl))
+      {
+         throw new JsonException("Theme names must contain 1–80 printable characters.");
+      }
+      string styles = BuildStyles(root);
+      return new ReaderTheme(name, styles, json, schemaVersion);
+   }
+
+
+
+   /// <summary>Constructs variables only from validated colors, finite sizes and escaped font families.</summary>
+   private static string BuildStyles(JsonElement root, double zoomScale = 1, ReadingAppearance? appearance = null)
+   {
+      var styles = new StringBuilder(":root {");
+      JsonElement colors = ReadObject(root, "colors");
+      foreach(string field in s_colors)
+      {
+         string value = ReadString(colors, field);
+         if(value.Length != 7 || value[0] != '#' || !value.AsSpan(1).ToString().All(char.IsAsciiHexDigit))
+         {
+            throw new JsonException("Theme colors must use six-digit hexadecimal notation.");
+         }
+         styles.Append("--").Append(field).Append(':').Append(value).Append(';');
+      }
+      AddSizes(styles, ReadObject(root, "sizes"), zoomScale);
+      JsonElement fonts = ReadObject(root, "fonts");
+      foreach(string field in new[] { "body", "heading", "code" })
+      {
+         styles.Append("--").Append(field).Append("Font:").Append(FontFamily(ReadString(fonts, field))).Append(';');
+      }
+      styles.Append("--bg:var(--background);--h1:var(--heading1);--h2:var(--heading2);--h3:var(--heading3);--h4:var(--heading4);--h5:var(--heading5);--h6:var(--heading6);");
+      styles.Append("--code-bg:var(--codeBackground);--code-text:var(--codeText);--blockquote-border:var(--blockquoteBorder);--blockquote-bg:var(--blockquoteBackground);");
+      styles.Append("--highlight-bg:var(--highlightBackground);--highlight-text:var(--highlightText);--body-font:var(--bodyFont);--heading-font:var(--headingFont);--code-font:var(--codeFont);");
+      styles.Append("--base-font-size:var(--baseFontSize);--h1-size:var(--h1Size);--h2-size:var(--h2Size);--h3-size:var(--h3Size);--h4-size:var(--h4Size);--h5-size:var(--h5Size);--h6-size:var(--h6Size);");
+      styles.Append("--code-font-size:var(--codeFontSize);--line-height:var(--lineHeight);--zoom:").Append(zoomScale.ToString("R", CultureInfo.InvariantCulture));
+      styles.Append(";}").Append(s_baseStyles);
+      if(appearance is not null)
+      {
+         styles.Append(appearance.GlobalCss.Replace("<", "\\3c ", StringComparison.Ordinal));
+      }
+      if(root.TryGetProperty("customCSS", out _))
+      {
+         // CSS can style the page, but it cannot close the HTML style element.
+         styles.Append(ReadString(root, "customCSS").Replace("<", "\\3c ", StringComparison.Ordinal));
+      }
+      if(appearance?.LimitWidth == true)
+      {
+         styles.Append("#content-inner{max-width:calc(").Append(appearance.WidthPixels.ToString("R", CultureInfo.InvariantCulture)).Append("px * var(--zoom));margin:auto;}");
+      }
+      return styles.ToString();
+   }
+
+
+
+   /// <summary>Bounds font sizes and line height, rejecting non-finite or non-numeric values.</summary>
+   private static void AddSizes(StringBuilder styles, JsonElement sizes, double zoomScale)
+   {
+      foreach(string field in s_sizes)
+      {
+         bool lineHeight = string.Equals(field, "lineHeight", StringComparison.Ordinal);
+         if(!sizes.TryGetProperty(field, out JsonElement element) || element.ValueKind != JsonValueKind.Number ||
+            !element.TryGetDouble(out double value) || !double.IsFinite(value) || value < (lineHeight ? 0.5 : 6) || value > (lineHeight ? 4 : 96))
+         {
+            throw new JsonException("Theme sizes must be finite and within the supported reading range.");
+         }
+         double scaled = lineHeight ? value : value * zoomScale;
+         styles.Append("--").Append(field).Append(':').Append(scaled.ToString("R", CultureInfo.InvariantCulture));
+         styles.Append(lineHeight ? ";" : "px;");
+      }
+   }
+
+
+
+   /// <summary>Maps macOS defaults to Windows and escapes every custom font character as a CSS code point.</summary>
+   private static string FontFamily(string value)
+   {
+      if(string.IsNullOrWhiteSpace(value) || value.Length > 80 || value.Any(char.IsControl))
+      {
+         throw new JsonException("Font names must contain 1–80 printable characters.");
+      }
+      return value switch
+      {
+         "System" => "system-ui, sans-serif",
+         "SF Mono" => "Consolas, 'Cascadia Code', monospace",
+         _ => "'" + string.Concat(value.EnumerateRunes().Select(rune => "\\" + rune.Value.ToString("X", CultureInfo.InvariantCulture) + " ")) + "'",
+      };
+   }
+
+
+
+   /// <summary>Reports malformed required strings consistently as theme input errors.</summary>
+   private static string ReadString(JsonElement parent, string name)
+   {
+      if(!parent.TryGetProperty(name, out JsonElement value) || value.ValueKind != JsonValueKind.String)
+      {
+         throw new JsonException("The theme is missing a required string: " + name);
+      }
+      return value.GetString()!;
+   }
+
+
+
+   /// <summary>Requires each schema group to be an object.</summary>
+   private static JsonElement ReadObject(JsonElement parent, string name)
+   {
+      if(!parent.TryGetProperty(name, out JsonElement value))
+      {
+         throw new JsonException("The theme is missing a required object: " + name);
+      }
+      RequireObject(value);
+      return value;
+   }
+
+
+
+   /// <summary>Prevents wrong-shaped JSON from reaching property accessors.</summary>
+   private static void RequireObject(JsonElement element)
+   {
+      if(element.ValueKind != JsonValueKind.Object)
+      {
+         throw new JsonException("A theme schema group must be an object.");
+      }
+   }
+
+
+
+   /// <summary>Embeds the pinned reference document rules without network access or a runtime asset-path dependency.</summary>
+   private static string LoadBaseStyles()
+   {
+      using Stream stream = typeof(ReaderTheme).Assembly.GetManifestResourceStream("MarkdownViewr.Windows.Core.Themes.Document.css")!;
+      using var reader = new StreamReader(stream);
+      return reader.ReadToEnd();
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/ReadingAppearance.cs b/src/MarkdownViewr.Windows.Core/Themes/ReadingAppearance.cs
new file mode 100644
index 0000000..17cf438
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/ReadingAppearance.cs
@@ -0,0 +1,44 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Themes;
+
+/// <summary>Reader-wide layout and CSS remain independent of saved theme data and print preferences.</summary>
+/// <param name="LimitWidth">Whether the reader applies a finite content width, enabled by default in the reference.</param>
+/// <param name="WidthPixels">Maximum content width before reading zoom is applied.</param>
+/// <param name="GlobalCss">Native user CSS applied before per-theme CSS.</param>
+public sealed record ReadingAppearance(bool LimitWidth = true, double WidthPixels = 1000, string GlobalCss = "")
+{
+   /// <summary>Bounds native CSS input and persisted layout without allocating unbounded style output.</summary>
+   public const int MaximumCssCharacters = 128 * 1024;
+
+
+
+   /// <summary>Repairs corrupt saved values while retaining the user's valid preferences.</summary>
+   public ReadingAppearance Sanitize() => this with
+   {
+      WidthPixels = double.IsFinite(WidthPixels) && WidthPixels > 0 ? Math.Clamp(WidthPixels, 200, 4000) : 1000,
+      GlobalCss = GlobalCss is null || GlobalCss.Length > MaximumCssCharacters ? "" : GlobalCss,
+   };
+
+
+
+   /// <summary>Invalid native drafts stay open; repairing stored values must not silently accept an invalid edit.</summary>
+   public void Validate()
+   {
+      if(!double.IsFinite(WidthPixels) || WidthPixels is < 200 or > 4000)
+      {
+         throw new InvalidOperationException("Enter a content width between 200 and 4000 pixels.");
+      }
+      if(GlobalCss is null)
+      {
+         throw new InvalidOperationException("Global CSS cannot be null.");
+      }
+      if(GlobalCss.Length > MaximumCssCharacters)
+      {
+         throw new InvalidOperationException("Global CSS exceeds the 128 Ki-character limit.");
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/SourcePalette.cs b/src/MarkdownViewr.Windows.Core/Themes/SourcePalette.cs
new file mode 100644
index 0000000..8a3101c
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/SourcePalette.cs
@@ -0,0 +1,114 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Themes;
+
+/// <summary>Combines document accent colors with Windows light/dark source backgrounds and readable foreground contrast.</summary>
+public sealed class SourcePalette
+{
+   private readonly Dictionary<SourceTokenKind, string> _colors = [];
+
+
+
+   /// <summary>Validated document colors are adjusted only for the source's native background, never written back to theme data.</summary>
+   public SourcePalette(ReaderTheme theme, bool dark)
+   {
+      ArgumentNullException.ThrowIfNull(theme);
+      Background = dark ? "#1E1E1E" : "#FFFFFF";
+      Foreground = dark ? "#D4D4D4" : "#1F1F1F";
+      using var json = JsonDocument.Parse(theme.Json);
+      JsonElement colors = json.RootElement.GetProperty("colors");
+      foreach(SourceTokenKind kind in Enum.GetValues<SourceTokenKind>())
+      {
+         string key = kind switch
+         {
+            SourceTokenKind.Heading => "heading1",
+            SourceTokenKind.Emphasis => "heading3",
+            SourceTokenKind.Strong => "heading2",
+            SourceTokenKind.Strikethrough => "heading6",
+            SourceTokenKind.Image => "heading4",
+            SourceTokenKind.List => "heading5",
+            SourceTokenKind.Quote or SourceTokenKind.Html => "blockquoteBorder",
+            SourceTokenKind.Code or SourceTokenKind.Frontmatter => "codeText",
+            _ => "link",
+         };
+         _colors.Add(kind, Readable(colors.GetProperty(key).GetString()!));
+      }
+   }
+
+
+
+   /// <summary>Shell mode defines the source background independently of the reader's document palette.</summary>
+   public string Background { get; }
+
+
+
+   /// <summary>Ordinary source remains readable when a document palette was authored for a different light/dark mode.</summary>
+   public string Foreground { get; }
+
+
+
+   /// <summary>Only known source kinds can request native colors.</summary>
+   public string Color(SourceTokenKind kind) => _colors[kind];
+
+
+
+   /// <summary>WCAG luminance measures native foreground/background contrast, including custom document palettes.</summary>
+   public static double Contrast(string foreground, string background)
+   {
+      double first = Luminance(foreground);
+      double second = Luminance(background);
+      return (Math.Max(first, second) + 0.05) / (Math.Min(first, second) + 0.05);
+   }
+
+
+
+   /// <summary>Bounded blending retains the document hue while ensuring at least4.5:1 contrast against the native background.</summary>
+   private string Readable(string color)
+   {
+      string candidate = color;
+      int step = 0;
+      while(Contrast(candidate, Background) < 4.5)
+      {
+         // At step10 the known foreground guarantees contrast, even for a matching-background custom accent.
+         double amount = ++step / 10d;
+         byte[] channels = new byte[3];
+         for(int channel = 0; channel < 3; channel++)
+         {
+            double original = Channel(color, channel);
+            double target = Channel(Foreground, channel);
+            channels[channel] = (byte)Math.Round(original + (target - original) * amount);
+         }
+         candidate = FormattableString.Invariant($"#{channels[0]:X2}{channels[1]:X2}{channels[2]:X2}");
+      }
+      return candidate;
+   }
+
+
+
+   /// <summary>Theme validation already restricts input to RGB hex colors; sRGB channels are converted to linear light.</summary>
+   private static double Luminance(string color)
+   {
+      double value = 0;
+      double[] weights = [0.2126, 0.7152, 0.0722];
+      for(int channel = 0; channel < 3; channel++)
+      {
+         double component = Channel(color, channel) / 255d;
+         double linear = component <= 0.04045 ? component / 12.92 : Math.Pow((component + 0.055) / 1.055, 2.4);
+         value += linear * weights[channel];
+      }
+      return value;
+   }
+
+
+
+   /// <summary>Extracts only validated numeric RGB channels; authored CSS and font names are not interpreted.</summary>
+   private static byte Channel(string color, int channel) => byte.Parse(color.AsSpan(1 + channel * 2, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture);
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/ThemeCatalog.cs b/src/MarkdownViewr.Windows.Core/Themes/ThemeCatalog.cs
new file mode 100644
index 0000000..0e955d7
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/ThemeCatalog.cs
@@ -0,0 +1,56 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.Core.Themes;
+
+/// <summary>Loads the original bundled themes from assembly resources, independent of the install directory.</summary>
+public static class ThemeCatalog
+{
+   private static readonly ReaderTheme[] s_builtIn = LoadBuiltIn();
+
+
+
+   /// <summary>The bundled themes sorted by display name.</summary>
+   public static IReadOnlyList<ReaderTheme> BuiltIn { get; } = Array.AsReadOnly(s_builtIn);
+
+
+
+   /// <summary>Restores a saved theme by name, falling back to Darin's default after removal or invalid settings.</summary>
+   public static ReaderTheme Find(string? name)
+      => s_builtIn.FirstOrDefault(theme => string.Equals(theme.Name, name, StringComparison.Ordinal))
+         ?? s_builtIn.Single(theme => string.Equals(theme.Name, "Catppuccin Mocha", StringComparison.Ordinal));
+
+
+
+   /// <summary>User themes override matching built-in names; new names join the alphabetic catalog.</summary>
+   public static IReadOnlyList<ReaderTheme> Combine(IEnumerable<ReaderTheme> userThemes)
+   {
+      ArgumentNullException.ThrowIfNull(userThemes);
+      Dictionary<string, ReaderTheme> themes = s_builtIn.ToDictionary(theme => theme.Name, StringComparer.Ordinal);
+      foreach(ReaderTheme theme in userThemes)
+      {
+         themes[theme.Name] = theme;
+      }
+      return Array.AsReadOnly(themes.Values.OrderBy(theme => theme.Name, StringComparer.Ordinal).ToArray());
+   }
+
+
+   /// <summary>Parses the shipped JSON with the same validation used for user themes.</summary>
+   private static ReaderTheme[] LoadBuiltIn()
+   {
+      System.Reflection.Assembly assembly = typeof(ThemeCatalog).Assembly;
+      return assembly.GetManifestResourceNames()
+         .Where(name => name.Contains(".Themes.BuiltIn.", StringComparison.Ordinal) && name.EndsWith(".json", StringComparison.Ordinal))
+         .Select(name =>
+         {
+            using Stream stream = assembly.GetManifestResourceStream(name)!;
+            using var reader = new StreamReader(stream);
+            return ReaderTheme.Parse(reader.ReadToEnd());
+         })
+         .OrderBy(theme => theme.Name, StringComparer.Ordinal)
+         .ToArray();
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/ThemeImportResolution.cs b/src/MarkdownViewr.Windows.Core/Themes/ThemeImportResolution.cs
new file mode 100644
index 0000000..9c19edc
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/ThemeImportResolution.cs
@@ -0,0 +1,15 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Themes;
+
+/// <summary>Deliberate native choices match the reference theme import conflict behavior.</summary>
+public enum ThemeImportResolution
+{
+   Overwrite,
+   KeepBoth,
+   Skip,
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/ThemeJson.cs b/src/MarkdownViewr.Windows.Core/Themes/ThemeJson.cs
new file mode 100644
index 0000000..4430db3
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/ThemeJson.cs
@@ -0,0 +1,50 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text;
+using System.Text.Json;
+
+
+namespace MarkdownViewr.Windows.Core.Themes;
+
+/// <summary>Reads only bounded theme JSON; exports retain the validated original schema and metadata.</summary>
+public static class ThemeJson
+{
+   /// <summary>The caller owns the selected stream; an oversized/invalid file never reaches saved settings.</summary>
+   public static async Task<ReaderTheme> ReadAsync(Stream stream, CancellationToken cancellationToken = default)
+   {
+      ArgumentNullException.ThrowIfNull(stream);
+      using var reader = new StreamReader(stream, new UTF8Encoding(encoderShouldEmitUTF8Identifier: false, throwOnInvalidBytes: true), detectEncodingFromByteOrderMarks: true, bufferSize: 1024, leaveOpen: true);
+      char[] text = new char[ReaderTheme.MaximumCharacters + 1];
+      int count = await reader.ReadBlockAsync(text.AsMemory(), cancellationToken).ConfigureAwait(false);
+      if(count > ReaderTheme.MaximumCharacters)
+      {
+         throw new JsonException("The theme exceeds the 128 Ki-character limit.");
+      }
+      return ReaderTheme.ParseCompatible(new string(text, 0, count));
+   }
+
+
+
+   /// <summary>Suggests the reference's lowercase hyphenated JSON name without Windows path characters or reserved device names.</summary>
+   public static string SuggestedFileName(ReaderTheme theme)
+   {
+      ArgumentNullException.ThrowIfNull(theme);
+      string stem = string.Concat(theme.Name.Select(character => "<>:\"/\\|?*".Contains(character, StringComparison.Ordinal) ? '_' : character))
+         .Replace(' ', '-').ToLowerInvariant().Trim('.', '-');
+      if(stem.Length == 0)
+      {
+         stem = "theme";
+      }
+      string device = stem.Split('.')[0];
+      if(device is "con" or "prn" or "aux" or "nul" || device.Length == 4 && (device.StartsWith("com", StringComparison.Ordinal) || device.StartsWith("lpt", StringComparison.Ordinal)) && device[3] is >= '1' and <= '9' or '¹' or '²' or '³')
+      {
+         stem = "theme-" + stem;
+      }
+      return stem + ".json";
+   }
+
+}
diff --git a/src/MarkdownViewr.Windows.Core/Themes/ThemeManagement.cs b/src/MarkdownViewr.Windows.Core/Themes/ThemeManagement.cs
new file mode 100644
index 0000000..17c7036
--- /dev/null
+++ b/src/MarkdownViewr.Windows.Core/Themes/ThemeManagement.cs
@@ -0,0 +1,231 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows.Core.Themes;
+
+/// <summary>Copied native theme-list drafts retain reference order, disabled choices and restorable built-ins.</summary>
+public static class ThemeManagement
+{
+   /// <summary>Corrupt list names cannot create unbounded menus or change display identities.</summary>
+   public static string[] SanitizeNames(IEnumerable<string?>? names) => (names ?? [])
+      .Where(name => !string.IsNullOrWhiteSpace(name) && name.Length <= 80 && !name.Any(char.IsControl))
+      .Select(name => name!).Distinct(StringComparer.Ordinal).Take(512).ToArray();
+
+
+
+   /// <summary>Disabled choices remain in the manager, while deleted built-ins stay hidden until restoration.</summary>
+   public static IReadOnlyList<ReaderTheme> All(AppSettings settings)
+   {
+      IReadOnlyList<ReaderTheme> combined = ThemeCatalog.Combine(settings.UserThemes.Select(ReaderTheme.ParseCompatible));
+      return combined.Where(theme => !settings.DeletedBuiltInThemes.Contains(theme.Name, StringComparer.Ordinal))
+         .OrderBy(theme => Array.IndexOf(settings.ThemeOrder, theme.Name) is int index && index >= 0 ? index : int.MaxValue)
+         .ThenBy(theme => theme.Name, StringComparer.Ordinal).ToArray();
+   }
+
+
+
+   /// <summary>Reading menus and cycling use only enabled choices in the saved order.</summary>
+   public static IReadOnlyList<ReaderTheme> Enabled(AppSettings settings) => All(settings)
+      .Where(theme => !settings.DisabledThemes.Contains(theme.Name, StringComparer.Ordinal)).ToArray();
+
+
+
+   /// <summary>Removing an active choice falls back to the first enabled theme; an empty list retains a safe bundled palette.</summary>
+   public static ReaderTheme Active(AppSettings settings)
+   {
+      IReadOnlyList<ReaderTheme> enabled = Enabled(settings);
+      return enabled.FirstOrDefault(theme => string.Equals(theme.Name, settings.DocumentTheme, StringComparison.Ordinal))
+         ?? (enabled.Count > 0 ? enabled[0] : ThemeCatalog.Find(null));
+   }
+
+
+
+   /// <summary>Previous/next wrap over enabled choices; an empty list has no cycle action.</summary>
+   public static ReaderTheme? Cycle(AppSettings settings, bool forward)
+   {
+      ReaderTheme[] enabled = Enabled(settings).ToArray();
+      if(enabled.Length == 0)
+      {
+         return null;
+      }
+      int index = Array.FindIndex(enabled, theme => string.Equals(theme.Name, settings.DocumentTheme, StringComparison.Ordinal));
+      int current = Math.Max(0, index);
+      return enabled[(current + (forward ? 1 : enabled.Length - 1)) % enabled.Length];
+   }
+
+
+
+   /// <summary>Moves one visible choice without mutating the caller's saved arrays; disabled themes retain their place.</summary>
+   public static AppSettings Move(AppSettings settings, string name, bool up)
+   {
+      AppSettings draft = SettingsChanges.Copy(settings);
+      string[] order = All(settings).Select(theme => theme.Name).ToArray();
+      int index = Array.IndexOf(order, name);
+      int next = index + (up ? -1 : 1);
+      if(index >= 0 && next >= 0 && next < order.Length)
+      {
+         (order[index], order[next]) = (order[next], order[index]);
+         draft.ThemeOrder = order;
+      }
+      return draft;
+   }
+
+
+
+   /// <summary>Enabled changes retain theme data and allow an intentionally empty reading menu.</summary>
+   public static AppSettings SetEnabled(AppSettings settings, string name, bool enabled)
+   {
+      AppSettings draft = SettingsChanges.Copy(settings);
+      if(All(settings).Any(theme => string.Equals(theme.Name, name, StringComparison.Ordinal)))
+      {
+         draft.DisabledThemes = enabled ? draft.DisabledThemes.Where(item => !string.Equals(item, name, StringComparison.Ordinal)).ToArray()
+            : draft.DisabledThemes.Append(name).Distinct(StringComparer.Ordinal).ToArray();
+         draft.DocumentTheme = Active(draft).Name;
+      }
+      return draft;
+   }
+
+
+
+   /// <summary>Deletes user data and hides a same-named built-in; restoration never requires deleting files outside settings.</summary>
+   public static AppSettings Delete(AppSettings settings, string name)
+   {
+      AppSettings draft = SettingsChanges.Copy(settings);
+      draft.UserThemes = draft.UserThemes.Where(json => !string.Equals(ReaderTheme.ParseCompatible(json).Name, name, StringComparison.Ordinal)).ToArray();
+      draft.DisabledThemes = draft.DisabledThemes.Where(item => !string.Equals(item, name, StringComparison.Ordinal)).ToArray();
+      draft.ThemeOrder = draft.ThemeOrder.Where(item => !string.Equals(item, name, StringComparison.Ordinal)).ToArray();
+      if(ThemeCatalog.BuiltIn.Any(theme => string.Equals(theme.Name, name, StringComparison.Ordinal)))
+      {
+         draft.DeletedBuiltInThemes = draft.DeletedBuiltInThemes.Append(name).Distinct(StringComparer.Ordinal).ToArray();
+      }
+      draft.DocumentTheme = Active(draft).Name;
+      return draft;
+   }
+
+
+
+   /// <summary>Reference restoration keeps built-in edits as uniquely named custom copies, restores originals and enables every choice.</summary>
+   public static AppSettings RestoreBuiltIns(AppSettings settings)
+   {
+      AppSettings draft = SettingsChanges.Copy(settings);
+      var builtIns = ThemeCatalog.BuiltIn.Select(theme => theme.Name).ToHashSet(StringComparer.Ordinal);
+      ReaderTheme[] users = settings.UserThemes.Select(ReaderTheme.ParseCompatible).GroupBy(theme => theme.Name, StringComparer.Ordinal).Select(group => group.Last()).ToArray();
+      var taken = builtIns.Concat(users.Select(theme => theme.Name)).ToHashSet(StringComparer.Ordinal);
+      var renamed = new Dictionary<string, string>(StringComparer.Ordinal);
+      draft.UserThemes = users.Select(theme =>
+      {
+         if(!builtIns.Contains(theme.Name))
+         {
+            return theme.Json;
+         }
+         string name = UniqueName(theme.Name, taken);
+         taken.Add(name);
+         renamed[theme.Name] = name;
+         return theme.Rename(name).Json;
+      }).ToArray();
+      draft.DocumentTheme = renamed.GetValueOrDefault(draft.DocumentTheme, draft.DocumentTheme);
+      draft.ThemeOrder = draft.ThemeOrder.Select(name => renamed.GetValueOrDefault(name, name)).ToArray();
+      draft.DisabledThemes = [];
+      draft.DeletedBuiltInThemes = [];
+      return draft;
+   }
+
+
+
+   /// <summary>Imports a validated copy with explicit conflict semantics; newer schemas cannot be persisted without deliberate confirmation.</summary>
+   public static AppSettings Import(AppSettings settings, ReaderTheme theme, ThemeImportResolution resolution = ThemeImportResolution.KeepBoth, bool approveNewerSchema = false)
+   {
+      ArgumentNullException.ThrowIfNull(theme);
+      if(!Enum.IsDefined(resolution))
+      {
+         throw new ArgumentOutOfRangeException(nameof(resolution));
+      }
+      if(theme.SchemaVersion > 1 && !approveNewerSchema)
+      {
+         throw new InvalidOperationException("Confirm importing this newer theme schema before saving it.");
+      }
+      AppSettings draft = SettingsChanges.Copy(settings);
+      var names = All(settings).Select(item => item.Name).ToHashSet(StringComparer.Ordinal);
+      if(names.Contains(theme.Name))
+      {
+         if(resolution == ThemeImportResolution.Skip)
+         {
+            return draft;
+         }
+         if(resolution == ThemeImportResolution.KeepBoth)
+         {
+            theme = theme.Rename(UniqueName(theme.Name, names));
+         }
+      }
+      draft.UserThemes = draft.UserThemes.Where(json => !string.Equals(ReaderTheme.ParseCompatible(json).Name, theme.Name, StringComparison.Ordinal)).Append(theme.Json).ToArray();
+      draft.DeletedBuiltInThemes = draft.DeletedBuiltInThemes.Where(name => !string.Equals(name, theme.Name, StringComparison.Ordinal)).ToArray();
+      return draft;
+   }
+
+
+
+   /// <summary>Editing in place may override its built-in; renaming cannot silently replace a different existing theme.</summary>
+   public static void ValidateEditName(string originalName, string editedName, IEnumerable<string> existingNames)
+   {
+      ArgumentNullException.ThrowIfNull(existingNames);
+      if(!string.Equals(originalName, editedName, StringComparison.Ordinal) && existingNames.Contains(editedName, StringComparer.Ordinal))
+      {
+         throw new System.Text.Json.JsonException("A theme with this name already exists. Choose another name.");
+      }
+   }
+
+
+
+   /// <summary>Saves a copied editor draft and deliberately selects/enables it without hiding another theme under a renamed collision.</summary>
+   public static AppSettings SaveEdited(AppSettings settings, ReaderTheme original, ReaderTheme edited)
+   {
+      ArgumentNullException.ThrowIfNull(original);
+      ArgumentNullException.ThrowIfNull(edited);
+      ValidateEditName(original.Name, edited.Name, All(settings).Select(theme => theme.Name));
+      AppSettings draft = Import(settings, edited, ThemeImportResolution.Overwrite, approveNewerSchema: original.SchemaVersion == edited.SchemaVersion && original.SchemaVersion > 1);
+      draft.DocumentTheme = edited.Name;
+      draft.DisabledThemes = draft.DisabledThemes.Where(name => !string.Equals(name, edited.Name, StringComparison.Ordinal)).ToArray();
+      return draft;
+   }
+
+
+
+
+   /// <summary>A new native draft starts from the safe default palette and a name independent of existing choices.</summary>
+   public static ReaderTheme NewTheme(AppSettings settings)
+      => ThemeCatalog.Find(null).Rename(UniqueName("New theme", All(settings).Select(theme => theme.Name).ToHashSet(StringComparer.Ordinal)));
+
+
+
+   /// <summary>Copy preserves a selected theme, including a disabled choice, with a unique bounded display name.</summary>
+   public static ReaderTheme CopyTheme(AppSettings settings, ReaderTheme theme)
+   {
+      ArgumentNullException.ThrowIfNull(theme);
+      string name = theme.Name[..Math.Min(theme.Name.Length, 75)] + " Copy";
+      return theme.Rename(UniqueName(name, All(settings).Select(item => item.Name).ToHashSet(StringComparer.Ordinal)));
+   }
+
+
+
+
+   /// <summary>Bounded names support deterministic keep-both suffixes without losing original theme fields.</summary>
+   private static string UniqueName(string name, HashSet<string> taken)
+   {
+      if(!taken.Contains(name))
+      {
+         return name;
+      }
+      for(int number = 2; ; number++)
+      {
+         string suffix = " (" + number.ToString(System.Globalization.CultureInfo.InvariantCulture) + ")";
+         string candidate = name[..Math.Min(name.Length, 80 - suffix.Length)] + suffix;
+         if(!taken.Contains(candidate))
+         {
+            return candidate;
+         }
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows.Core/packages.lock.json b/src/MarkdownViewr.Windows.Core/packages.lock.json
index 94f96e2..81362b8 100644
--- a/src/MarkdownViewr.Windows.Core/packages.lock.json
+++ b/src/MarkdownViewr.Windows.Core/packages.lock.json
@@ -2,11 +2,15 @@
   "version": 2,
   "dependencies": {
     "net10.0": {
-      "CommunityToolkit.Mvvm": {
+      "HtmlSanitizer": {
         "type": "Direct",
-        "requested": "[8.4.2, )",
-        "resolved": "8.4.2",
-        "contentHash": "WadCzGEc2U+3e20avRLng4qNtt4zoOGWrdUISqJWrHe3/FSnrYjuM5Sb4yQb09LhkBXrrI4Zt3dLKgRMbItsrg=="
+        "requested": "[9.2.1039, )",
+        "resolved": "9.2.1039",
+        "contentHash": "PKxy1hYknAij8YlHCC2a9GSqzUd4bh3IvY+abJBvOH1FKcZpbyafEHtdFcXQBt12Y7hNPkNEOP6Qa7uKNSs/yA==",
+        "dependencies": {
+          "AngleSharp": "1.7.2",
+          "AngleSharp.Css": "1.0.2"
+        }
       },
       "KofTwentyTwo.AppKit": {
         "type": "Direct",
@@ -14,6 +18,12 @@
         "resolved": "0.1.0",
         "contentHash": "+ymM8DxPel+C527Cp7lrhhdu0xnGHb6fl4/5vAlzsd0iiyW8u+UiOfQl1paNxA26iQZTbxQ8fMLQsUnaOA8GcQ=="
       },
+      "Markdig": {
+        "type": "Direct",
+        "requested": "[1.4.0, )",
+        "resolved": "1.4.0",
+        "contentHash": "lLhaiI/mNDTNzgLqnmknhf4LjgTqOAyjx5+GNz0X3AxYMxUhmFppF2WVMdER+SDqwhE5wUF1pzs/cuLwFxs7xA=="
+      },
       "Meziantou.Analyzer": {
         "type": "Direct",
         "requested": "[3.0.296, )",
@@ -25,6 +35,19 @@
         "requested": "[10.0.12, )",
         "resolved": "10.0.12",
         "contentHash": "xi+BDjFpW+Sb+MHFHaH6Y/gV9I8BluFwRXc1QyCdoZbIK26eNiBeFuMTe/FMwc33G1wdHCyDg7CVTmb8OdQrMQ=="
+      },
+      "AngleSharp": {
+        "type": "Transitive",
+        "resolved": "1.7.2",
+        "contentHash": "r1rb5Qo/0KPzmP0nbSiXPDVfh4Ctu0B+y1RyyUq73g4sgAmEW7q10RDyTq2ZsILwtO9O2LAvMrUles7eD4zz1g=="
+      },
+      "AngleSharp.Css": {
+        "type": "Transitive",
+        "resolved": "1.0.2",
+        "contentHash": "XeBxh0h/73+MWFsGfeMwiK7xbzAK3YeHFdUIrMH1P90amIrDFD/vUDIrPlF3CixqaMH5MRIUvT6Ux+2zvhJ3SA==",
+        "dependencies": {
+          "AngleSharp": "[1.5.0, 2.0.0)"
+        }
       }
     },
     "net10.0/win-arm64": {},
diff --git a/src/MarkdownViewr.Windows/ActivationInbox.cs b/src/MarkdownViewr.Windows/ActivationInbox.cs
new file mode 100644
index 0000000..78b35d6
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ActivationInbox.cs
@@ -0,0 +1,167 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Buffers.Binary;
+using System.IO.Pipes;
+using System.Text.Json;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Bounded current-user IPC delivers sender-canonicalized document paths to the SDK's chosen primary instance.</summary>
+internal sealed class ActivationInbox : IDisposable
+{
+   private readonly Lock _gate = new();
+   private readonly Queue<ActivationRequest> _pending = new();
+   private readonly CancellationTokenSource _closed = new();
+   private readonly NamedPipeServerStream _pipe;
+   private readonly Action<Exception> _report;
+   private readonly Task _listener;
+   private Func<ActivationRequest, bool>? _dispatch;
+   private int _disposed;
+
+
+
+   /// <summary>The primary owns the pipe before XAML starts; only the same Windows user can connect.</summary>
+   internal ActivationInbox(string key, Action<Exception> report)
+   {
+      _report = report;
+      _pipe = new NamedPipeServerStream(key, PipeDirection.InOut, 1, PipeTransmissionMode.Byte, PipeOptions.Asynchronous | PipeOptions.CurrentUserOnly);
+      _listener = ListenAsync();
+   }
+
+
+
+   /// <summary>The owned listener completes on disposal; tests and shutdown diagnostics can observe failures instead of losing a task.</summary>
+   internal Task Completion => _listener;
+
+
+
+   /// <summary>Attaches the native UI dispatcher after launch, delivering bounded requests received while XAML initialized.</summary>
+   internal void Attach(Func<ActivationRequest, bool> dispatch)
+   {
+      lock(_gate)
+      {
+         _dispatch = dispatch;
+         while(_pending.TryDequeue(out ActivationRequest? request))
+         {
+            if(!dispatch(request))
+            {
+               _report(new IOException("The reader could not accept activation."));
+            }
+         }
+      }
+   }
+
+
+
+   /// <summary>Sends one fixed request with a bounded connection/acknowledgement wait and preserves the real server acknowledgement.</summary>
+   internal static async Task<bool> SendAsync(string key, ActivationRequest request, CancellationToken cancellationToken)
+   {
+      request.Validate();
+      byte[] payload = JsonSerializer.SerializeToUtf8Bytes(request, ActivationJsonContext.Default.ActivationRequest);
+      if(payload.Length > ActivationRequest.MaximumPayloadBytes)
+      {
+         throw new ArgumentException("The activation payload is too large.", nameof(request));
+      }
+      using var timeout = CancellationTokenSource.CreateLinkedTokenSource(cancellationToken);
+      timeout.CancelAfter(TimeSpan.FromSeconds(10));
+      await using var client = new NamedPipeClientStream(".", key, PipeDirection.InOut, PipeOptions.Asynchronous | PipeOptions.CurrentUserOnly);
+      await client.ConnectAsync(timeout.Token);
+      byte[] length = new byte[4];
+      BinaryPrimitives.WriteInt32LittleEndian(length, payload.Length);
+      await client.WriteAsync(length, timeout.Token);
+      await client.WriteAsync(payload, timeout.Token);
+      await client.FlushAsync(timeout.Token);
+      byte[] response = new byte[1];
+      await client.ReadExactlyAsync(response, timeout.Token);
+      return response[0] == 1;
+   }
+
+
+
+   /// <summary>A disconnected or malformed peer cannot stop later activations; each request has a bounded read deadline.</summary>
+   private async Task ListenAsync()
+   {
+      while(!_closed.IsCancellationRequested)
+      {
+         bool connected = false;
+         try
+         {
+            await _pipe.WaitForConnectionAsync(_closed.Token);
+            connected = true;
+            using var timeout = CancellationTokenSource.CreateLinkedTokenSource(_closed.Token);
+            timeout.CancelAfter(TimeSpan.FromSeconds(10));
+            byte[] length = new byte[4];
+            await _pipe.ReadExactlyAsync(length, timeout.Token);
+            int size = BinaryPrimitives.ReadInt32LittleEndian(length);
+            if(size <= 0 || size > ActivationRequest.MaximumPayloadBytes)
+            {
+               throw new InvalidDataException("Invalid activation length.");
+            }
+            byte[] payload = new byte[size];
+            await _pipe.ReadExactlyAsync(payload, timeout.Token);
+            ActivationRequest request = JsonSerializer.Deserialize(payload, ActivationJsonContext.Default.ActivationRequest) ?? throw new InvalidDataException("Missing activation request.");
+            request.Validate();
+            bool accepted;
+            lock(_gate)
+            {
+               accepted = _dispatch is null ? QueueBeforeLaunch(request) : _dispatch(request);
+            }
+            await _pipe.WriteAsync(new byte[] { accepted ? (byte)1 : (byte)0 }, timeout.Token);
+            await _pipe.FlushAsync(timeout.Token);
+         }
+         catch(Exception exception) when(exception is IOException or InvalidDataException or JsonException or ArgumentException or OperationCanceledException or ObjectDisposedException)
+         {
+            if(!_closed.IsCancellationRequested)
+            {
+               _report(exception);
+            }
+         }
+         finally
+         {
+            if(connected && !_closed.IsCancellationRequested)
+            {
+               // A broken read clears IsConnected, but the owned native connection still requires Disconnect.
+               try
+               {
+                  _pipe.Disconnect();
+               }
+               catch(ObjectDisposedException) when(_closed.IsCancellationRequested)
+               {
+                  // Shutdown may release the handle after the cancellation check.
+               }
+            }
+         }
+      }
+   }
+
+
+
+   /// <summary>A startup burst can queue at most16 requests; the peer is told to retry if the native reader is busy.</summary>
+   private bool QueueBeforeLaunch(ActivationRequest request)
+   {
+      if(_pending.Count >= 16)
+      {
+         return false;
+      }
+      _pending.Enqueue(request);
+      return true;
+   }
+
+
+
+   /// <summary>Application shutdown cancels pending connections and releases the owned current-user pipe.</summary>
+   public void Dispose()
+   {
+      if(Interlocked.Exchange(ref _disposed, 1) != 0)
+      {
+         return;
+      }
+      _closed.Cancel();
+      _pipe.Dispose();
+      _closed.Dispose();
+   }
+}
diff --git a/src/MarkdownViewr.Windows/ActivationJsonContext.cs b/src/MarkdownViewr.Windows/ActivationJsonContext.cs
new file mode 100644
index 0000000..380f3e2
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ActivationJsonContext.cs
@@ -0,0 +1,15 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json.Serialization;
+
+
+namespace MarkdownViewr.Windows;
+
+
+/// <summary>Activation JSON is a fixed generated schema with unknown fields rejected, rather than a general command protocol.</summary>
+[JsonSourceGenerationOptions(UnmappedMemberHandling = JsonUnmappedMemberHandling.Disallow)]
+[JsonSerializable(typeof(ActivationRequest))]
+internal sealed partial class ActivationJsonContext : JsonSerializerContext;
diff --git a/src/MarkdownViewr.Windows/ActivationRequest.cs b/src/MarkdownViewr.Windows/ActivationRequest.cs
new file mode 100644
index 0000000..31682fc
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ActivationRequest.cs
@@ -0,0 +1,52 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Security.Cryptography;
+using System.Text;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Only bounded literal absolute document paths cross the current-user activation pipe; no native commands are accepted.</summary>
+internal sealed record ActivationRequest(string[] Paths, bool HasInvalidPath = false)
+{
+   internal const int MaximumPaths = 128;
+   internal const int MaximumPayloadBytes = 1024 * 1024;
+
+
+
+   /// <summary>Canonicalizes at the sender, preserving relative-path meaning even when the existing reader has a different working directory.</summary>
+   internal static ActivationRequest Create(IEnumerable<string> paths, string workingDirectory)
+   {
+      string[] candidates = paths.Take(MaximumPaths + 1).ToArray();
+      if(candidates.Length > MaximumPaths)
+      {
+         throw new ArgumentException("Too many document paths.", nameof(paths));
+      }
+      var request = new ActivationRequest(candidates.Select(path => Path.GetFullPath(path, workingDirectory)).Distinct(StringComparer.OrdinalIgnoreCase).ToArray());
+      request.Validate();
+      return request;
+   }
+
+
+
+   /// <summary>Malformed, oversized or relative pipe input cannot become an unbounded launch or be interpreted using the receiver's directory.</summary>
+   internal void Validate()
+   {
+      if(Paths is null || Paths.Length > MaximumPaths || Paths.Any(path => string.IsNullOrEmpty(path) || path.Length > 32767 || !Path.IsPathFullyQualified(path) || path.Any(char.IsControl)))
+      {
+         throw new InvalidDataException("Invalid document activation paths.");
+      }
+   }
+
+
+
+   /// <summary>Profile and executable directories define distinct stable/dev, development-build and review/test instance identities.</summary>
+   internal static string InstanceKey(string executableDirectory, string dataDirectory)
+   {
+      string identity = Path.TrimEndingDirectorySeparator(Path.GetFullPath(executableDirectory)).ToUpperInvariant() + "\0" + Path.TrimEndingDirectorySeparator(Path.GetFullPath(dataDirectory)).ToUpperInvariant();
+      return "k22-markdownviewr-" + Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(identity)));
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.Activation.cs b/src/MarkdownViewr.Windows/App.Activation.cs
new file mode 100644
index 0000000..e46812e
--- /dev/null
+++ b/src/MarkdownViewr.Windows/App.Activation.cs
@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Deliberate OS/process activation opens independent readers, or focuses an already-open document, on the native UI thread.</summary>
+public partial class App
+{
+   /// <summary>Empty launch focuses an existing reader; canonical duplicate paths preserve its watcher, find, source and zoom state.</summary>
+   private void OpenActivation(ActivationRequest request)
+   {
+      if(request.Paths.Length == 0)
+      {
+         if(_windows.Count == 0)
+         {
+            NewDocumentWindow();
+         }
+         else
+         {
+            _windows[^1].Activate();
+         }
+      }
+      else
+      {
+         foreach(string path in request.Paths)
+         {
+            NewDocumentWindow(path);
+         }
+      }
+      if(request.HasInvalidPath)
+      {
+         _windows[^1].ReportActivationFailure();
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.Appearance.cs b/src/MarkdownViewr.Windows/App.Appearance.cs
new file mode 100644
index 0000000..bcaf9f6
--- /dev/null
+++ b/src/MarkdownViewr.Windows/App.Appearance.cs
@@ -0,0 +1,28 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Reader-wide native appearance changes reach each open document on the existing UI thread.</summary>
+public partial class App
+{
+   private ulong _appearanceRevision;
+
+
+
+   /// <summary>A newer native save supersedes an older asynchronous broadcast without reopening or replacing any document.</summary>
+   internal async Task ApplyReadingAppearanceAsync(Core.Themes.ReadingAppearance appearance)
+   {
+      ulong revision = ++_appearanceRevision;
+      foreach(MainWindow window in _windows.ToArray())
+      {
+         if(revision != _appearanceRevision)
+         {
+            return;
+         }
+         await window.ApplyReadingAppearanceAsync(appearance);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.Documents.cs b/src/MarkdownViewr.Windows/App.Documents.cs
new file mode 100644
index 0000000..2c47571
--- /dev/null
+++ b/src/MarkdownViewr.Windows/App.Documents.cs
@@ -0,0 +1,142 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using KofTwentyTwo.AppKit.WinUI;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Tracks native document windows on their shared UI thread and stores private successful-open history.</summary>
+public partial class App
+{
+   private readonly List<MainWindow> _windows = [];
+
+
+
+   /// <summary>Creates an independent XAML window, retaining it until its native Closed event.</summary>
+   internal void NewDocumentWindow(string? path = null, string? requiredDocumentRoot = null)
+   {
+      if(path is not null)
+      {
+         try
+         {
+            path = Path.GetFullPath(path);
+         }
+         catch(Exception exception) when(exception is ArgumentException or NotSupportedException or IOException)
+         {
+            Log.Warning("An invalid document launch path will be reported in its reader window.");
+         }
+         MainWindow? existing = _windows.FirstOrDefault(window => string.Equals(window.DocumentPath, path, StringComparison.OrdinalIgnoreCase) && (requiredDocumentRoot is null || window.IsDocumentInside(requiredDocumentRoot)));
+         if(existing is not null)
+         {
+            existing.Activate();
+            return;
+         }
+      }
+      var window = new MainWindow(path, initialWindow: _windows.Count == 0, requiredDocumentRoot);
+      _windows.Add(window);
+      window.Closed += (_, _) =>
+      {
+         _windows.Remove(window);
+         if(_windows.Count == 0)
+         {
+            LogWindow.CloseCurrent();
+         }
+      };
+      window.Activate();
+   }
+
+
+
+   /// <summary>Focuses an already-open path, fills a blank window or opens a separate document without replacing a reader.</summary>
+   internal async Task OpenDocumentAsync(MainWindow requester, string path)
+   {
+      string canonical;
+      try
+      {
+         canonical = Path.GetFullPath(path);
+      }
+      catch(Exception exception) when(exception is ArgumentException or NotSupportedException or IOException)
+      {
+         await requester.OpenDocumentAsync(path);
+         return;
+      }
+      MainWindow? existing = _windows.FirstOrDefault(window => string.Equals(window.DocumentPath, canonical, StringComparison.OrdinalIgnoreCase));
+      if(existing is not null)
+      {
+         // The invoking menu must finish restoring focus before the existing reader activates.
+         if(!existing.DispatcherQueue.TryEnqueue(() => existing.Activate()))
+         {
+            existing.Activate();
+         }
+      }
+      else if(requester.DocumentPath is null)
+      {
+         await requester.OpenDocumentAsync(canonical);
+      }
+      else
+      {
+         NewDocumentWindow(canonical);
+      }
+   }
+
+
+
+   /// <summary>Only a live native source window can open a folder-scoped document link; its new reader retains the scope on reload.</summary>
+   internal Task OpenLinkedDocumentAsync(MainWindow requester, string path, string physicalRoot)
+   {
+      if(_windows.Contains(requester))
+      {
+         NewDocumentWindow(path, physicalRoot);
+      }
+      return Task.CompletedTask;
+   }
+
+
+
+   /// <summary>File/Exit closes a snapshot of all document windows while native close/Ctrl+W affect only one.</summary>
+   internal void CloseDocumentWindows()
+   {
+      foreach(MainWindow window in _windows.ToArray())
+      {
+         window.Close();
+      }
+   }
+
+
+
+   /// <summary>Records a successfully committed path through the latest store snapshot, then refreshes every recent menu.</summary>
+   internal bool RecordRecentDocument(string path)
+   {
+      Core.AppSettings settings = AppIdentity.SettingsStore.Load();
+      settings.RecentFiles = Core.Documents.RecentDocuments.Record(settings.RecentFiles, path);
+      bool saved = AppIdentity.SettingsStore.Save(settings);
+      RefreshRecentMenus();
+      return saved;
+   }
+
+
+
+   /// <summary>Clears only the local history, leaving open documents, reading preferences and files intact.</summary>
+   internal bool ClearRecentDocuments()
+   {
+      Core.AppSettings settings = AppIdentity.SettingsStore.Load();
+      settings.RecentFiles = [];
+      bool saved = AppIdentity.SettingsStore.Save(settings);
+      RefreshRecentMenus();
+      return saved;
+   }
+
+
+
+   /// <summary>All menus read the latest store; no document paths enter the shared activity log.</summary>
+   private void RefreshRecentMenus()
+   {
+      foreach(MainWindow window in _windows)
+      {
+         window.RefreshRecentDocuments();
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.Editor.cs b/src/MarkdownViewr.Windows/App.Editor.cs
new file mode 100644
index 0000000..127e1c5
--- /dev/null
+++ b/src/MarkdownViewr.Windows/App.Editor.cs
@@ -0,0 +1,20 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Explicit editor saves reach every open reader on the existing native UI thread.</summary>
+public partial class App
+{
+   /// <summary>Each window receives a separate settings copy; no background callback can mutate another reader's editor array.</summary>
+   internal void ApplyEditorSettings(Core.Editors.EditorConfiguration[] choices)
+   {
+      foreach(MainWindow window in _windows.ToArray())
+      {
+         window.ApplyEditorSettings(choices);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.Printing.cs b/src/MarkdownViewr.Windows/App.Printing.cs
new file mode 100644
index 0000000..069ebd6
--- /dev/null
+++ b/src/MarkdownViewr.Windows/App.Printing.cs
@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Printing;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Printing defaults are shared without changing each document's reading theme, zoom or viewport.</summary>
+public partial class App
+{
+   /// <summary>Checked Settings/output saves update all readers and prevent stale unrelated saves from restoring older defaults.</summary>
+   internal void ApplyPrintingSettings(PrintOptions options)
+   {
+      foreach(MainWindow window in _windows.ToArray())
+      {
+         window.ApplyPrintingSettings(options);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.Startup.cs b/src/MarkdownViewr.Windows/App.Startup.cs
new file mode 100644
index 0000000..b1a1fc5
--- /dev/null
+++ b/src/MarkdownViewr.Windows/App.Startup.cs
@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Startup preferences are shared by independent reader windows without changing an in-progress launch.</summary>
+public partial class App
+{
+   /// <summary>Updates native Contents and saved baselines only after the shared presentation preferences were persisted.</summary>
+   internal void ApplyContentsSettings(Core.AppSettings settings)
+   {
+      foreach(MainWindow window in _windows.ToArray())
+      {
+         window.ApplyContentsSettings(settings);
+      }
+   }
+
+
+
+   /// <summary>Updates each native reader and its saved baseline only after startup preferences were persisted successfully.</summary>
+   internal void ApplyStartupSettings(Core.AppSettings settings)
+   {
+      foreach(MainWindow window in _windows.ToArray())
+      {
+         window.ApplyStartupSettings(settings);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.ThemeManagement.cs b/src/MarkdownViewr.Windows/App.ThemeManagement.cs
new file mode 100644
index 0000000..450a769
--- /dev/null
+++ b/src/MarkdownViewr.Windows/App.ThemeManagement.cs
@@ -0,0 +1,28 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Native theme preference changes update every open reader on the existing UI thread.</summary>
+public partial class App
+{
+   private ulong _themeRevision;
+
+
+
+   /// <summary>Newer theme saves supersede older asynchronous broadcasts.</summary>
+   internal async Task ApplyThemeSettingsAsync(Core.AppSettings settings)
+   {
+      ulong revision = ++_themeRevision;
+      foreach(MainWindow window in _windows.ToArray())
+      {
+         if(revision != _themeRevision)
+         {
+            return;
+         }
+         await window.ApplyThemeSettingsAsync(settings);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/App.xaml.cs b/src/MarkdownViewr.Windows/App.xaml.cs
index 9585fa9..dbd7f3a 100644
--- a/src/MarkdownViewr.Windows/App.xaml.cs
+++ b/src/MarkdownViewr.Windows/App.xaml.cs
@@ -10,13 +10,9 @@ using Microsoft.UI.Xaml;
 
 namespace MarkdownViewr.Windows;
 
-/// <summary>The application: installs AppKit's crash net and the saved theme, then opens the main window.</summary>
+/// <summary>The application: installs AppKit's crash net and the saved theme, then opens independent document windows.</summary>
 public partial class App : Application
 {
-   private Window? _window;
-
-
-
    /// <summary>Installs the crash net and applies the saved theme; WinUI allows setting the application theme only here, before any window exists.</summary>
    public App()
    {
@@ -32,11 +28,12 @@ public partial class App : Application
 
 
 
-   /// <summary>Logs the start and opens the main window.</summary>
+   /// <summary>Logs the start and gives each literal startup path its own native document window.</summary>
    protected override void OnLaunched(LaunchActivatedEventArgs args)
    {
       Log.Info($"{AppIdentity.Info.DisplayName} started.");
-      _window = new MainWindow();
-      _window.Activate();
+      OpenActivation(Program.InitialRequest);
+      var dispatcher = Microsoft.UI.Dispatching.DispatcherQueue.GetForCurrentThread();
+      Program.Inbox?.Attach(request => dispatcher.TryEnqueue(() => OpenActivation(request)));
    }
 }
diff --git a/src/MarkdownViewr.Windows/AppAbout.cs b/src/MarkdownViewr.Windows/AppAbout.cs
new file mode 100644
index 0000000..c642ec9
--- /dev/null
+++ b/src/MarkdownViewr.Windows/AppAbout.cs
@@ -0,0 +1,83 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using KofTwentyTwo.AppKit.WinUI;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Extends published AppKit's About body with linked contributions and complete dependency credits.</summary>
+internal static class AppAbout
+{
+   /// <summary>Preserves AppKit's header/build identity and license, then adds contributions inside the same scrolling body.</summary>
+   public static AboutDialog Create(XamlRoot root)
+   {
+      var dialog = new AboutDialog(AppIdentity.Info with { Attributions = [] }) { XamlRoot = root };
+      var scroll = (ScrollViewer)dialog.Content;
+      var body = (StackPanel)scroll.Content;
+      body.MaxWidth = 580;
+      scroll.MaxHeight = Math.Max(160, Math.Min(460, root.Size.Height - 220));
+      dialog.Resources["ContentDialogMaxWidth"] = 680d;
+      body.Children.Add(Link("AboutApplicationLicense", "MarkdownViewr MIT license", AppIdentity.Info.RepositoryUrl!.AbsoluteUri + "/blob/main/LICENSE"));
+      body.Children.Add(Contributions());
+      body.Children.Add(Components("Components", "AboutComponents", AboutComponents.OpenSource));
+      return dialog;
+   }
+
+
+
+   /// <summary>Original application, themes and adapted code are credited below the normal app header, rather than as a separate top banner.</summary>
+   private static StackPanel Contributions()
+   {
+      StackPanel section = Section("Contributions", "AboutContributions");
+      section.Children.Add(new TextBlock { Text = "Based on Darin Kelkhoff's macOS markdownViewr. Original application, rendering resources and theme work: Copyright (c) 2026 Darin Kelkhoff; MIT License.", TextWrapping = TextWrapping.Wrap });
+      section.Children.Add(Link("AboutOriginalRepository", "Original Mac app by Darin Kelkhoff", AppIdentity.OriginalRepositoryUrl.AbsoluteUri));
+      section.Children.Add(Link("AboutOriginalAuthorWebsite", "Darin Kelkhoff's website — kelkhoff.com", AppIdentity.OriginalAuthorWebsite.AbsoluteUri));
+      section.Children.Add(Link("AboutOriginalLicense", "Original markdownViewr MIT license", AppIdentity.OriginalRepositoryUrl.AbsoluteUri + "/blob/main/LICENSE"));
+      return section;
+   }
+
+
+
+   /// <summary>Each package is identified separately with its locked version and both official project and license links.</summary>
+   private static StackPanel Components(string title, string identity, IReadOnlyList<AboutComponent> entries)
+   {
+      StackPanel section = Section(title, identity);
+      foreach(AboutComponent component in entries)
+      {
+         var entry = new StackPanel { Spacing = 2, Margin = new Thickness(0, 4, 0, 4) };
+         entry.Children.Add(Link("AboutProject:" + component.Name, component.Name + " " + component.Version, component.ProjectUrl));
+         entry.Children.Add(Link("AboutLicense:" + component.Name, "License: " + component.License, component.LicenseUrl));
+         section.Children.Add(entry);
+      }
+      return section;
+   }
+
+
+
+   /// <summary>Native heading and panel provide normal keyboard and screen-reader ordering within the scroll view.</summary>
+   private static StackPanel Section(string title, string identity)
+   {
+      var section = new StackPanel { Spacing = 4 };
+      AutomationProperties.SetAutomationId(section, identity);
+      AutomationProperties.SetName(section, title);
+      section.Children.Add(new TextBlock { Text = title, FontSize = 20, FontWeight = Microsoft.UI.Text.FontWeights.SemiBold });
+      return section;
+   }
+
+
+
+   /// <summary>Only curated HTTPS destinations enter About; native hyperlink controls expose their names and Invoke behavior.</summary>
+   private static HyperlinkButton Link(string identity, string label, string destination)
+   {
+      var link = new HyperlinkButton { Content = new TextBlock { Text = label, TextWrapping = TextWrapping.Wrap }, NavigateUri = new Uri(destination), Padding = new Thickness(0), HorizontalAlignment = HorizontalAlignment.Left };
+      AutomationProperties.SetAutomationId(link, identity);
+      AutomationProperties.SetName(link, label);
+      return link;
+   }
+}
diff --git a/src/MarkdownViewr.Windows/AppIdentity.cs b/src/MarkdownViewr.Windows/AppIdentity.cs
new file mode 100644
index 0000000..4f472f8
--- /dev/null
+++ b/src/MarkdownViewr.Windows/AppIdentity.cs
@@ -0,0 +1,61 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using KofTwentyTwo.AppKit;
+using KofTwentyTwo.AppKit.Logging;
+using KofTwentyTwo.AppKit.Settings;
+using Velopack.Locators;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Composes host services from the actual installed channel before windows, activation or logs access them.</summary>
+internal static class AppIdentity
+{
+   /// <summary>Prevent beforefieldinit: edition services must initialize on first access after Velopack's startup hooks run.</summary>
+   static AppIdentity()
+   {
+   }
+
+
+
+   /// <summary>Velopack runs first; development packages have a distinct title, data variable and credential prefix.</summary>
+   public static AppInfo Info { get; } = Core.AppIdentity.ForChannel(VelopackLocator.Current.Channel);
+
+
+
+   /// <summary>The installed edition's settings/log root honors only its own data-directory override.</summary>
+   public static AppPaths Paths { get; } = new(Info);
+
+
+
+   /// <summary>Each edition owns its own persisted preferences and recent document list.</summary>
+   public static SettingsStore<AppSettings> SettingsStore { get; } = new(Paths.SettingsFile, AppSettingsContext.Default.AppSettings);
+
+
+
+   /// <summary>Credits link to the original macOS project while Windows support remains here.</summary>
+   public static Uri OriginalRepositoryUrl => Core.AppIdentity.OriginalRepositoryUrl;
+
+
+
+   /// <summary>The upstream author's public site.</summary>
+   public static Uri OriginalAuthorWebsite => Core.AppIdentity.OriginalAuthorWebsite;
+
+
+
+   /// <summary>Both editions report Windows bugs and requests to the same repository.</summary>
+   public static Uri IssuesUrl => Core.AppIdentity.IssuesUrl;
+
+
+
+   /// <summary>Both editions use the Windows repository's discussions.</summary>
+   public static Uri SupportUrl => Core.AppIdentity.SupportUrl;
+
+
+
+   /// <summary>Daily activity files use the edition's own path and identity prefix.</summary>
+   public static IActivityLog CreateLog() => FileActivityLog.ForApp(Info, Paths);
+}
diff --git a/src/MarkdownViewr.Windows/Assets/Brand/app-icon.svg b/src/MarkdownViewr.Windows/Assets/Brand/app-icon.svg
index 6931f73..1a56cce 100644
--- a/src/MarkdownViewr.Windows/Assets/Brand/app-icon.svg
+++ b/src/MarkdownViewr.Windows/Assets/Brand/app-icon.svg
@@ -2,10 +2,10 @@
   <!-- Generated by AppKit BrandTool. Transparent outside the rounded tile. -->
   <defs>
     <linearGradient id="tile" x1="0" y1="0" x2="1" y2="1">
-      <stop offset="0" stop-color="#0F766E" />
-      <stop offset="1" stop-color="#134E4A" />
+      <stop offset="0" stop-color="#1A2B4D" />
+      <stop offset="1" stop-color="#0C1836" />
     </linearGradient>
   </defs>
   <rect x="48" y="48" width="416" height="416" rx="104" fill="url(#tile)" />
-  <path d="M 200 152 L 312 256 L 200 360" fill="none" stroke="#FFFFFF" stroke-width="56" stroke-linecap="round" stroke-linejoin="round" />
+  <path d="M 144 328 V 184 L 208 260 L 272 184 V 328 M 344 184 V 328 M 312 296 L 344 328 L 376 296 M 144 380 H 376" fill="none" stroke="#FFFFFF" stroke-width="28" stroke-linecap="round" stroke-linejoin="round" />
 </svg>
diff --git a/src/MarkdownViewr.Windows/Assets/Brand/app.ico b/src/MarkdownViewr.Windows/Assets/Brand/app.ico
index f1467e1..5e6b2b8 100644
Binary files a/src/MarkdownViewr.Windows/Assets/Brand/app.ico and b/src/MarkdownViewr.Windows/Assets/Brand/app.ico differ
diff --git a/src/MarkdownViewr.Windows/DesktopActivation.cs b/src/MarkdownViewr.Windows/DesktopActivation.cs
new file mode 100644
index 0000000..64161a4
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DesktopActivation.cs
@@ -0,0 +1,51 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+using Microsoft.Windows.AppLifecycle;
+using Windows.ApplicationModel.Activation;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>SDK rich file activation and command-line paths share one canonical native document request.</summary>
+internal static partial class DesktopActivation
+{
+   /// <summary>Rich file payloads already identify local storage items; plain relative arguments are resolved at their launching process.</summary>
+   internal static ActivationRequest ReadInitialRequest()
+   {
+      try
+      {
+         AppActivationArguments activation = AppInstance.GetCurrent().GetActivatedEventArgs();
+         IEnumerable<string> paths = activation.Kind == ExtendedActivationKind.File && activation.Data is IFileActivatedEventArgs files
+            ? files.Files.Select(item => item.Path)
+            : Environment.GetCommandLineArgs().Skip(1);
+         return ActivationRequest.Create(paths, Environment.CurrentDirectory);
+      }
+      catch(Exception exception) when(exception is ArgumentException or NotSupportedException or IOException or InvalidDataException or System.Runtime.InteropServices.COMException)
+      {
+         ReportFailure(exception);
+         return new ActivationRequest([], HasInvalidPath: true);
+      }
+   }
+
+
+
+   /// <summary>The foreground launcher permits the chosen primary to activate its existing document without simulating input.</summary>
+   internal static void AllowPrimaryForeground(uint processId) => AllowSetForegroundWindow(processId);
+
+
+
+   /// <summary>Logs activation failure kinds without document paths, JSON, profile identifiers or command-line content.</summary>
+   internal static void ReportFailure(Exception exception)
+      => AppIdentity.CreateLog().Warning(FormattableString.Invariant($"Document activation failed ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+
+
+
+   /// <summary>Windows still applies its foreground policy; failure to grant focus never prevents opening the document.</summary>
+   [LibraryImport("user32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   private static partial bool AllowSetForegroundWindow(uint processId);
+}
diff --git a/src/MarkdownViewr.Windows/DocumentBrowser.Find.cs b/src/MarkdownViewr.Windows/DocumentBrowser.Find.cs
new file mode 100644
index 0000000..6a6f835
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentBrowser.Find.cs
@@ -0,0 +1,176 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+using System.Text.Json;
+using Microsoft.Web.WebView2.Core;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Native browser search accepts a literal term without executing it or exposing a host bridge.</summary>
+internal sealed partial class DocumentBrowser
+{
+   private int[]? _findCollapsed;
+   private bool _findSubscribed;
+   private string _findQuery = "";
+
+
+
+   /// <summary>Signals that restoration finished on the current intercepted page.</summary>
+   public event EventHandler? DocumentReady;
+
+
+
+   /// <summary>Reports native browser counts after an active find session changes.</summary>
+   public event EventHandler? FindCountChanged;
+
+
+
+   /// <summary>Search must wait for the active page, never a pending old document.</summary>
+   public bool IsReady => !_closed && _pageReady;
+
+
+
+   /// <summary>The rendered count is independent of literal source occurrences.</summary>
+   public int FindCount => !_closed && _findSubscribed && _pageReady && IsCurrentDocument() ? _view.CoreWebView2.Find.MatchCount : 0;
+
+
+
+   /// <summary>Expands sections during search and uses the runtime's safe native finder and highlight support.</summary>
+   public async Task<int> FindAsync(string query)
+   {
+      if(_closed || !_pageReady || !IsCurrentDocument() || _environment is null)
+      {
+         return 0;
+      }
+      Uri document = _policy.DocumentUri;
+      ulong navigation = _navigationId;
+      try
+      {
+         CoreWebView2Find finder = _view.CoreWebView2.Find;
+         if(!_findSubscribed)
+         {
+            finder.MatchCountChanged += (_, _) =>
+            {
+               if(!_closed && _pageReady && IsCurrentDocument())
+               {
+                  FindCountChanged?.Invoke(this, EventArgs.Empty);
+               }
+            };
+            _findSubscribed = true;
+         }
+         if(_findCollapsed is null)
+         {
+            await CaptureViewportAsync();
+            if(!IsMatchingFindDocument(document, navigation))
+            {
+               return 0;
+            }
+            _findCollapsed = _collapsedSections.ToArray();
+         }
+         await ExecuteDocumentScriptAsync("for(const e of document.querySelectorAll('[data-mv-body]')) e.hidden=false;");
+         if(!IsMatchingFindDocument(document, navigation))
+         {
+            return 0;
+         }
+         finder.Stop();
+         _findQuery = query;
+         CoreWebView2FindOptions options = _environment.CreateFindOptions();
+         options.FindTerm = query;
+         options.IsCaseSensitive = false;
+         options.ShouldMatchWord = false;
+         options.ShouldHighlightAllMatches = true;
+         options.SuppressDefaultFindDialog = true;
+         await finder.StartAsync(options);
+         return IsMatchingFindDocument(document, navigation) ? finder.MatchCount : 0;
+      }
+      catch(Exception exception) when(exception is COMException or NotImplementedException)
+      {
+         if(!_closed)
+         {
+            _status("Find could not search this document. Check that the Microsoft Edge WebView2 Runtime is up to date.");
+         }
+         return 0;
+      }
+   }
+
+
+
+   /// <summary>Moves the real native browser highlight; the paired source count is controlled separately.</summary>
+   public void MoveFind(bool forward)
+   {
+      if(_closed || !_pageReady || _findQuery.Length == 0 || !IsCurrentDocument())
+      {
+         return;
+      }
+      try
+      {
+         if(forward)
+         {
+            _view.CoreWebView2.Find.FindNext();
+         }
+         else
+         {
+            _view.CoreWebView2.Find.FindPrevious();
+         }
+      }
+      catch(COMException)
+      {
+         if(!_closed)
+         {
+            _status("Find could not move to this occurrence.");
+         }
+      }
+   }
+
+
+
+   /// <summary>Removes native highlights and restores the section choices from before this search.</summary>
+   public async Task EndFindAsync()
+   {
+      if(_closed)
+      {
+         return;
+      }
+      Uri document = _policy.DocumentUri;
+      if(_findSubscribed)
+      {
+         _view.CoreWebView2.Find.Stop();
+      }
+      _findQuery = "";
+      if(_findCollapsed is not { } collapsed)
+      {
+         return;
+      }
+      _findCollapsed = null;
+      _collapsedSections = collapsed;
+      string indices = JsonSerializer.Serialize(collapsed);
+      await ExecuteDocumentScriptAsync("if(location.href.split('#')[0] === '" + document.AbsoluteUri + "') for(const e of document.querySelectorAll('[data-mv-body]')) e.hidden=" + indices + ".includes(Number(e.dataset.mvBody));");
+   }
+
+
+
+   /// <summary>Before navigation, preserve the pre-search collapse choices only for the same heading sequence.</summary>
+   private void ResetFindForNavigation()
+   {
+      if(_findSubscribed)
+      {
+         _view.CoreWebView2.Find.Stop();
+      }
+      if(_findCollapsed is { } collapsed)
+      {
+         _collapsedSections = collapsed;
+      }
+      _findCollapsed = null;
+      _findQuery = "";
+   }
+
+
+
+   /// <summary>Rejects stale continuations after reload, theme navigation, close or another document open.</summary>
+   private bool IsMatchingFindDocument(Uri document, ulong navigation)
+      => !_closed && _pageReady && document == _policy.DocumentUri && navigation == _navigationId && IsCurrentDocument();
+}
diff --git a/src/MarkdownViewr.Windows/DocumentBrowser.Navigation.cs b/src/MarkdownViewr.Windows/DocumentBrowser.Navigation.cs
new file mode 100644
index 0000000..fc01a4d
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentBrowser.Navigation.cs
@@ -0,0 +1,61 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Executes fixed native reading operations without giving document content an input/message bridge.</summary>
+internal sealed partial class DocumentBrowser
+{
+   /// <summary>Moves by computed line height, viewport fractions, document ends or visible generated headings.</summary>
+   public Task NavigateReaderAsync(Core.Navigation.ReaderCommand command)
+   {
+      if(command is Core.Navigation.ReaderCommand.NextHeading or Core.Navigation.ReaderCommand.PreviousHeading)
+      {
+         return MoveVisibleHeadingAsync(command == Core.Navigation.ReaderCommand.NextHeading);
+      }
+      string? amount = command switch
+      {
+         Core.Navigation.ReaderCommand.LineDown => "line",
+         Core.Navigation.ReaderCommand.LineUp => "-line",
+         Core.Navigation.ReaderCommand.HalfPageDown => "s.clientHeight/2",
+         Core.Navigation.ReaderCommand.HalfPageUp => "-s.clientHeight/2",
+         Core.Navigation.ReaderCommand.PageUp => "-s.clientHeight",
+         Core.Navigation.ReaderCommand.Top => "0",
+         Core.Navigation.ReaderCommand.Bottom => "s.scrollHeight",
+         _ => null,
+      };
+      if(amount is null)
+      {
+         return Task.CompletedTask;
+      }
+      string operation = command is Core.Navigation.ReaderCommand.Top or Core.Navigation.ReaderCommand.Bottom ? "scrollTo" : "scrollBy";
+      return ExecuteDocumentScriptAsync("(()=>{const s=document.getElementById('content');if(!s)return;const c=getComputedStyle(document.body);let line=parseFloat(c.lineHeight);if(!Number.isFinite(line))line=parseFloat(c.fontSize)*1.5;if(!Number.isFinite(line)||line<=0)line=24;s." + operation + "({top:" + amount + ",behavior:'instant'});})()");
+   }
+
+
+
+   /// <summary>Heading sequences skip collapsed descendants and use document coordinates even inside nested sections.</summary>
+   private Task<string?> MoveVisibleHeadingAsync(bool forward)
+   {
+      string direction = forward ? "top>y+2" : "top<y-2";
+      string update = forward ? "target=h;break;" : "target=h;";
+      return ExecuteDocumentScriptAsync(FormattableString.Invariant($$"""
+         (()=>{
+            const s=document.getElementById('content');if(!s)return;
+            const y=s.scrollTop;let target=null;
+            for(let i=0;i<{{_headings.Count}};i++){
+               const h=document.getElementById('mv-heading-'+i);
+               if(h&&h.offsetParent!==null){
+                  const inset=parseFloat(getComputedStyle(h).scrollMarginTop)||0;
+                  const top=Math.max(0,h.getBoundingClientRect().top-s.getBoundingClientRect().top+y-inset);
+                  if({{direction}}){ {{update}} }
+               }
+            }
+            if(target)target.scrollIntoView({block:'start',behavior:'instant'});
+         })()
+         """));
+   }
+}
diff --git a/src/MarkdownViewr.Windows/DocumentBrowser.Print.cs b/src/MarkdownViewr.Windows/DocumentBrowser.Print.cs
new file mode 100644
index 0000000..f8d7267
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentBrowser.Print.cs
@@ -0,0 +1,102 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+using Microsoft.Web.WebView2.Core;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Prints the current passive snapshot through deliberate native commands; reading DOM state remains unchanged.</summary>
+internal sealed partial class DocumentBrowser
+{
+   /// <summary>Opens the Windows print dialog without assuming that the void native API reports completion or cancellation.</summary>
+   public async Task<bool> ShowPrintUiAsync(Core.Printing.PrintOptions options, IEnumerable<Core.Themes.ReaderTheme> themes)
+   {
+      if(!await PreparePrintAsync(options, themes))
+      {
+         App.Log.Warning("System print preparation was rejected; the document may have changed or is not ready.");
+         return false;
+      }
+      App.Log.Info("Requesting the Windows system print dialog with WebView2 " + _view.CoreWebView2.Environment.BrowserVersionString + ".");
+      _view.CoreWebView2.ShowPrintUI(CoreWebView2PrintDialogKind.System);
+      return true;
+   }
+
+
+
+   /// <summary>Exports an explicitly chosen PDF destination through native printing, independent of physical printers.</summary>
+   public async Task<bool> SavePdfAsync(string path, Core.Printing.PrintOptions options, IEnumerable<Core.Themes.ReaderTheme> themes)
+   {
+      if(!await PreparePrintAsync(options, themes))
+      {
+         return false;
+      }
+      Uri document = _policy.DocumentUri;
+      ulong navigation = _navigationId;
+      Core.Documents.DocumentScrollState? reading = await CaptureScrollStateAsync();
+      if(reading is null || !IsMatchingFindDocument(document, navigation))
+      {
+         return false;
+      }
+      CoreWebView2PrintSettings settings = CreatePdfSettings(options.Backgrounds);
+      try
+      {
+         bool saved = await _view.CoreWebView2.PrintToPdfAsync(path, settings);
+         if(!saved)
+         {
+            App.Log.Warning("The WebView2 PDF export returned failure.");
+            return false;
+         }
+         global::Windows.Storage.StorageFile file = await global::Windows.Storage.StorageFile.GetFileFromPathAsync(path);
+         global::Windows.Data.Pdf.PdfDocument pdf = await global::Windows.Data.Pdf.PdfDocument.LoadFromFileAsync(file);
+         bool readable = pdf.PageCount > 0;
+         App.Log.Info(readable ? "The generated PDF was verified readable." : "The generated PDF contains no pages.");
+         return readable;
+      }
+      finally
+      {
+         if(IsMatchingFindDocument(document, navigation))
+         {
+            await ScrollToSourcePositionAsync(reading.Position);
+         }
+      }
+   }
+
+
+
+   /// <summary>Configures reference page margins and font-only scaling without browser headers or footers.</summary>
+   private CoreWebView2PrintSettings CreatePdfSettings(bool backgrounds)
+   {
+      CoreWebView2PrintSettings settings = _environment!.CreatePrintSettings();
+      settings.ShouldPrintBackgrounds = backgrounds;
+      settings.ShouldPrintHeaderAndFooter = false;
+      settings.ScaleFactor = 1;
+      // The reference uses 36-point page margins: WebView2's native settings use inches.
+      settings.MarginTop = settings.MarginBottom = settings.MarginLeft = settings.MarginRight = 0.5;
+      return settings;
+   }
+
+
+
+   /// <summary>Installs CSS only into a host-owned print-media stylesheet, guarding asynchronous work against navigation.</summary>
+   private async Task<bool> PreparePrintAsync(Core.Printing.PrintOptions options, IEnumerable<Core.Themes.ReaderTheme> themes)
+   {
+      if(_closed || !_pageReady || _files is null || !IsCurrentDocument())
+      {
+         return false;
+      }
+      Uri document = _policy.DocumentUri;
+      ulong navigation = _navigationId;
+      string css = Core.Printing.PrintStyles.Build(options, _theme, themes, _zoomScale);
+      string? result = await ExecuteDocumentScriptAsync("""
+         (()=>{let s=document.getElementById('mv-print-theme');
+         if(!s){s=document.createElement('style');s.id='mv-print-theme';s.media='print';document.head.appendChild(s);}
+         s.textContent=
+         """ + JsonSerializer.Serialize(css) + ";return true;})()");
+      return string.Equals(result, "true", StringComparison.Ordinal) && IsMatchingFindDocument(document, navigation);
+   }
+}
diff --git a/src/MarkdownViewr.Windows/DocumentBrowser.Source.cs b/src/MarkdownViewr.Windows/DocumentBrowser.Source.cs
new file mode 100644
index 0000000..7b28b83
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentBrowser.Source.cs
@@ -0,0 +1,44 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Provides fixed numeric reading geometry without authored event handlers, scripts or messages.</summary>
+internal sealed partial class DocumentBrowser
+{
+   /// <summary>Captures actual visible heading tops and hidden generated bodies only for the matching ready document.</summary>
+   public async Task<Core.Documents.DocumentScrollState?> CaptureScrollStateAsync()
+   {
+      Uri document = _policy.DocumentUri;
+      ulong navigation = _navigationId;
+      string? json = await ExecuteDocumentScriptAsync(FormattableString.Invariant($$"""
+         (()=>{
+            if(window.matchMedia('print').matches)return null;
+            const s=document.getElementById('content');if(!s)return null;
+            const y=s.scrollTop;const headings=[];const collapsed=[];
+            for(let i=0;i<{{_headings.Count}};i++){
+               const h=document.getElementById('mv-heading-'+i);
+               if(h&&h.offsetParent!==null)headings.push([i,h.getBoundingClientRect().top-s.getBoundingClientRect().top+y]);
+               const b=document.querySelector('[data-mv-body="'+i+'"]');
+               if(b&&b.hidden)collapsed.push(i);
+            }
+            return [y,Math.max(0,s.scrollHeight-s.clientHeight),headings,collapsed];
+         })()
+         """));
+      return IsMatchingFindDocument(document, navigation) ? Core.Documents.DocumentScrollState.FromBrowserResult(json, _headings.Count) : null;
+   }
+
+
+
+   /// <summary>Scrolls only with a finite nonnegative host-computed pixel value; source text is never executable input.</summary>
+   public Task ScrollToSourcePositionAsync(double top)
+   {
+      if(!double.IsFinite(top) || top < 0)
+      {
+         return Task.CompletedTask;
+      }
+      return ExecuteDocumentScriptAsync(FormattableString.Invariant($"document.getElementById('content')?.scrollTo({{top:{top:R},behavior:'instant'}});"));
+   }
+}
diff --git a/src/MarkdownViewr.Windows/DocumentBrowser.cs b/src/MarkdownViewr.Windows/DocumentBrowser.cs
new file mode 100644
index 0000000..ec1e2b4
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentBrowser.cs
@@ -0,0 +1,425 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+using System.Text;
+using System.Text.Json;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.Web.WebView2.Core;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Hosts passive Markdown without network access, authored scripts or native capabilities.</summary>
+internal sealed partial class DocumentBrowser
+{
+   private const string SecurityHeaders = "Content-Security-Policy: default-src 'none'; img-src 'self'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nCache-Control: no-store";
+   private readonly WebView2 _view;
+   private readonly Func<string, string, Task>? _openLinkedDocument;
+   private readonly Action<string> _status;
+   private CoreWebView2Environment? _environment;
+   private Core.Documents.DocumentResourcePolicy _policy = new();
+   private DocumentFiles? _files;
+   private byte[] _html = [];
+   private Core.Documents.DocumentViewport _viewport;
+   private ulong _navigationId;
+   private bool _pageReady;
+   private bool _restoreViewport;
+   private bool _closed;
+   private Core.Themes.ReaderTheme _theme;
+   private Core.Themes.ReadingAppearance _appearance;
+   private ulong _themeRevision;
+   private ulong _appearanceRevision;
+   private string _sanitizedHtml = "";
+   private string _title = "MarkdownViewr";
+   private double _zoomScale = 1;
+   private IReadOnlyList<Core.Documents.DocumentHeading> _headings = [];
+   private int[] _collapsedSections = [];
+
+
+
+   /// <summary>Attaches a native status callback; the document itself cannot invoke host commands.</summary>
+   public DocumentBrowser(WebView2 view, Action<string> status, Core.Themes.ReaderTheme theme, Core.Themes.ReadingAppearance? appearance = null, Func<string, string, Task>? openLinkedDocument = null)
+   {
+      _view = view;
+      _openLinkedDocument = openLinkedDocument;
+      _status = status;
+      _theme = theme;
+      _appearance = (appearance ?? new Core.Themes.ReadingAppearance()).Sanitize();
+   }
+
+
+
+   /// <summary>Creates an isolated per-user browser profile and installs deny-by-default handlers before navigation.</summary>
+   public async Task InitializeAsync()
+   {
+      _environment = await CoreWebView2Environment.CreateWithOptionsAsync(null, Path.Combine(AppIdentity.Paths.DataRoot, "WebView2"), null);
+      if(_closed)
+      {
+         return;
+      }
+      await _view.EnsureCoreWebView2Async(_environment);
+      if(_closed)
+      {
+         return;
+      }
+      CoreWebView2 core = _view.CoreWebView2;
+      core.Settings.IsScriptEnabled = false;
+      core.Settings.AreHostObjectsAllowed = false;
+      core.Settings.IsWebMessageEnabled = false;
+      core.Settings.AreDefaultScriptDialogsEnabled = false;
+      core.Settings.AreDevToolsEnabled = false;
+      core.Settings.AreDefaultContextMenusEnabled = false;
+      core.Settings.AreBrowserAcceleratorKeysEnabled = false;
+      core.PermissionRequested += (_, args) => args.State = CoreWebView2PermissionState.Deny;
+      core.DownloadStarting += (_, args) => args.Cancel = true;
+      core.NewWindowRequested += (_, args) => args.Handled = true;
+      core.FrameNavigationStarting += (_, args) => args.Cancel = true;
+      core.NavigationStarting += NavigationStarting;
+      core.NavigationCompleted += NavigationCompleted;
+      core.SourceChanged += SourceChanged;
+      core.AddWebResourceRequestedFilter("*", CoreWebView2WebResourceContext.All, CoreWebView2WebResourceRequestSourceKinds.All);
+      core.WebResourceRequested += ResourceRequested;
+      Show(null, "<h1>MarkdownViewr</h1><p>Choose File → Open to read a Markdown document.</p>", "MarkdownViewr");
+   }
+
+
+
+   /// <summary>Replaces the document capability and navigates to an intercepted HTTPS response, with no HTTP server.</summary>
+   public void Show(DocumentFiles? files, string sanitizedHtml, string title, Core.Documents.DocumentViewport viewport = default, IReadOnlyList<Core.Documents.DocumentHeading>? headings = null)
+   {
+      ResetFindForNavigation();
+      headings ??= [];
+      if(!_headings.SequenceEqual(headings))
+      {
+         _collapsedSections = [];
+      }
+      _headings = headings;
+      _files = files;
+      _sanitizedHtml = sanitizedHtml;
+      _title = title;
+      _viewport = viewport;
+      _pageReady = false;
+      _restoreViewport = true;
+      _policy = new Core.Documents.DocumentResourcePolicy();
+      _html = Encoding.UTF8.GetBytes(Core.Documents.DocumentPage.Build(sanitizedHtml, title, _theme, _appearance, _zoomScale));
+      _view.CoreWebView2.Navigate(_policy.DocumentUri.AbsoluteUri);
+   }
+
+
+
+   /// <summary>Retains window-local font scale through reload/theme navigation and restores its reading/collapse state.</summary>
+   public async Task ApplyZoomAsync(double scale)
+   {
+      if(!double.IsFinite(scale) || scale is < 0.3 or > 5)
+      {
+         throw new ArgumentOutOfRangeException(nameof(scale));
+      }
+      Core.Documents.DocumentViewport viewport = await CaptureViewportAsync();
+      if(!_closed)
+      {
+         _zoomScale = scale;
+         Show(_files, _sanitizedHtml, _title, viewport, _headings);
+      }
+   }
+
+
+
+   /// <summary>Changes only the document appearance and preserves its current relative viewport.</summary>
+   public async Task ApplyThemeAsync(Core.Themes.ReaderTheme theme)
+   {
+      ulong revision = ++_themeRevision;
+      Core.Documents.DocumentViewport viewport = await CaptureViewportAsync();
+      if(!_closed && revision == _themeRevision)
+      {
+         _theme = theme;
+         Show(_files, _sanitizedHtml, _title, viewport, _headings);
+      }
+   }
+
+
+   /// <summary>Applies only native reader-wide preferences using the guarded viewport/collapse/find navigation path.</summary>
+   public async Task ApplyAppearanceAsync(Core.Themes.ReadingAppearance appearance)
+   {
+      ArgumentNullException.ThrowIfNull(appearance);
+      appearance.Validate();
+      ulong revision = ++_appearanceRevision;
+      Core.Documents.DocumentViewport viewport = await CaptureViewportAsync();
+      if(!_closed && revision == _appearanceRevision)
+      {
+         _appearance = appearance;
+         Show(_files, _sanitizedHtml, _title, viewport, _headings);
+      }
+   }
+
+
+
+   /// <summary>Reveals a heading's hidden ancestors before moving the actual reading viewport to it.</summary>
+   public async Task JumpToHeadingAsync(int index)
+   {
+      if(index < 0 || index >= _headings.Count)
+      {
+         return;
+      }
+      await ExecuteDocumentScriptAsync(FormattableString.Invariant($"(()=>{{const h=document.getElementById('mv-heading-{index}'); if(h){{ for(let p=h.parentElement;p;p=p.parentElement) p.hidden=false; h.scrollIntoView({{block:'start'}}); }}}})()"));
+   }
+
+
+
+   /// <summary>Only a host-generated section body can be collapsed, leaving its own heading visible.</summary>
+   public async Task ToggleSectionAsync(int index)
+   {
+      if(index < 0 || index >= _headings.Count)
+      {
+         return;
+      }
+      Uri document = _policy.DocumentUri;
+      string? result = await ExecuteDocumentScriptAsync(FormattableString.Invariant($"(()=>{{const e=document.querySelector('[data-mv-body=\"{index}\"]'); if(e) return e.hidden=!e.hidden;}})()"));
+      if(document == _policy.DocumentUri && _findCollapsed is { } collapsed && result is "true" or "false")
+      {
+         _findCollapsed = string.Equals(result, "true", StringComparison.Ordinal) ? collapsed.Append(index).Distinct().ToArray() : collapsed.Where(value => value != index).ToArray();
+      }
+   }
+
+
+
+   /// <summary>Applies an explicit native command to every generated section, including nested descendants.</summary>
+   public async Task SetSectionsAsync(bool collapsed)
+   {
+      Uri document = _policy.DocumentUri;
+      string? result = await ExecuteDocumentScriptAsync("for(const e of document.querySelectorAll('[data-mv-body]')) e.hidden=" + (collapsed ? "true" : "false") + ";");
+      if(result is not null && document == _policy.DocumentUri && _findCollapsed is not null)
+      {
+         _findCollapsed = collapsed ? Enumerable.Range(0, _headings.Count).ToArray() : [];
+      }
+   }
+
+
+   /// <summary>Fixed host operations run only on the ready intercepted document; content script execution remains disabled.</summary>
+   private async Task<string?> ExecuteDocumentScriptAsync(string script)
+   {
+      if(_closed || !_pageReady || !IsCurrentDocument())
+      {
+         return null;
+      }
+      try
+      {
+         return await _view.CoreWebView2.ExecuteScriptAsync(script);
+      }
+      catch(COMException)
+      {
+         if(!_closed)
+         {
+            _status("The document navigation could not be completed.");
+         }
+         return null;
+      }
+   }
+
+
+   /// <summary>Marks pending browser continuations inactive before closing the native surface.</summary>
+   public void Close()
+   {
+      _closed = true;
+      _view.Close();
+   }
+
+
+
+   /// <summary>Queries only fixed viewport data on the current document; content scripts and messages remain disabled.</summary>
+   public async Task<Core.Documents.DocumentViewport> CaptureViewportAsync()
+   {
+      Uri document = _policy.DocumentUri;
+      ulong navigation = _navigationId;
+      if(!_closed && _pageReady && IsCurrentDocument())
+      {
+         string result = await _view.CoreWebView2.ExecuteScriptAsync("(()=>{const s=document.getElementById('content');return s?[s.scrollLeft/Math.max(1,s.scrollWidth-s.clientWidth),s.scrollTop/Math.max(1,s.scrollHeight-s.clientHeight)]:[0,0];})()");
+         if(!_closed && document == _policy.DocumentUri && navigation == _navigationId && IsCurrentDocument())
+         {
+            _viewport = Core.Documents.DocumentViewport.FromBrowserResult(result);
+            string collapsed = await _view.CoreWebView2.ExecuteScriptAsync("Array.from(document.querySelectorAll('[data-mv-body]')).filter(e=>e.hidden).map(e=>Number(e.dataset.mvBody))");
+            if(!_closed && document == _policy.DocumentUri && navigation == _navigationId && IsCurrentDocument())
+            {
+               _collapsedSections = (JsonSerializer.Deserialize<int[]>(collapsed) ?? []).Where(index => index >= 0 && index < _headings.Count).Distinct().ToArray();
+            }
+         }
+      }
+      return _viewport;
+   }
+
+
+
+   /// <summary>Restores scroll after the matching navigation completes, using validated invariant numeric arguments.</summary>
+   private async void NavigationCompleted(CoreWebView2 sender, CoreWebView2NavigationCompletedEventArgs args)
+   {
+      if(_closed || args.NavigationId != _navigationId || !IsCurrentDocument())
+      {
+         return;
+      }
+      if(!args.IsSuccess)
+      {
+         _status("The document surface could not be displayed.");
+         return;
+      }
+      if(!_restoreViewport)
+      {
+         return;
+      }
+      _restoreViewport = false;
+      try
+      {
+         string collapsed = JsonSerializer.Serialize(_collapsedSections);
+         await sender.ExecuteScriptAsync("for(const e of document.querySelectorAll('[data-mv-body]')) e.hidden=" + collapsed + ".includes(Number(e.dataset.mvBody));");
+         string script = FormattableString.Invariant($"if(location.href.split('#')[0] === '{_policy.DocumentUri.AbsoluteUri}') {{ const s=document.getElementById('content'); if(s) s.scrollTo({_viewport.HorizontalFraction:R}*Math.max(0,s.scrollWidth-s.clientWidth),{_viewport.VerticalFraction:R}*Math.max(0,s.scrollHeight-s.clientHeight)); }}");
+         await sender.ExecuteScriptAsync(script);
+         if(!_closed && args.NavigationId == _navigationId && IsCurrentDocument())
+         {
+            _pageReady = true;
+            DocumentReady?.Invoke(this, EventArgs.Empty);
+         }
+      }
+      catch(COMException)
+      {
+         if(!_closed)
+         {
+            _status("The document scroll position could not be restored.");
+         }
+      }
+   }
+
+
+
+   /// <summary>Native script calls must address the active intercepted document, including only an optional fragment.</summary>
+   private bool IsCurrentDocument()
+   {
+      return Uri.TryCreate(_view.CoreWebView2.Source, UriKind.Absolute, out Uri? source) &&
+         source.Query.Length == 0 &&
+         string.Equals(source.GetLeftPart(UriPartial.Path), _policy.DocumentUri.AbsoluteUri, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Same-document fragment changes do not raise NavigationStarting; reveal only a validated generated target.</summary>
+   private async void SourceChanged(CoreWebView2 sender, CoreWebView2SourceChangedEventArgs args)
+   {
+      if(_closed || args.IsNewDocument || !Uri.TryCreate(sender.Source, UriKind.Absolute, out Uri? uri))
+      {
+         return;
+      }
+      if(_policy.GetHeadingIndex(uri, _headings.Count) is { } heading)
+      {
+         Uri document = _policy.DocumentUri;
+         await JumpToHeadingAsync(heading);
+         if(document == _policy.DocumentUri)
+         {
+            // Rearm an identical link after the user collapses its target again; keep the displayed viewport.
+            await ExecuteDocumentScriptAsync($"if(location.href.split('#')[0] === '{document.AbsoluteUri}') history.replaceState(null,'','{document.AbsoluteUri}');");
+         }
+      }
+   }
+
+
+   /// <summary>Allows only the current document and fragment navigation; external links require an actual user gesture.</summary>
+   private async void NavigationStarting(CoreWebView2 sender, CoreWebView2NavigationStartingEventArgs args)
+   {
+      if(_closed)
+      {
+         args.Cancel = true;
+         return;
+      }
+      if(Uri.TryCreate(args.Uri, UriKind.Absolute, out Uri? uri) &&
+         string.Equals(uri.GetLeftPart(UriPartial.Path), _policy.DocumentUri.AbsoluteUri, StringComparison.Ordinal) &&
+         uri.Query.Length == 0)
+      {
+         if(args.IsUserInitiated && _policy.GetHeadingIndex(uri, _headings.Count) is { } heading)
+
+         {
+            args.Cancel = true;
+            await JumpToHeadingAsync(heading);
+            return;
+         }
+         _navigationId = args.NavigationId;
+         return;
+      }
+      args.Cancel = true;
+      if(args.IsUserInitiated && uri is not null && _files is { } files && _openLinkedDocument is not null &&
+         _policy.GetDocumentRelativePath(uri) is { } relativePath)
+      {
+         try
+         {
+            await _openLinkedDocument(files.ResolveDocumentLink(relativePath), files.PhysicalRoot);
+         }
+         catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or ArgumentException or NotSupportedException)
+         {
+            _status("This linked document could not be opened.");
+         }
+         return;
+      }
+      if(args.IsUserInitiated && uri is not null && uri.UserInfo.Length == 0 &&
+         !string.Equals(uri.Host, _policy.DocumentUri.Host, StringComparison.OrdinalIgnoreCase) && uri.Scheme is "https" or "http")
+      {
+         try
+         {
+            if(!await global::Windows.System.Launcher.LaunchUriAsync(uri))
+            {
+               _status("Windows could not open this link.");
+            }
+         }
+         catch(Exception exception) when(exception is ArgumentException or COMException)
+         {
+            _status("Windows could not open this link.");
+         }
+      }
+      else
+      {
+         _status("This link is outside the current document.");
+      }
+   }
+
+
+
+   /// <summary>Every browser resource receives either the document, a verified local image, or an empty denial response.</summary>
+   private void ResourceRequested(CoreWebView2 sender, CoreWebView2WebResourceRequestedEventArgs args)
+   {
+      byte[] bytes = [];
+      string type = "text/plain";
+      int status = 403;
+      if(string.Equals(args.Request.Method, "GET", StringComparison.Ordinal) && Uri.TryCreate(args.Request.Uri, UriKind.Absolute, out Uri? uri))
+      {
+         if(uri == _policy.DocumentUri && args.ResourceContext == CoreWebView2WebResourceContext.Document)
+         {
+            bytes = _html;
+            type = "text/html; charset=utf-8";
+            status = 200;
+         }
+         else if(_files is not null && args.ResourceContext == CoreWebView2WebResourceContext.Image &&
+                 _policy.GetImageRelativePath(uri) is string path)
+         {
+            try
+            {
+               bytes = _files.ReadImage(path);
+               type = Path.GetExtension(path).ToUpperInvariant() switch
+               {
+                  ".SVG" => "image/svg+xml",
+                  ".JPG" or ".JPEG" => "image/jpeg",
+                  ".PNG" => "image/png",
+                  ".GIF" => "image/gif",
+                  ".WEBP" => "image/webp",
+                  ".BMP" => "image/bmp",
+                  ".AVIF" => "image/avif",
+                  _ => "image/x-icon",
+               };
+               status = 200;
+            }
+            catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or ArgumentException)
+            {
+               _status("One or more local images could not be loaded.");
+            }
+         }
+      }
+      var stream = new MemoryStream(bytes, writable: false);
+      args.Response = _environment!.CreateWebResourceResponse(stream.AsRandomAccessStream(), status, status == 200 ? "OK" : "Forbidden", $"Content-Type: {type}\r\n{SecurityHeaders}");
+   }
+}
diff --git a/src/MarkdownViewr.Windows/DocumentFiles.cs b/src/MarkdownViewr.Windows/DocumentFiles.cs
new file mode 100644
index 0000000..fdca154
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentFiles.cs
@@ -0,0 +1,120 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+using System.Text;
+using Microsoft.Win32.SafeHandles;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Reads a bounded document snapshot and serves images through verified open file handles.</summary>
+internal sealed partial class DocumentFiles
+{
+   private const int MaximumImageBytes = 16 * 1024 * 1024;
+   private readonly string _directory;
+   private readonly string _physicalRoot;
+
+
+
+   /// <summary>Retains the selected directory and the physical root of the document actually opened.</summary>
+   private DocumentFiles(string path, string physicalPath, string markdown, DateTime modifiedUtc, long byteLength)
+   {
+      _directory = Path.GetDirectoryName(path)!;
+      _physicalRoot = Path.GetDirectoryName(physicalPath)! + Path.DirectorySeparatorChar;
+      Markdown = markdown;
+      ModifiedUtc = modifiedUtc;
+      ByteLength = byteLength;
+   }
+
+
+
+   /// <summary>The bounded snapshot parsed into the document surface.</summary>
+   public string Markdown { get; }
+
+
+
+   /// <summary>The modification timestamp of the opened file handle retained with this loaded snapshot.</summary>
+   public DateTime ModifiedUtc { get; }
+
+
+
+   /// <summary>The opened snapshot's byte length helps detect changes missed by directory notifications.</summary>
+   public long ByteLength { get; }
+
+
+
+   /// <summary>The physical directory authorized by the selected document's actual open handle.</summary>
+   public string PhysicalRoot => _physicalRoot;
+
+
+
+   /// <summary>Resolves only the already-validated relative spelling; the eventual read must still enforce PhysicalRoot.</summary>
+   public string ResolveDocumentLink(string relativePath) => Path.GetFullPath(Path.Combine(_directory, relativePath));
+
+
+
+   /// <summary>Loads at most the parser limit plus one character, using the same handle for identity and contents.</summary>
+   public static DocumentFiles Open(string path, string? requiredPhysicalRoot = null)
+   {
+      string fullPath = Path.GetFullPath(path);
+      using SafeFileHandle handle = File.OpenHandle(fullPath, FileMode.Open, FileAccess.Read, FileShare.ReadWrite | FileShare.Delete);
+      string physicalPath = GetPhysicalPath(handle);
+      if(requiredPhysicalRoot is not null && !physicalPath.StartsWith(requiredPhysicalRoot, StringComparison.Ordinal))
+      {
+         throw new IOException("This document resolves outside the permitted folder.");
+      }
+      using var stream = new FileStream(handle, FileAccess.Read);
+      using var reader = new StreamReader(stream, Encoding.UTF8, detectEncodingFromByteOrderMarks: true);
+      char[] buffer = new char[Core.Documents.MarkdownRenderer.MaximumCharacters + 1];
+      int count = reader.ReadBlock(buffer, 0, buffer.Length);
+      if(count > Core.Documents.MarkdownRenderer.MaximumCharacters)
+      {
+         throw new IOException("This document exceeds the 16 Mi-character limit.");
+      }
+      return new DocumentFiles(fullPath, physicalPath, new string(buffer, 0, count), File.GetLastWriteTimeUtc(handle), RandomAccess.GetLength(handle));
+   }
+
+
+
+   /// <summary>Checks the final image handle against the physical document root before reading any image bytes.</summary>
+   public byte[] ReadImage(string relativePath)
+   {
+      using SafeFileHandle handle = File.OpenHandle(Path.Combine(_directory, relativePath), FileMode.Open, FileAccess.Read, FileShare.ReadWrite | FileShare.Delete);
+      if(!GetPhysicalPath(handle).StartsWith(_physicalRoot, StringComparison.Ordinal))
+      {
+         throw new IOException("This image resolves outside the document folder.");
+      }
+      using var stream = new FileStream(handle, FileAccess.Read);
+      if(stream.Length > MaximumImageBytes)
+      {
+         throw new IOException("This image exceeds the 16 MiB limit.");
+      }
+      byte[] bytes = new byte[checked((int)stream.Length)];
+      stream.ReadExactly(bytes);
+      return bytes;
+   }
+
+
+
+   /// <summary>Uses Windows normalization on the open handle; aliases and reparse points are resolved before access.</summary>
+   private static unsafe string GetPhysicalPath(SafeFileHandle handle)
+   {
+      const int Capacity = 32768;
+      char* buffer = stackalloc char[Capacity];
+      uint count = GetFinalPathNameByHandle(handle, buffer, Capacity, 0);
+      if(count == 0 || count >= Capacity)
+      {
+         throw new IOException("Could not verify the opened file's physical location.", Marshal.GetExceptionForHR(Marshal.GetHRForLastWin32Error()));
+      }
+      return new string(buffer, 0, checked((int)count));
+   }
+
+
+
+   /// <summary>Retrieves the normalized DOS path of an already opened file, including resolved reparse points.</summary>
+   [LibraryImport("kernel32.dll", EntryPoint = "GetFinalPathNameByHandleW", SetLastError = true)]
+   private static unsafe partial uint GetFinalPathNameByHandle(SafeFileHandle handle, char* path, uint capacity, uint flags);
+}
diff --git a/src/MarkdownViewr.Windows/DocumentKeyboard.cs b/src/MarkdownViewr.Windows/DocumentKeyboard.cs
new file mode 100644
index 0000000..e047a11
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentKeyboard.cs
@@ -0,0 +1,210 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.ComponentModel;
+using System.Runtime.InteropServices;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Routes bounded reading commands from owned child windows before native browser dispatch.</summary>
+internal sealed partial class DocumentKeyboard : IDisposable
+{
+   private readonly nint _window;
+   private readonly Func<bool> _readingFocused;
+   private readonly Func<Core.Navigation.ReaderCommand, bool> _execute;
+   private readonly Core.Navigation.ReaderKeyboard _keys = new();
+   private readonly HookCallback _callback;
+   private nint _hook;
+
+
+
+   /// <summary>Installs a current-UI-thread message hook; no other process, thread or desktop is observed.</summary>
+   public DocumentKeyboard(nint window, Func<bool> readingFocused, Func<Core.Navigation.ReaderCommand, bool> execute)
+   {
+      _window = window;
+      _readingFocused = readingFocused;
+      _execute = execute;
+      _callback = OnMessage;
+      _hook = SetWindowsHookExW(3, Marshal.GetFunctionPointerForDelegate(_callback), 0, GetCurrentThreadId());
+      if(_hook == 0)
+      {
+         throw new Win32Exception(Marshal.GetLastWin32Error(), "Could not initialize the document keyboard shortcut.");
+      }
+   }
+
+
+
+   /// <summary>Consumes only allowed reading commands removed from this active window's own message queue.</summary>
+   private nint OnMessage(int code, nuint remove, nint pointer)
+   {
+      if(code >= 0 && remove == 1 && GetForegroundWindow() == _window)
+      {
+         NativeMessage message = Marshal.PtrToStructure<NativeMessage>(pointer);
+         if(message.Message == 0x0100 && (message.Window == _window || IsChild(_window, message.Window)) && HandleKey(message))
+         {
+            message.Message = 0;
+            message.WParam = 0;
+            message.LParam = 0;
+            Marshal.StructureToPtr(message, pointer, fDeleteOld: false);
+         }
+      }
+      return CallNextHookEx(_hook, code, remove, pointer);
+   }
+
+
+
+   /// <summary>Does not translate text-control input; Ctrl+F remains a native window command.</summary>
+   private bool HandleKey(NativeMessage message)
+   {
+      if(message.WParam is 0x10 or 0x11 or 0x12 or 0x5B or 0x5C or >= 0xA0 and <= 0xA5)
+      {
+         return false;
+      }
+      bool control = IsDown(0x11);
+      bool shift = IsDown(0x10);
+      bool alt = IsDown(0x12);
+      bool windows = IsDown(0x5B) || IsDown(0x5C);
+      bool focused = _readingFocused();
+      bool nativeFind = message.WParam == 0x46 && control && !shift && !alt && !windows;
+      if((!focused && !nativeFind) || alt || windows)
+      {
+         _keys.Reset();
+         return false;
+      }
+      char character = control && shift && message.WParam is 0x26 or 0x28 ? message.WParam == 0x26 ? '\u2191' : '\u2193' : nativeFind ? 'f' : message.WParam == 0x1B ? '\u001B' : control && !shift && message.WParam is 0x44 or 0x55 or 0x42
+         ? char.ToLowerInvariant((char)message.WParam)
+         : TranslateKey((uint)message.WParam, (uint)(((nuint)message.LParam >> 16) & 0xFF));
+      var key = new Core.Navigation.ReaderKey(character, control, shift, alt, windows, ((nuint)message.LParam & 0x40000000) != 0);
+      Core.Navigation.ReaderCommand command = _keys.Resolve(key, focused, Environment.TickCount64);
+      return command == Core.Navigation.ReaderCommand.Prefix || command != Core.Navigation.ReaderCommand.None && _execute(command);
+   }
+
+
+
+   /// <summary>Uses the active layout with no dead-key-state mutation; only one ASCII reading character is considered.</summary>
+   private static unsafe char TranslateKey(uint key, uint scan)
+   {
+      byte* keyboard = stackalloc byte[256];
+      char* text = stackalloc char[8];
+      if(!GetKeyboardState(keyboard))
+      {
+         return '\0';
+      }
+      keyboard[0x11] = keyboard[0xA2] = keyboard[0xA3] = 0;
+      int count = ToUnicode(key, scan, keyboard, text, 8, 4);
+      return count == 1 && text[0] <= 0x7F ? text[0] : '\0';
+   }
+
+
+
+   /// <summary>Focus/page/window changes cannot carry a prefix into another document or text control.</summary>
+   public void Reset() => _keys.Reset();
+
+
+   /// <summary>Checks only command modifiers; no keyboard input or document content is retained.</summary>
+   private static bool IsDown(int key) => (GetKeyState(key) & 0x8000) != 0;
+
+
+
+   /// <summary>Removes the native callback before the owning window and browser are destroyed.</summary>
+   public void Dispose()
+   {
+      if(_hook != 0)
+      {
+         _ = UnhookWindowsHookEx(_hook);
+         _hook = 0;
+      }
+      GC.KeepAlive(_callback);
+   }
+
+
+
+   /// <summary>The Windows message layout, including its reserved trailing field.</summary>
+   [StructLayout(LayoutKind.Sequential)]
+   private struct NativeMessage
+   {
+      public nint Window;
+      public uint Message;
+      public nuint WParam;
+      public nint LParam;
+      public uint Time;
+      public int X;
+      public int Y;
+      public uint Private;
+   }
+
+
+
+   /// <summary>The current-thread hook callback uses the Windows calling convention.</summary>
+   [UnmanagedFunctionPointer(CallingConvention.Winapi)]
+   private delegate nint HookCallback(int code, nuint remove, nint pointer);
+
+
+
+   /// <summary>Registers the callback in the named thread.</summary>
+   [LibraryImport("user32.dll", SetLastError = true)]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static partial nint SetWindowsHookExW(int hook, nint callback, nint module, uint thread);
+
+
+
+   /// <summary>Preserves all unhandled message processing in the hook chain.</summary>
+   [LibraryImport("user32.dll")]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static partial nint CallNextHookEx(nint hook, int code, nuint remove, nint pointer);
+
+
+
+   /// <summary>Releases the thread callback registration.</summary>
+   [LibraryImport("user32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static partial bool UnhookWindowsHookEx(nint hook);
+
+
+
+   /// <summary>Limits delivery to the current UI thread.</summary>
+   [LibraryImport("kernel32.dll")]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static partial uint GetCurrentThreadId();
+
+
+
+   /// <summary>Requires this window to own foreground input.</summary>
+   [LibraryImport("user32.dll")]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static partial nint GetForegroundWindow();
+
+
+
+   /// <summary>Confirms that a browser child belongs to the app window.</summary>
+   [LibraryImport("user32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static partial bool IsChild(nint parent, nint child);
+
+
+
+   /// <summary>Reads the current message thread's modifier state.</summary>
+   [LibraryImport("user32.dll")]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static partial short GetKeyState(int key);
+
+
+
+   /// <summary>Reads only the owning UI thread's current modifier/layout state.</summary>
+   [LibraryImport("user32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static unsafe partial bool GetKeyboardState(byte* keyboard);
+
+
+
+   /// <summary>Translates using flag 4 so dead keys and normal native text input keep their original state.</summary>
+   [LibraryImport("user32.dll")]
+   [DefaultDllImportSearchPaths(DllImportSearchPath.System32)]
+   private static unsafe partial int ToUnicode(uint key, uint scan, byte* keyboard, char* text, int count, uint flags);
+}
diff --git a/src/MarkdownViewr.Windows/DocumentWatcher.cs b/src/MarkdownViewr.Windows/DocumentWatcher.cs
new file mode 100644
index 0000000..b9e0f27
--- /dev/null
+++ b/src/MarkdownViewr.Windows/DocumentWatcher.cs
@@ -0,0 +1,122 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Watches the containing directory so replacing or temporarily removing a file does not lose the subscription.</summary>
+internal sealed class DocumentWatcher : IDisposable
+{
+   private readonly Lock _sync = new();
+   private readonly string _path;
+   private readonly FileSystemWatcher _watcher;
+   private readonly Timer _timer;
+   private readonly Action _onChange;
+   private readonly Action _onError;
+   private bool _disposed;
+
+
+
+   /// <summary>Subscribes before returning; save bursts schedule one quiet-period notification.</summary>
+   public DocumentWatcher(string path, Action onChange, Action onError)
+   {
+      _path = Path.GetFullPath(path);
+      _onChange = onChange;
+      _onError = onError;
+      _watcher = new FileSystemWatcher(Path.GetDirectoryName(_path)!)
+      {
+         NotifyFilter = NotifyFilters.FileName | NotifyFilters.LastWrite | NotifyFilters.Size,
+      };
+      _timer = new Timer(Notify, null, Timeout.InfiniteTimeSpan, Timeout.InfiniteTimeSpan);
+      _watcher.Changed += Changed;
+      _watcher.Created += Changed;
+      _watcher.Deleted += Changed;
+      _watcher.Renamed += Renamed;
+      _watcher.Error += (_, _) =>
+      {
+         lock(_sync)
+         {
+            if(!_disposed)
+            {
+               _onError();
+               Schedule();
+            }
+         }
+      };
+      try
+      {
+         _watcher.EnableRaisingEvents = true;
+      }
+      catch
+      {
+         Dispose();
+         throw;
+      }
+   }
+
+
+
+   /// <summary>Only the selected path can request a refresh; unrelated files and nested folders are ignored.</summary>
+   private void Changed(object sender, FileSystemEventArgs args)
+   {
+      if(string.Equals(args.FullPath, _path, StringComparison.OrdinalIgnoreCase))
+      {
+         Schedule();
+      }
+   }
+
+
+
+   /// <summary>Both halves of an atomic replacement matter: the previous file may be moved away or a new file renamed into place.</summary>
+   private void Renamed(object sender, RenamedEventArgs args)
+   {
+      if(string.Equals(args.FullPath, _path, StringComparison.OrdinalIgnoreCase) ||
+         string.Equals(args.OldFullPath, _path, StringComparison.OrdinalIgnoreCase))
+      {
+         Schedule();
+      }
+   }
+
+
+
+   /// <summary>Resets the debounce clock for each event without running document work on a filesystem callback.</summary>
+   private void Schedule()
+   {
+      lock(_sync)
+      {
+         if(!_disposed)
+         {
+            _timer.Change(TimeSpan.FromMilliseconds(350), Timeout.InfiniteTimeSpan);
+         }
+      }
+   }
+
+
+
+   /// <summary>Invokes the dispatcher callback only while the subscription is alive.</summary>
+   private void Notify(object? state)
+   {
+      lock(_sync)
+      {
+         if(!_disposed)
+         {
+            _onChange();
+         }
+      }
+   }
+
+
+
+   /// <summary>Stops callbacks and releases directory/timer resources when changing documents or closing a window.</summary>
+   public void Dispose()
+   {
+      lock(_sync)
+      {
+         _disposed = true;
+         _timer.Dispose();
+         _watcher.Dispose();
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/EditorConfigurationDialog.cs b/src/MarkdownViewr.Windows/EditorConfigurationDialog.cs
new file mode 100644
index 0000000..226460a
--- /dev/null
+++ b/src/MarkdownViewr.Windows/EditorConfigurationDialog.cs
@@ -0,0 +1,211 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Editors;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Edits a copied native editor list; cancellation cannot mutate saved choices.</summary>
+internal sealed class EditorConfigurationDialog
+{
+   private readonly List<EditorConfiguration> _editors;
+   private readonly ListBox _list = new() { Name = "EditorList", Height = 220 };
+   private readonly TextBox _name = new() { Name = "EditorName", Header = "Editor name", MaxLength = 80 };
+   private readonly TextBox _path = new() { Name = "EditorPath", Header = "Editor executable path", MaxLength = 32767, MinWidth = 320 };
+   private readonly CheckBox _folder = new() { Name = "EditorFolder", Content = "Open the document's folder" };
+   private readonly TextBlock _error = new() { Name = "EditorError", TextWrapping = TextWrapping.Wrap };
+   private int _selected = -1;
+   private Guid _identity = Guid.NewGuid();
+   private bool _loading;
+   private bool _dirty;
+
+
+
+   /// <summary>Restores stable identities and native controls without requiring saved executables to remain installed.</summary>
+   public EditorConfigurationDialog(IEnumerable<EditorConfiguration> editors)
+   {
+      _editors = editors.ToList();
+      _list.SelectionChanged += (_, _) => ChangeSelection();
+      _name.TextChanged += (_, _) => _dirty |= !_loading;
+      _path.TextChanged += (_, _) => _dirty |= !_loading;
+      _folder.Checked += (_, _) => _dirty |= !_loading;
+      _folder.Unchecked += (_, _) => _dirty |= !_loading;
+      LoadEditor(_editors.Count > 0 ? 0 : -1);
+   }
+
+
+
+   /// <summary>Shows the editor manager on the owning window and returns only explicitly committed choices.</summary>
+   public async Task<EditorConfiguration[]?> ShowAsync(SettingsWindow host)
+   {
+      return await host.ShowEditorAsync("Configure editors", BuildContent(), "Save", ApplyCurrent) == ContentDialogResult.Primary ? _editors.ToArray() : null;
+   }
+
+
+
+   /// <summary>Provides named list actions and literal file/folder controls without exposing command-line flags.</summary>
+   private StackPanel BuildContent()
+   {
+      var actions = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 8 };
+      actions.Children.Add(Button("EditorAdd", "Add", AddEditor));
+      actions.Children.Add(Button("EditorRemove", "Remove", RemoveEditor));
+      actions.Children.Add(Button("EditorUp", "Move up", () => MoveEditor(-1)));
+      actions.Children.Add(Button("EditorDown", "Move down", () => MoveEditor(1)));
+      var panel = new StackPanel { Spacing = 8 };
+      panel.Children.Add(new TextBlock { Text = "Choose installed .exe editors. Each receives one literal document or folder argument. Save keeps the list; Cancel discards changes.", TextWrapping = TextWrapping.Wrap });
+      panel.Children.Add(_list);
+      panel.Children.Add(actions);
+      panel.Children.Add(_name);
+      panel.Children.Add(_path);
+      panel.Children.Add(_folder);
+      panel.Children.Add(_error);
+      return panel;
+   }
+
+
+
+   /// <summary>Identifies native manager actions for accessibility and actual hosted acceptance.</summary>
+   private static Button Button(string identity, string label, Action action)
+   {
+      var button = new Button { Name = identity, Content = label };
+      button.Click += (_, _) => action();
+      return button;
+   }
+
+
+
+   /// <summary>Retains edited fields before changing selection; invalid input keeps the current entry visible.</summary>
+   private void ChangeSelection()
+   {
+      if(_loading)
+      {
+         return;
+      }
+      int next = _list.SelectedIndex;
+      if(_dirty && !ApplyCurrent())
+      {
+         RefreshList();
+         return;
+      }
+      LoadEditor(next);
+   }
+
+
+
+   /// <summary>Projects saved order and folder labels into a native list with stable accessible identities.</summary>
+   private void RefreshList()
+   {
+      _loading = true;
+      _list.Items.Clear();
+      foreach(EditorConfiguration editor in _editors)
+      {
+         var item = new ListBoxItem { Content = editor.Name + (editor.OpensFolder ? " (folder)" : "") };
+         AutomationProperties.SetAutomationId(item, "EditorChoice:" + editor.Id);
+         _list.Items.Add(item);
+      }
+      _list.SelectedIndex = _selected;
+      _loading = false;
+   }
+
+
+
+   /// <summary>Loads one copied entry or an empty new choice without marking programmatic restoration as an edit.</summary>
+   private void LoadEditor(int index, bool empty = false)
+   {
+      _loading = true;
+      _selected = index;
+      EditorConfiguration? editor = index >= 0 ? _editors[index] : null;
+      _identity = editor?.Id ?? Guid.NewGuid();
+      _name.Text = editor?.Name ?? (empty ? "" : "Editor");
+      _path.Text = editor?.Executable ?? "";
+      _folder.IsChecked = editor?.OpensFolder ?? false;
+      _dirty = false;
+      _error.Text = "";
+      _loading = false;
+      RefreshList();
+   }
+
+
+
+   /// <summary>Validates changed entries before draft/save while allowing unchanged missing choices to be removed later.</summary>
+   private bool ApplyCurrent()
+   {
+      if(!_dirty && _selected >= 0 || _selected < 0 && _path.Text.Length == 0 && (_editors.Count > 0 || _name.Text.Length == 0))
+      {
+         return true;
+      }
+      var editor = new EditorConfiguration(_identity, _name.Text.Trim(), _path.Text, _folder.IsChecked == true);
+      if(!EditorLaunch.IsExecutablePath(editor.Executable) || !File.Exists(editor.Executable))
+      {
+         _error.Text = "Enter the full path of an existing .exe file.";
+         return false;
+      }
+      if(!EditorConfiguration.IsValid(editor))
+      {
+         _error.Text = "Enter an editor name of 1–80 characters without control characters.";
+         return false;
+      }
+      if(_selected >= 0)
+      {
+         _editors[_selected] = editor;
+      }
+      else if(_editors.Count < EditorConfiguration.MaximumEditors)
+      {
+         _selected = _editors.Count;
+         _editors.Add(editor);
+      }
+      else
+      {
+         _error.Text = "Keep no more than 32 editors.";
+         return false;
+      }
+      _dirty = false;
+      RefreshList();
+      return true;
+   }
+
+
+
+   /// <summary>Adds a new draft after retaining the current choice; no preference is written until Save.</summary>
+   private void AddEditor()
+   {
+      if((_path.Text.Length == 0 && _selected < 0 || ApplyCurrent()) && _editors.Count < EditorConfiguration.MaximumEditors)
+      {
+         LoadEditor(-1);
+      }
+   }
+
+
+
+   /// <summary>Removes only the chosen identity, including an uninstalled editor; the last removal can be saved as an empty list.</summary>
+   private void RemoveEditor()
+   {
+      if(_selected < 0)
+      {
+         return;
+      }
+      _editors.RemoveAt(_selected);
+      LoadEditor(_editors.Count > 0 ? Math.Min(_selected, _editors.Count - 1) : -1, empty: true);
+   }
+
+
+
+   /// <summary>Moves a retained choice by one row, preserving its ID and file/folder mode.</summary>
+   private void MoveEditor(int offset)
+   {
+      int target = _selected + offset;
+      if(_selected < 0 || target < 0 || target >= _editors.Count || !ApplyCurrent())
+      {
+         return;
+      }
+      (_editors[_selected], _editors[target]) = (_editors[target], _editors[_selected]);
+      LoadEditor(target);
+   }
+}
diff --git a/src/MarkdownViewr.Windows/FileTypeRegistration.cs b/src/MarkdownViewr.Windows/FileTypeRegistration.cs
new file mode 100644
index 0000000..bc8a689
--- /dev/null
+++ b/src/MarkdownViewr.Windows/FileTypeRegistration.cs
@@ -0,0 +1,137 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Security.Cryptography;
+using System.Text;
+using Microsoft.Win32;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Per-user Open With registrations have channel/install ownership and never change Windows default selections.</summary>
+internal sealed class FileTypeRegistration
+{
+   private static readonly string[] s_extensions = [".md", ".markdown", ".mdown", ".mkd", ".txt"];
+   private readonly RegistryKey _user;
+   private readonly string _command;
+   private readonly string _capabilities;
+   private readonly string _name;
+   private readonly string _icon;
+
+
+
+   /// <summary>Quoted literal installed paths remain valid in folders containing spaces; each install/channel owns its own ProgID.</summary>
+   internal FileTypeRegistration(RegistryKey user, string executable, string channel)
+   {
+      ArgumentNullException.ThrowIfNull(user);
+      if(channel is not ("stable" or "dev") || !Path.IsPathFullyQualified(executable) || executable.Any(character => char.IsControl(character) || character == '"'))
+      {
+         throw new ArgumentException("A supported channel and absolute installed executable path are required.", nameof(executable));
+      }
+      executable = Path.GetFullPath(executable);
+      _user = user;
+      _name = string.Equals(channel, "dev", StringComparison.Ordinal) ? "MarkdownViewr (Development)" : "MarkdownViewr";
+      string identity = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(executable.ToUpperInvariant())))[..24];
+      ProgId = "KofTwentyTwo.MarkdownViewr." + channel + "." + identity;
+      _capabilities = "Software\\KofTwentyTwo\\MarkdownViewr\\FileAssociations\\" + ProgId + "\\Capabilities";
+      _command = "\"" + executable + "\" \"%1\"";
+      _icon = "\"" + executable + "\",0";
+   }
+
+
+
+   /// <summary>The stable owner identity is safe as a registry value/subkey name and does not include personal paths.</summary>
+   internal string ProgId { get; }
+
+
+
+   /// <summary>Returns the OS settings route only for this unchanged registration; choosing defaults remains a Windows user action.</summary>
+   internal Uri? GetDefaultAppsUri(bool supportsAppPage)
+   {
+      using RegistryKey? applications = _user.OpenSubKey("Software\\RegisteredApplications");
+      using RegistryKey? command = _user.OpenSubKey("Software\\Classes\\" + ProgId + "\\shell\\open\\command");
+      if(!string.Equals(applications?.GetValue(ProgId) as string, _capabilities, StringComparison.Ordinal) ||
+         !string.Equals(command?.GetValue("") as string, _command, StringComparison.Ordinal))
+      {
+         return null;
+      }
+      return new Uri(supportsAppPage ? "ms-settings:defaultapps?registeredAppUser=" + Uri.EscapeDataString(ProgId) : "ms-settings:defaultapps");
+   }
+
+
+
+   /// <summary>Only this unchanged registered installation is the default; an unavailable native query remains unknown.</summary>
+   internal bool? IsDefaultMarkdownViewer(string? effectiveProgId)
+   {
+      if(GetDefaultAppsUri(supportsAppPage: false) is null)
+      {
+         return false;
+      }
+      return effectiveProgId is null ? null : string.Equals(effectiveProgId, ProgId, StringComparison.OrdinalIgnoreCase);
+   }
+
+
+
+   /// <summary>Advertises the viewer to Open With and Default Apps without setting extension defaults or touching UserChoice.</summary>
+   internal void Register()
+   {
+      using RegistryKey program = _user.CreateSubKey("Software\\Classes\\" + ProgId);
+      program.SetValue("", _name + " document");
+      program.SetValue("FriendlyAppName", _name);
+      program.SetValue("AllowSilentDefaultTakeOver", Array.Empty<byte>(), RegistryValueKind.None);
+      using(RegistryKey icon = program.CreateSubKey("DefaultIcon"))
+      {
+         icon.SetValue("", _icon);
+      }
+      using(RegistryKey open = program.CreateSubKey("shell\\open"))
+      {
+         open.SetValue("MultiSelectModel", "Document");
+         using RegistryKey command = open.CreateSubKey("command");
+         command.SetValue("", _command);
+      }
+      using RegistryKey capabilities = _user.CreateSubKey(_capabilities);
+      capabilities.SetValue("ApplicationName", _name);
+      capabilities.SetValue("ApplicationDescription", "Read Markdown and plain-text documents.");
+      capabilities.SetValue("ApplicationIcon", _icon);
+      using RegistryKey types = capabilities.CreateSubKey("FileAssociations");
+      foreach(string extension in s_extensions)
+      {
+         types.SetValue(extension, ProgId);
+         using RegistryKey openWith = _user.CreateSubKey("Software\\Classes\\" + extension + "\\OpenWithProgids");
+         openWith.SetValue(ProgId, "");
+      }
+      using RegistryKey applications = _user.CreateSubKey("Software\\RegisteredApplications");
+      applications.SetValue(ProgId, _capabilities);
+   }
+
+
+
+   /// <summary>Removes only an unchanged registration owned by this exact executable/channel; sibling and user entries survive.</summary>
+   internal void Unregister()
+   {
+      string programPath = "Software\\Classes\\" + ProgId;
+      using(RegistryKey? command = _user.OpenSubKey(programPath + "\\shell\\open\\command"))
+      {
+         if(!string.Equals(command?.GetValue("") as string, _command, StringComparison.Ordinal))
+         {
+            return;
+         }
+      }
+      foreach(string extension in s_extensions)
+      {
+         using RegistryKey? openWith = _user.OpenSubKey("Software\\Classes\\" + extension + "\\OpenWithProgids", writable: true);
+         openWith?.DeleteValue(ProgId, throwOnMissingValue: false);
+      }
+      using(RegistryKey? applications = _user.OpenSubKey("Software\\RegisteredApplications", writable: true))
+      {
+         if(string.Equals(applications?.GetValue(ProgId) as string, _capabilities, StringComparison.Ordinal))
+         {
+            applications!.DeleteValue(ProgId, throwOnMissingValue: false);
+         }
+      }
+      _user.DeleteSubKeyTree(programPath, throwOnMissingSubKey: false);
+      _user.DeleteSubKeyTree("Software\\KofTwentyTwo\\MarkdownViewr\\FileAssociations\\" + ProgId, throwOnMissingSubKey: false);
+   }
+}
diff --git a/src/MarkdownViewr.Windows/InstalledFileTypes.cs b/src/MarkdownViewr.Windows/InstalledFileTypes.cs
new file mode 100644
index 0000000..9a1bce2
--- /dev/null
+++ b/src/MarkdownViewr.Windows/InstalledFileTypes.cs
@@ -0,0 +1,91 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+using Microsoft.Win32;
+using Velopack.Locators;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Only real per-user installed builds register file types; builds and portable previews leave Windows associations alone.</summary>
+internal static partial class InstalledFileTypes
+{
+   /// <summary>Refreshes registrations at installation/update using the stable current directory rather than version folders.</summary>
+   internal static void Register() => Change(uninstall: false);
+
+
+
+   /// <summary>Uninstall removes only that installation/channel's unchanged registrations.</summary>
+   internal static void Unregister() => Change(uninstall: true);
+
+
+
+   /// <summary>Only an installed, unchanged registration can open its default-selection page; older Windows uses the general page.</summary>
+   internal static Uri? GetDefaultAppsUri()
+   {
+      FileTypeRegistration? registration = CurrentRegistration();
+      // Windows 11 23H2 guarantees the app-specific route. Earlier builds retain general Default Apps guidance.
+      return registration?.GetDefaultAppsUri(OperatingSystem.IsWindowsVersionAtLeast(10, 0, 22631));
+   }
+
+
+
+   /// <summary>Reads Windows' effective .md ProgID and verifies exact channel/install ownership; registration alone is not a selected default.</summary>
+   internal static bool? IsDefaultMarkdownViewer()
+   {
+      FileTypeRegistration? registration = CurrentRegistration();
+      if(registration is null)
+      {
+         return false;
+      }
+      return registration.IsDefaultMarkdownViewer(ShellFileAssociations.QueryProgId(".md"));
+   }
+
+
+
+   /// <summary>Velopack fast callbacks run before XAML; this path uses only the registry and bounded local metadata.</summary>
+   private static void Change(bool uninstall)
+   {
+      FileTypeRegistration? registration = CurrentRegistration();
+      if(registration is null)
+      {
+         return;
+      }
+      if(uninstall)
+      {
+         registration.Unregister();
+      }
+      else
+      {
+         registration.Register();
+      }
+      NotifyAssociationChanged(0x08000000, 0, IntPtr.Zero, IntPtr.Zero);
+   }
+
+
+
+   /// <summary>Derives channel and stable executable from the actual installer locator; portable copies never acquire registrations.</summary>
+   private static FileTypeRegistration? CurrentRegistration()
+   {
+      IVelopackLocator locator = VelopackLocator.Current;
+      if(locator.CurrentlyInstalledVersion is null || locator.IsPortable || string.IsNullOrEmpty(locator.RootAppDir))
+      {
+         return null;
+      }
+      string executable = Path.Combine(locator.RootAppDir, "current", "MarkdownViewr.Windows.exe");
+      if(!File.Exists(executable))
+      {
+         throw new IOException("The installed application executable was not found.");
+      }
+      return new FileTypeRegistration(Registry.CurrentUser, executable, locator.Channel ?? "stable");
+   }
+
+
+
+   /// <summary>Refreshes Explorer's cached associations after an owned registration changes.</summary>
+   [LibraryImport("shell32.dll", EntryPoint = "SHChangeNotify")]
+   private static partial void NotifyAssociationChanged(uint events, uint flags, IntPtr item1, IntPtr item2);
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Appearance.cs b/src/MarkdownViewr.Windows/MainWindow.Appearance.cs
new file mode 100644
index 0000000..4a943c8
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Appearance.cs
@@ -0,0 +1,39 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Applies deliberately saved reader-wide appearance independently of theme and print data.</summary>
+public sealed partial class MainWindow
+{
+   /// <summary>Accepts global preferences as the new baseline; later window-local saves cannot resurrect older appearance fields.</summary>
+   internal async Task ApplyReadingAppearanceAsync(Core.Themes.ReadingAppearance appearance)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      _settings.ContentWidthEnabled = _lastSavedSettings.ContentWidthEnabled = appearance.LimitWidth;
+      _settings.ContentWidthPx = _lastSavedSettings.ContentWidthPx = appearance.WidthPixels;
+      _settings.GlobalCss = _lastSavedSettings.GlobalCss = appearance.GlobalCss;
+      _settingsWindow?.UpdateAppearance(appearance);
+      try
+      {
+         _browserInitialization ??= _browser.InitializeAsync();
+         await _browserInitialization;
+         await _browser.ApplyAppearanceAsync(appearance);
+      }
+      catch(System.Runtime.InteropServices.COMException exception)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "The reader appearance could not be displayed.";
+            App.Log.Error("The reader appearance could not be displayed.", exception);
+         }
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Documents.cs b/src/MarkdownViewr.Windows/MainWindow.Documents.cs
new file mode 100644
index 0000000..53f5ef9
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Documents.cs
@@ -0,0 +1,97 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Exposes deliberate native window and recent-file commands without giving document content activation access.</summary>
+public sealed partial class MainWindow
+{
+   private string? _initialDocumentPath;
+   private Core.AppSettings _lastSavedSettings;
+   private bool _activationError;
+
+
+
+   /// <summary>Rejected startup payloads produce a fixed native message without disclosing a path in logs.</summary>
+   internal void ReportActivationFailure()
+   {
+      _activationError = true;
+      StatusText.Text = "One or more startup file paths could not be opened.";
+   }
+
+
+
+   /// <summary>The successfully opened document or literal pending startup path; used only to focus duplicate requests.</summary>
+   internal string? DocumentPath => _documentPath ?? _initialDocumentPath;
+
+
+
+   /// <summary>A document-created link may focus only a reader whose committed physical snapshot belongs to its authorized folder.</summary>
+   internal bool IsDocumentInside(string physicalRoot) => _documentPhysicalRoot?.StartsWith(physicalRoot, StringComparison.Ordinal) == true;
+
+
+
+   /// <summary>Creates a genuinely blank window rather than re-reading the original process argument.</summary>
+   private void NewWindow_Click(object sender, RoutedEventArgs args) => ((App)Application.Current).NewDocumentWindow();
+
+
+
+   /// <summary>Closes just this native reader; sibling document watchers and zoom remain alive.</summary>
+   private void CloseWindow_Click(object sender, RoutedEventArgs args) => Close();
+
+
+
+   /// <summary>Rebuilds the private recent menu from the latest stored history, including a deliberate clear command.</summary>
+   internal void RefreshRecentDocuments()
+   {
+      RecentDocumentsMenu.Items.Clear();
+      string[] paths = AppIdentity.SettingsStore.Load().RecentFiles;
+      for(int index = 0; index < paths.Length; index++)
+      {
+         var item = new MenuFlyoutItem { Text = Path.GetFileName(paths[index]), Tag = paths[index] };
+         Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(item, "RecentDocument:" + index);
+         item.Click += RecentDocument_Click;
+         RecentDocumentsMenu.Items.Add(item);
+      }
+      if(paths.Length == 0)
+      {
+         RecentDocumentsMenu.Items.Add(new MenuFlyoutItem { Text = "No recent files", IsEnabled = false });
+      }
+      else
+      {
+         RecentDocumentsMenu.Items.Add(new MenuFlyoutSeparator());
+         var clear = new MenuFlyoutItem { Text = "Clear recent files" };
+         Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(clear, "ClearRecentDocuments");
+         clear.Click += ClearRecentDocuments_Click;
+         RecentDocumentsMenu.Items.Add(clear);
+      }
+   }
+
+
+
+   /// <summary>Only an explicit native menu choice can activate a stored path; missing documents keep existing readers intact.</summary>
+   private async void RecentDocument_Click(object sender, RoutedEventArgs args)
+   {
+      if(sender is FrameworkElement { Tag: string path })
+      {
+         await ((App)Application.Current).OpenDocumentAsync(this, path);
+      }
+   }
+
+
+
+   /// <summary>Deletes history entries rather than files and reports an unsuccessful settings save.</summary>
+   private void ClearRecentDocuments_Click(object sender, RoutedEventArgs args)
+   {
+      if(!((App)Application.Current).ClearRecentDocuments())
+      {
+         StatusText.Text = "Could not clear recent files.";
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Editor.cs b/src/MarkdownViewr.Windows/MainWindow.Editor.cs
new file mode 100644
index 0000000..aeee634
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Editor.cs
@@ -0,0 +1,114 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Diagnostics;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Routes deliberate native editor commands through a literal process argument boundary.</summary>
+public sealed partial class MainWindow
+{
+   /// <summary>One named editor is a direct action; multiple editors expose their saved order through native choices.</summary>
+   private void RefreshEditorCommands()
+   {
+      Core.Editors.EditorConfiguration[] editors = _settings.ConfiguredEditors;
+      OpenEditorMenuItem.Visibility = editors.Length > 1 ? Visibility.Collapsed : Visibility.Visible;
+      OpenEditorMenuItem.IsEnabled = _documentPath is not null && editors.Length == 1;
+      OpenEditorMenuItem.Text = editors.Length == 1 ? "Open in " + editors[0].Name + (editors[0].OpensFolder ? " (folder)" : "") : "Open in editor";
+      OpenEditorChoices.Visibility = editors.Length > 1 ? Visibility.Visible : Visibility.Collapsed;
+      OpenEditorChoices.IsEnabled = _documentPath is not null;
+      OpenEditorChoices.Items.Clear();
+      foreach(Core.Editors.EditorConfiguration editor in editors)
+      {
+         var item = new MenuFlyoutItem { Text = editor.Name + (editor.OpensFolder ? " (folder)" : ""), Tag = editor.Id };
+         Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(item, "EditorLaunch:" + editor.Id);
+         item.Click += OpenEditor_Click;
+         OpenEditorChoices.Items.Add(item);
+      }
+      RefreshToolbarEditors();
+   }
+
+
+
+   /// <summary>Changes remain in the dialog's copied list until the user's validated Save.</summary>
+   private async Task ConfigureEditorAsync()
+   {
+      Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+      var editor = new EditorConfigurationDialog(before.ConfiguredEditors);
+      Core.Editors.EditorConfiguration[]? choices = await editor.ShowAsync(ConfigurationPage);
+      if(choices is null || _closed)
+      {
+         return;
+      }
+      Core.AppSettings draft = Core.SettingsChanges.Copy(before);
+      draft.ConfiguredEditors = choices;
+      draft.ExternalEditor = choices.FirstOrDefault()?.Executable ?? "";
+      Core.AppSettings merged = Core.SettingsChanges.Merge(AppIdentity.SettingsStore.Load(), before, draft);
+      if(!AppIdentity.SettingsStore.Save(merged))
+      {
+         StatusText.Text = "Could not save editor configuration.";
+         return;
+      }
+      ((App)Application.Current).ApplyEditorSettings(merged.ConfiguredEditors);
+      StatusText.Text = "Editors configured.";
+   }
+
+
+
+   /// <summary>A shared editor save updates both this reader and its save baseline before any later local preference change.</summary>
+   internal void ApplyEditorSettings(Core.Editors.EditorConfiguration[] choices)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      _settings.ConfiguredEditors = choices.ToArray();
+      _lastSavedSettings.ConfiguredEditors = choices.ToArray();
+      _settings.ExternalEditor = _lastSavedSettings.ExternalEditor = choices.FirstOrDefault()?.Executable ?? "";
+      RefreshEditorCommands();
+   }
+
+
+
+   /// <summary>Launches only the selected executable and never interpolates Markdown or a shell command.</summary>
+   private void OpenEditor_Click(object sender, RoutedEventArgs e)
+   {
+      if(_closed || _documentPath is null)
+      {
+         return;
+      }
+      Core.Editors.EditorConfiguration? editor = sender is FrameworkElement { Tag: Guid identity }
+         ? _settings.ConfiguredEditors.FirstOrDefault(choice => choice.Id == identity)
+         : _settings.ConfiguredEditors.FirstOrDefault();
+      if(!Core.Editors.EditorConfiguration.IsValid(editor))
+      {
+         return;
+      }
+      if(!File.Exists(editor!.Executable))
+      {
+         StatusText.Text = "The configured editor is missing. Use File → Settings → Editors to choose an installed executable.";
+         return;
+      }
+      if(!File.Exists(_documentPath))
+      {
+         StatusText.Text = "The document is missing. Restore it before opening the editor.";
+         return;
+      }
+      try
+      {
+         using var process = Process.Start(Core.Editors.EditorLaunch.Create(editor.Executable, _documentPath, editor.OpensFolder));
+         StatusText.Text = process is not null ? editor.OpensFolder ? "Opened document folder in the configured editor." : "Opened document in the configured editor." : "The configured editor did not start.";
+         App.Log.Info("Requested a document launch in the configured editor.");
+      }
+      catch(Exception exception) when(exception is System.ComponentModel.Win32Exception or IOException or UnauthorizedAccessException or ArgumentException or InvalidOperationException)
+      {
+         StatusText.Text = "Could not start the configured editor. Use File → Settings → Editors to check its executable.";
+         App.Log.Warning("The configured editor could not be started.");
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Extensions.cs b/src/MarkdownViewr.Windows/MainWindow.Extensions.cs
new file mode 100644
index 0000000..2162b5f
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Extensions.cs
@@ -0,0 +1,51 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Owns native Markdown preferences; document content cannot change rendering options.</summary>
+public sealed partial class MainWindow
+{
+   /// <summary>Loads independent saved toggles without modifying a sibling window's rendering snapshot.</summary>
+   private void InitializeMarkdownExtensions()
+   {
+      HighlightExtension.IsChecked = _settings.RenderHighlight;
+      SuperscriptExtension.IsChecked = _settings.RenderSuperscript;
+      SubscriptExtension.IsChecked = _settings.RenderSubscript;
+      UnderlineExtension.IsChecked = _settings.RenderUnderline;
+   }
+
+
+
+   /// <summary>Persists one deliberately changed option and rerenders through the ordinary guarded reload path.</summary>
+   private async void MarkdownExtension_Click(object sender, RoutedEventArgs e)
+   {
+      var item = (ToggleMenuFlyoutItem)sender;
+      switch((string)item.Tag)
+      {
+         case "Highlight":
+            _settings.RenderHighlight = item.IsChecked;
+            break;
+         case "Superscript":
+            _settings.RenderSuperscript = item.IsChecked;
+            break;
+         case "Subscript":
+            _settings.RenderSubscript = item.IsChecked;
+            break;
+         case "Underline":
+            _settings.RenderUnderline = item.IsChecked;
+            break;
+      }
+      Save();
+      if(_documentPath is not null)
+      {
+         await OpenDocumentAsync(_documentPath, reload: true);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Find.cs b/src/MarkdownViewr.Windows/MainWindow.Find.cs
new file mode 100644
index 0000000..5c6785a
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Find.cs
@@ -0,0 +1,247 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.UI.Xaml.Input;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Coordinates native find controls with literal source selection and the browser's own finder.</summary>
+public sealed partial class MainWindow
+{
+   private Microsoft.UI.Dispatching.DispatcherQueueTimer? _findDelay;
+   private Core.Documents.DocumentFind? _find;
+   private int _findGeneration;
+   private bool _finding;
+   private bool _findQueued;
+
+
+
+   /// <summary>Debounces typing and refreshes the query only after the current page has finished restoration.</summary>
+   private void InitializeFind()
+   {
+      _findDelay = DispatcherQueue.CreateTimer();
+      _findDelay.Interval = TimeSpan.FromMilliseconds(200);
+      _findDelay.IsRepeating = false;
+      _findDelay.Tick += async (_, _) => await RunFindAsync();
+      _browser.DocumentReady += (_, _) => QueueFind();
+      _browser.FindCountChanged += (_, _) =>
+      {
+         if(!_finding && !_closed && _find is { } find && string.Equals(find.Query, FindText.Text, StringComparison.Ordinal) && FindBar.Visibility == Visibility.Visible)
+         {
+            find.SetRenderedCount(_browser.FindCount);
+            RefreshFindResult();
+         }
+      };
+   }
+
+
+
+   /// <summary>The menu invokes the same command as the always-loaded window accelerator.</summary>
+   private void Find_Click(object sender, RoutedEventArgs e) => OpenFind();
+
+
+
+   /// <summary>Owns Ctrl+F independently of the closed menu flyout.</summary>
+   private void Find_Invoked(KeyboardAccelerator sender, KeyboardAcceleratorInvokedEventArgs args)
+   {
+      args.Handled = true;
+      OpenFind();
+   }
+
+
+
+   /// <summary>Opens one native find toolbar and keeps keyboard focus in its text field.</summary>
+   private void OpenFind()
+   {
+      if(_closed)
+      {
+         return;
+      }
+      FindBar.Visibility = Visibility.Visible;
+      bool focused = FindText.Focus(FocusState.Programmatic);
+      if(string.Equals(Environment.GetEnvironmentVariable("MARKDOWNVIEWR_INPUT_TRACE"), "1", StringComparison.Ordinal))
+      {
+         App.Log.Info(FormattableString.Invariant($"Input trace: find toolbar opened; focus accepted={focused}."));
+      }
+      FindText.SelectAll();
+      QueueFind();
+   }
+
+
+
+   /// <summary>Typing is literal; only the latest query and committed snapshot can update the result.</summary>
+   private void FindText_Changed(object sender, TextChangedEventArgs e) => QueueFind();
+
+
+
+   /// <summary>Supersedes pending results without launching parallel browser searches.</summary>
+   private void QueueFind()
+   {
+      _findGeneration++;
+      if(_closed || _findDelay is null || FindBar.Visibility != Visibility.Visible)
+      {
+         return;
+      }
+      _find = null;
+      FindCountText.Text = "Searching…";
+      FindNextButton.IsEnabled = false;
+      FindPreviousButton.IsEnabled = false;
+      _findDelay.Stop();
+      _findDelay.Start();
+   }
+
+
+
+   /// <summary>Serializes native sessions and discards old query/document completions.</summary>
+   private async Task RunFindAsync()
+   {
+      if(_closed || FindBar.Visibility != Visibility.Visible || !_browser.IsReady)
+      {
+         return;
+      }
+      if(_finding)
+      {
+         _findQueued = true;
+         return;
+      }
+      _finding = true;
+      try
+      {
+         do
+         {
+            _findQueued = false;
+            int generation = _findGeneration;
+            string snapshot = _sourceMarkdown;
+            if(FindText.Text.Length > 0)
+            {
+               ExpandSourceForFind();
+            }
+            var find = new Core.Documents.DocumentFind(snapshot, FindText.Text);
+            if(find.Query.Length == 0)
+            {
+               await _browser.EndFindAsync();
+            }
+            else
+            {
+               find.SetRenderedCount(await _browser.FindAsync(find.Query));
+            }
+            if(!_closed && generation == _findGeneration && string.Equals(snapshot, _sourceMarkdown, StringComparison.Ordinal) && FindBar.Visibility == Visibility.Visible && _browser.IsReady)
+            {
+               _find = find;
+            }
+            else if(!_closed && FindBar.Visibility == Visibility.Visible)
+            {
+               _findQueued = true;
+            }
+            else
+            {
+               await _browser.EndFindAsync();
+            }
+         } while(_findQueued && !_closed && FindBar.Visibility == Visibility.Visible && _browser.IsReady);
+      }
+      finally
+      {
+         _finding = false;
+         if(!_closed)
+         {
+            RefreshFindResult();
+         }
+      }
+   }
+
+
+
+   /// <summary>Displays one paired count and selects only a valid literal source range.</summary>
+   private void RefreshFindResult()
+   {
+      int current = _find?.Current ?? 0;
+      int total = _find?.Total ?? 0;
+      FindCountText.Text = FormattableString.Invariant($"{current} of {total}");
+      FindNextButton.IsEnabled = total > 0 && !_finding;
+      FindPreviousButton.IsEnabled = total > 0 && !_finding;
+      if(_settings.ShowSource && _find?.SourceSelection is { } original && _sourceDocument?.GetDisplayRange(original.Start, original.Length) is { } selection)
+      {
+         SourceText.Select(selection.Start, selection.Length);
+         HoldSourceSync();
+      }
+      else
+      {
+         SourceText.Select(0, 0);
+      }
+   }
+
+
+
+   /// <summary>Moves one paired occurrence; browser-only and source-only tails retain their own valid selections.</summary>
+   private void MoveFind(bool forward)
+   {
+      if(_finding || _find is not { Total: > 0 } find)
+      {
+         return;
+      }
+      if(forward)
+      {
+         find.Next();
+      }
+      else
+      {
+         find.Previous();
+      }
+      if(find.Current <= _browser.FindCount)
+      {
+         _browser.MoveFind(forward);
+      }
+      RefreshFindResult();
+   }
+
+
+
+   /// <summary>The native next button wraps through the same paired occurrence list.</summary>
+   private void FindNext_Click(object sender, RoutedEventArgs e) => MoveFind(forward: true);
+
+
+
+   /// <summary>The native previous button wraps from the first paired occurrence to the last.</summary>
+   private void FindPrevious_Click(object sender, RoutedEventArgs e) => MoveFind(forward: false);
+
+
+
+   /// <summary>Escape closes find; Enter and Shift+Enter move through occurrences without entering a newline.</summary>
+   private async void FindText_KeyDown(object sender, KeyRoutedEventArgs e)
+   {
+      if(e.Key == global::Windows.System.VirtualKey.Escape)
+      {
+         e.Handled = true;
+         await CloseFindAsync();
+      }
+      else if(e.Key == global::Windows.System.VirtualKey.Enter)
+      {
+         e.Handled = true;
+         bool shift = (Microsoft.UI.Input.InputKeyboardSource.GetKeyStateForCurrentThread(global::Windows.System.VirtualKey.Shift) & global::Windows.UI.Core.CoreVirtualKeyStates.Down) != global::Windows.UI.Core.CoreVirtualKeyStates.None;
+         MoveFind(forward: !shift);
+      }
+   }
+
+
+
+   /// <summary>The close button clears highlights and restores pre-search section choices.</summary>
+   private async void FindClose_Click(object sender, RoutedEventArgs e) => await CloseFindAsync();
+
+
+
+   /// <summary>Invalidates pending queries before clearing both surfaces.</summary>
+   private async Task CloseFindAsync()
+   {
+      _findGeneration++;
+      _findDelay?.Stop();
+      FindBar.Visibility = Visibility.Collapsed;
+      _find = null;
+      SourceText.Select(0, 0);
+      await _browser.EndFindAsync();
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Footer.cs b/src/MarkdownViewr.Windows/MainWindow.Footer.cs
new file mode 100644
index 0000000..b4f16ff
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Footer.cs
@@ -0,0 +1,110 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Snapshot metadata and stale state remain local to each reader; only a deliberate click opens Explorer.</summary>
+public sealed partial class MainWindow
+{
+   private readonly DispatcherTimer _footerPoll = new() { Interval = TimeSpan.FromSeconds(2) };
+   private DateTime _loadedModifiedUtc;
+   private long _loadedByteLength;
+
+
+
+   /// <summary>A light metadata poll covers missed directory notifications without reading or automatically reopening document content.</summary>
+   private void InitializeDocumentFooter()
+   {
+      _footerPoll.Tick += (_, _) => CheckDocumentFooter();
+      _footerPoll.Start();
+   }
+
+
+
+   /// <summary>Successful reads commit timestamp and length together with the displayed document; failed reloads retain this snapshot.</summary>
+   private void CommitDocumentFooter(DocumentFiles files)
+   {
+      _loadedModifiedUtc = files.ModifiedUtc;
+      _loadedByteLength = files.ByteLength;
+      FileModifiedText.Text = "Modified " + files.ModifiedUtc.ToLocalTime().ToString("g", CultureInfo.CurrentCulture);
+      ToolTipService.SetToolTip(FileModifiedText, "Displayed version last modified: " + files.ModifiedUtc.ToLocalTime().ToString("F", CultureInfo.CurrentCulture));
+      FileModifiedText.Visibility = Visibility.Visible;
+      FileStaleButton.Visibility = Visibility.Collapsed;
+      OpenDocumentFolderButton.IsEnabled = true;
+      CheckDocumentFooter();
+   }
+
+
+
+   /// <summary>Watcher notifications and failed reloads expose an actionable stale indicator until a successful snapshot commit.</summary>
+   private void MarkDocumentStale()
+   {
+      if(_closed || _documentPath is null)
+      {
+         return;
+      }
+      bool exists = File.Exists(_documentPath);
+      FileStaleButton.Content = exists ? "Changes detected — reload" : "File unavailable — reload";
+      FileStaleButton.Visibility = Visibility.Visible;
+      RefreshEditorCommands();
+   }
+
+
+
+   /// <summary>Metadata changes mark the displayed copy stale; a later metadata match never clears an unsuccessful reload.</summary>
+   private void CheckDocumentFooter()
+   {
+      if(_closed || _documentPath is null)
+      {
+         return;
+      }
+      try
+      {
+         var file = new FileInfo(_documentPath);
+         if(!file.Exists || file.LastWriteTimeUtc != _loadedModifiedUtc || file.Length != _loadedByteLength)
+         {
+            MarkDocumentStale();
+         }
+         OpenDocumentFolderButton.IsEnabled = Directory.Exists(Path.GetDirectoryName(_documentPath));
+      }
+      catch(Exception exception) when(exception is IOException or UnauthorizedAccessException)
+      {
+         MarkDocumentStale();
+      }
+   }
+
+
+
+   /// <summary>Launches a literal containing directory through the Windows folder API, with no shell arguments or authored commands.</summary>
+   private async void OpenDocumentFolder_Click(object sender, RoutedEventArgs e)
+   {
+      if(_closed || _documentPath is null)
+      {
+         return;
+      }
+      try
+      {
+         string directory = Path.GetDirectoryName(_documentPath)!;
+         global::Windows.Storage.StorageFolder folder = await global::Windows.Storage.StorageFolder.GetFolderFromPathAsync(directory);
+         if(!await global::Windows.System.Launcher.LaunchFolderAsync(folder) && !_closed)
+         {
+            StatusText.Text = "The document folder could not be opened.";
+         }
+      }
+      catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or ArgumentException or System.Runtime.InteropServices.COMException)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "The document folder is unavailable.";
+         }
+         App.Log.Warning(FormattableString.Invariant($"The document folder could not be opened ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Help.cs b/src/MarkdownViewr.Windows/MainWindow.Help.cs
new file mode 100644
index 0000000..83ff829
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Help.cs
@@ -0,0 +1,45 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Opens only the app's fixed public Help destinations after deliberate native menu actions.</summary>
+public sealed partial class MainWindow
+{
+   /// <summary>Shows this Windows app's repository in the user's default browser.</summary>
+   private async void GitHub_Click(object sender, RoutedEventArgs args) => await OpenHelpPageAsync(AppIdentity.Info.RepositoryUrl!);
+
+
+
+   /// <summary>Offers the app's issue templates without sending private document data.</summary>
+   private async void SubmitIssue_Click(object sender, RoutedEventArgs args) => await OpenHelpPageAsync(AppIdentity.IssuesUrl);
+
+
+
+   /// <summary>Opens community questions and tips in this app's repository.</summary>
+   private async void CommunitySupport_Click(object sender, RoutedEventArgs args) => await OpenHelpPageAsync(AppIdentity.SupportUrl);
+
+
+
+   /// <summary>A missing browser or OS launch failure is visible; no document path/content is included.</summary>
+   private async Task OpenHelpPageAsync(Uri target)
+   {
+      try
+      {
+         if(!await global::Windows.System.Launcher.LaunchUriAsync(target))
+         {
+            StatusText.Text = "The link could not be opened. Check your default browser.";
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or InvalidOperationException or ArgumentException)
+      {
+         StatusText.Text = "The link could not be opened. Check your default browser.";
+         App.Log.Warning(FormattableString.Invariant($"A Help link could not be opened ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.InputDiagnostics.cs b/src/MarkdownViewr.Windows/MainWindow.InputDiagnostics.cs
new file mode 100644
index 0000000..28228fa
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.InputDiagnostics.cs
@@ -0,0 +1,48 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Input;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Opt-in native event evidence for isolated fixtures; never records document text or keystrokes.</summary>
+public sealed partial class MainWindow
+{
+   /// <summary>Observes handled events without changing routing, focus, capture or control behavior.</summary>
+   private void InitializeInputDiagnostics()
+   {
+      if(!string.Equals(Environment.GetEnvironmentVariable("MARKDOWNVIEWR_INPUT_TRACE"), "1", StringComparison.Ordinal))
+      {
+         return;
+      }
+      foreach(UIElement element in new UIElement[] { RootGrid, OutlineDivider, SourceDivider, FrontmatterHide, FrontmatterMetadata, FrontmatterMarkdown })
+      {
+         element.AddHandler(UIElement.PointerEnteredEvent, new PointerEventHandler((sender, args) => TracePointer("entered", sender, args)), handledEventsToo: true);
+         element.AddHandler(UIElement.PointerExitedEvent, new PointerEventHandler((sender, args) => TracePointer("exited", sender, args)), handledEventsToo: true);
+         element.AddHandler(UIElement.PointerPressedEvent, new PointerEventHandler((sender, args) => TracePointer("pressed", sender, args)), handledEventsToo: true);
+         element.AddHandler(UIElement.PointerReleasedEvent, new PointerEventHandler((sender, args) => TracePointer("released", sender, args)), handledEventsToo: true);
+         element.AddHandler(UIElement.PointerCaptureLostEvent, new PointerEventHandler((sender, args) => TracePointer("capture-lost", sender, args)), handledEventsToo: true);
+      }
+      OutlineDivider.AddHandler(UIElement.PointerMovedEvent, new PointerEventHandler((sender, args) => TracePointer("moved", sender, args)), handledEventsToo: true);
+      OutlineDivider.DragStarted += (_, args) => App.Log.Info(FormattableString.Invariant($"Input trace: outline drag started; x={args.HorizontalOffset}; y={args.VerticalOffset}."));
+      OutlineDivider.DragDelta += (_, args) => App.Log.Info(FormattableString.Invariant($"Input trace: outline drag delta; x={args.HorizontalChange}; y={args.VerticalChange}."));
+      OutlineDivider.DragCompleted += (_, args) => App.Log.Info(FormattableString.Invariant($"Input trace: outline drag completed; canceled={args.Canceled}."));
+      foreach(Microsoft.UI.Xaml.Controls.RadioMenuFlyoutItem item in new[] { FrontmatterHide, FrontmatterMetadata, FrontmatterMarkdown })
+      {
+         item.Click += (_, _) => App.Log.Info($"Input trace: {item.Name} click; checked={item.IsChecked}.");
+      }
+   }
+
+
+
+   /// <summary>Records only owned native control names, button state and local pointer coordinates.</summary>
+   private void TracePointer(string operation, object sender, PointerRoutedEventArgs args)
+   {
+      Microsoft.UI.Input.PointerPoint point = args.GetCurrentPoint((UIElement)sender);
+      App.Log.Info(FormattableString.Invariant($"Input trace: {operation}; target={((FrameworkElement)sender).Name}; source={(args.OriginalSource as FrameworkElement)?.Name}; left={point.Properties.IsLeftButtonPressed}; handled={args.Handled}; x={point.Position.X}; y={point.Position.Y}."));
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Keyboard.cs b/src/MarkdownViewr.Windows/MainWindow.Keyboard.cs
new file mode 100644
index 0000000..eb3a8e1
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Keyboard.cs
@@ -0,0 +1,128 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Input;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Routes native reading shortcuts through explicit focus checks and bounded browser commands.</summary>
+public sealed partial class MainWindow
+{
+   private DocumentKeyboard? _documentKeyboard;
+   private string? _readingFocusTrace;
+
+
+
+   /// <summary>Registers only this window's thread and releases prefix/callback state on lifecycle changes.</summary>
+   private void InitializeKeyboard()
+   {
+      try
+      {
+         _documentKeyboard = new DocumentKeyboard(WinRT.Interop.WindowNative.GetWindowHandle(this), IsReadingFocused, QueueReaderCommand);
+      }
+      catch(System.ComponentModel.Win32Exception)
+      {
+         App.Log.Warning("Document keyboard shortcuts could not be initialized; native menus remain available.");
+      }
+      Closed += (_, _) => _documentKeyboard?.Dispose();
+      Activated += (_, args) =>
+      {
+         if(args.WindowActivationState == WindowActivationState.Deactivated)
+         {
+            _documentKeyboard?.Reset();
+         }
+      };
+      _browser.DocumentReady += (_, _) => _documentKeyboard?.Reset();
+   }
+
+
+
+   /// <summary>Read-only source and the passive browser accept reading keys; find/dialog/other controls retain normal input.</summary>
+   private bool IsReadingFocused()
+   {
+      if(_closed || !_browser.IsReady || Content.XamlRoot is not { } root)
+      {
+         return false;
+      }
+      object focused = FocusManager.GetFocusedElement(root);
+      if(string.Equals(Environment.GetEnvironmentVariable("MARKDOWNVIEWR_INPUT_TRACE"), "1", StringComparison.Ordinal))
+      {
+         string observation = (focused as FrameworkElement)?.Name + ":" + focused?.GetType().Name;
+         if(!string.Equals(observation, _readingFocusTrace, StringComparison.Ordinal))
+         {
+            _readingFocusTrace = observation;
+            App.Log.Info("Input trace: reading focus " + observation + ".");
+         }
+      }
+      return ReferenceEquals(focused, DocumentView) || _settings.ShowSource && ReferenceEquals(focused, SourceText);
+   }
+
+
+
+   /// <summary>Checks focus again on dispatch so queued reading commands cannot act after a text control takes focus.</summary>
+   private bool QueueReaderCommand(Core.Navigation.ReaderCommand command)
+   {
+      if(_closed)
+      {
+         return false;
+      }
+      return DispatcherQueue.TryEnqueue(() => _ = ExecuteReaderCommandAsync(command));
+   }
+
+
+
+   /// <summary>Observes expected native lifetime failures while preserving the current document and normal input.</summary>
+   private async Task ExecuteReaderCommandAsync(Core.Navigation.ReaderCommand command)
+   {
+      if(_closed || command != Core.Navigation.ReaderCommand.FocusFind && !IsReadingFocused())
+      {
+         _documentKeyboard?.Reset();
+         return;
+      }
+      try
+      {
+         switch(command)
+         {
+            case Core.Navigation.ReaderCommand.Print:
+               await PrintDocumentAsync();
+               break;
+            case Core.Navigation.ReaderCommand.NextTheme:
+            case Core.Navigation.ReaderCommand.PreviousTheme:
+               await CycleDocumentThemeAsync(command == Core.Navigation.ReaderCommand.NextTheme);
+               break;
+            case Core.Navigation.ReaderCommand.FocusFind:
+               OpenFind();
+               break;
+            case Core.Navigation.ReaderCommand.NextMatch:
+               MoveFind(forward: true);
+               break;
+            case Core.Navigation.ReaderCommand.PreviousMatch:
+               MoveFind(forward: false);
+               break;
+            case Core.Navigation.ReaderCommand.CloseFind:
+               await CloseFindAsync();
+               break;
+            case Core.Navigation.ReaderCommand.ZoomIn:
+            case Core.Navigation.ReaderCommand.ZoomOut:
+            case Core.Navigation.ReaderCommand.ZoomReset:
+               await ChangeZoomAsync(command);
+               break;
+            default:
+               await _browser.NavigateReaderAsync(command);
+               break;
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or ObjectDisposedException or InvalidOperationException)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "The reading command could not be completed.";
+            App.Log.Warning("A native reading command could not be completed.");
+         }
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Navigation.cs b/src/MarkdownViewr.Windows/MainWindow.Navigation.cs
new file mode 100644
index 0000000..8bff46b
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Navigation.cs
@@ -0,0 +1,174 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.UI.Xaml.Controls.Primitives;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Native outline controls route only bounded numeric heading operations to the passive browser.</summary>
+public sealed partial class MainWindow
+{
+   private Core.Documents.DocumentOutline? _outline;
+   private bool _navigationReady;
+   private bool _refreshingOutline;
+
+
+
+   /// <summary>Applies persisted sidebar appearance after XAML event initialization has finished.</summary>
+   private void InitializeOutline()
+   {
+      OutlineToggle.IsChecked = _settings.ShowOutline;
+      OutlineDepth.SelectedIndex = _settings.OutlineDepth - 1;
+      _navigationReady = true;
+      ApplyOutlineVisibility();
+   }
+
+
+
+   /// <summary>A hidden sidebar relinquishes its width entirely to the reader.</summary>
+   private void ApplyOutlineVisibility()
+   {
+      OutlinePanel.Visibility = _settings.ShowOutline ? Visibility.Visible : Visibility.Collapsed;
+      RefreshToolbarReadingState();
+      ApplyReadingWidths();
+   }
+
+
+
+   /// <summary>The view menu saves a persistent sidebar choice.</summary>
+   private void Outline_Click(object sender, RoutedEventArgs e)
+   {
+      _settings.ShowOutline = OutlineToggle.IsChecked;
+      Save();
+      ApplyOutlineVisibility();
+   }
+
+
+
+   /// <summary>Depth selection filters headings without renumbering their document identities.</summary>
+   private void OutlineDepth_Changed(object sender, SelectionChangedEventArgs e)
+   {
+      if(!_navigationReady || OutlineDepth.SelectedIndex < 0)
+      {
+         return;
+      }
+      _settings.OutlineDepth = OutlineDepth.SelectedIndex + 1;
+      RefreshToolbarReadingState();
+      Save();
+      RefreshOutline();
+   }
+
+
+
+   /// <summary>Rebuilds native labels only after a complete sanitized snapshot has been committed.</summary>
+   private void RefreshOutline()
+   {
+      var selected = (OutlineList.SelectedItem as ListViewItem)?.Tag as Core.Documents.DocumentHeading;
+      _refreshingOutline = true;
+      OutlineList.Items.Clear();
+      ToggleSection.IsEnabled = false;
+      if(_outline is not null)
+      {
+         foreach(Core.Documents.DocumentHeading heading in _outline.Headings.Where(heading => heading.Level <= _settings.OutlineDepth))
+         {
+            var label = new TextBlock
+            {
+               Tag = heading,
+               Text = heading.Title,
+               TextWrapping = _settings.WrapOutlineEntries ? TextWrapping.Wrap : TextWrapping.NoWrap,
+               TextTrimming = _settings.WrapOutlineEntries ? TextTrimming.None : TextTrimming.CharacterEllipsis,
+               MaxLines = _settings.WrapOutlineEntries ? 0 : 1,
+            };
+            Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(label, "OutlineTitle:" + heading.Index.ToString(System.Globalization.CultureInfo.InvariantCulture));
+            var row = new Grid { Tag = heading, Margin = new Thickness((heading.Level - 1) * 12, 0, 0, 0), ColumnSpacing = 6 };
+            row.ColumnDefinitions.Add(new ColumnDefinition { Width = GridLength.Auto });
+            row.ColumnDefinitions.Add(new ColumnDefinition { Width = new GridLength(1, GridUnitType.Star) });
+            if(_settings.ShowOutlineDepthMarkers)
+            {
+               var marker = new TextBlock { Text = "●○▪▫–·"[(heading.Level - 1)..heading.Level], VerticalAlignment = VerticalAlignment.Top, Width = 16 };
+               Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(marker, "OutlineDepthMarker:" + heading.Index.ToString(System.Globalization.CultureInfo.InvariantCulture));
+               Microsoft.UI.Xaml.Automation.AutomationProperties.SetName(marker, "Heading level " + heading.Level.ToString(System.Globalization.CultureInfo.InvariantCulture));
+               row.Children.Add(marker);
+            }
+            Grid.SetColumn(label, 1);
+            row.Children.Add(label);
+            var item = new ListViewItem { Content = row, Tag = heading, HorizontalContentAlignment = HorizontalAlignment.Stretch };
+            Microsoft.UI.Xaml.Automation.AutomationProperties.SetName(item, heading.Title);
+            var tooltip = new ToolTip { Content = new TextBlock { Text = heading.Title, TextWrapping = TextWrapping.Wrap, MaxWidth = 320 }, Placement = PlacementMode.Right, PlacementTarget = item, IsHitTestVisible = false };
+            label.IsTextTrimmedChanged += (_, _) => ToolTipService.SetToolTip(item, label.IsTextTrimmed ? tooltip : null);
+            Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(item, "OutlineHeading:" + heading.Index.ToString(System.Globalization.CultureInfo.InvariantCulture));
+            OutlineList.Items.Add(item);
+            if(heading == selected)
+            {
+               OutlineList.SelectedItem = item;
+               ToggleSection.IsEnabled = true;
+            }
+         }
+      }
+      _refreshingOutline = false;
+   }
+
+
+
+   /// <summary>Heading jumps reveal collapsed ancestors and target only the selected numeric identity.</summary>
+   private async void OutlineSelection_Changed(object sender, SelectionChangedEventArgs e)
+   {
+      if(_refreshingOutline || OutlineList.SelectedItem is not ListViewItem { Tag: Core.Documents.DocumentHeading heading })
+      {
+         return;
+      }
+      ToggleSection.IsEnabled = true;
+      await _browser.JumpToHeadingAsync(heading.Index);
+   }
+
+
+
+   /// <summary>Activating the same heading again returns to it after scrolling; selection changes still support keyboard navigation.</summary>
+   private async void Outline_ItemClick(object sender, ItemClickEventArgs args)
+   {
+      if(!_refreshingOutline && args.ClickedItem is FrameworkElement { Tag: Core.Documents.DocumentHeading heading })
+      {
+         await _browser.JumpToHeadingAsync(heading.Index);
+      }
+   }
+
+
+
+   /// <summary>The selected heading remains visible while its descendants toggle together.</summary>
+   private async void ToggleSection_Click(object sender, RoutedEventArgs e)
+   {
+      if(OutlineList.SelectedItem is ListViewItem { Tag: Core.Documents.DocumentHeading heading })
+      {
+         await _browser.ToggleSectionAsync(heading.Index);
+      }
+   }
+
+
+
+   /// <summary>Collapses all sections while retaining their headings.</summary>
+   private async void CollapseSections_Click(object sender, RoutedEventArgs e) => await _browser.SetSectionsAsync(collapsed: true);
+
+
+
+   /// <summary>Expands all levels, including children hidden before their parent was collapsed.</summary>
+   private async void ExpandSections_Click(object sender, RoutedEventArgs e) => await _browser.SetSectionsAsync(collapsed: false);
+
+
+
+   /// <summary>Resizes within the validated reading range while the pointer drags the native divider.</summary>
+   private void OutlineDivider_DragDelta(object sender, DragDeltaEventArgs e)
+   {
+      _settings.OutlineWidth = Math.Clamp(OutlineColumn.ActualWidth + e.HorizontalChange, 140, 500);
+      ApplyReadingWidths();
+   }
+
+
+
+   /// <summary>Writes only the completed resize to AppKit's atomic preferences.</summary>
+   private void OutlineDivider_DragCompleted(object sender, DragCompletedEventArgs e) => Save();
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Print.cs b/src/MarkdownViewr.Windows/MainWindow.Print.cs
new file mode 100644
index 0000000..ee93d6f
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Print.cs
@@ -0,0 +1,167 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Input;
+using Microsoft.Windows.Storage.Pickers;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Coordinates deliberate printing and saved AppKit preferences without mutating the reading surface.</summary>
+public sealed partial class MainWindow
+{
+   private bool _printing;
+
+
+
+   /// <summary>Print is available only after a committed document is ready.</summary>
+   private void InitializePrinting()
+   {
+      _browser.DocumentReady += (_, _) => RefreshPrintCommand();
+      RefreshPrintCommand();
+   }
+
+
+
+   /// <summary>The native File command and Ctrl+P share the same guarded print path.</summary>
+   private async void Print_Click(object sender, RoutedEventArgs args) => await PrintDocumentAsync();
+
+
+
+   /// <summary>The Windows shortcut does not expose a document-created native command.</summary>
+   private async void Print_Invoked(KeyboardAccelerator sender, KeyboardAcceleratorInvokedEventArgs args)
+   {
+      args.Handled = true;
+      await PrintDocumentAsync();
+   }
+
+
+
+   /// <summary>Commits only explicit print/PDF choices; cancellation, errors and completion preserve all reading state.</summary>
+   private async Task PrintDocumentAsync()
+   {
+      if(_closed || _printing || !_browser.IsReady || _documentPath is null)
+      {
+         return;
+      }
+      _printing = true;
+      RefreshPrintCommand();
+      try
+      {
+         var dialog = new PrintOptionsDialog(_settings.Print, _themes);
+         if(await dialog.ShowAsync(Content.XamlRoot) is not { } options || _closed)
+         {
+            return;
+         }
+         App.Log.Info(dialog.SaveAsPdf ? "Print options accepted for PDF export." : "Print options accepted for the Windows system dialog.");
+         if(!SavePrintingSettings(options))
+         {
+            StatusText.Text = "Could not save printing preferences. Please try again.";
+            return;
+         }
+         if(dialog.SaveAsPdf)
+         {
+            await SavePrintPdfAsync(options, dialog);
+         }
+         else
+         {
+            bool requested = await _browser.ShowPrintUiAsync(options, _themes);
+            if(!_closed)
+            {
+               StatusText.Text = requested ? "Windows print dialog requested. Print or cancel in that dialog." : "The print dialog could not be opened.";
+            }
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or ObjectDisposedException or InvalidOperationException or IOException or UnauthorizedAccessException or ArgumentException or NotImplementedException)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "Printing could not be completed. Check the destination and WebView2 Runtime.";
+            App.Log.Warning(FormattableString.Invariant($"Printing could not be completed ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+         }
+      }
+      finally
+      {
+         _printing = false;
+         RefreshPrintCommand();
+      }
+   }
+
+
+
+   /// <summary>Uses an owned destination picker and starts post-save actions only after readable-PDF verification.</summary>
+   private async Task SavePrintPdfAsync(Core.Printing.PrintOptions options, PrintOptionsDialog dialog)
+   {
+      var picker = new FileSavePicker(AppWindow.Id) { SuggestedFileName = Path.GetFileNameWithoutExtension(_documentPath), DefaultFileExtension = ".pdf" };
+      picker.FileTypeChoices.Add("PDF document", [".pdf"]);
+      PickFileResult? file = await picker.PickSaveFileAsync();
+      if(file is null)
+      {
+         App.Log.Info("PDF destination selection cancelled.");
+      }
+      if(file is not null && !_closed)
+      {
+         StatusText.Text = "Saving PDF...";
+         bool saved = await _browser.SavePdfAsync(file.Path, options, _themes);
+         if(!_closed)
+         {
+            StatusText.Text = saved ? "PDF saved." : "The PDF could not be saved.";
+            if(saved)
+            {
+               await OpenSavedPdfAsync(file.Path, dialog.OpenPdfAfterSave, dialog.OpenFolderAfterSave);
+            }
+         }
+      }
+   }
+
+
+
+   /// <summary>Opens only a successfully generated PDF and its selected folder, with independent native handler results.</summary>
+   private async Task OpenSavedPdfAsync(string path, bool openPdf, bool openFolder)
+   {
+      if(openPdf)
+      {
+         await OpenSavedPdfActionAsync(path, folder: false);
+      }
+      if(openFolder && !_closed)
+      {
+         await OpenSavedPdfActionAsync(path, folder: true);
+      }
+   }
+
+
+
+   /// <summary>One unavailable handler cannot suppress the other requested post-export action or misreport the completed export.</summary>
+   private async Task OpenSavedPdfActionAsync(string path, bool folder)
+   {
+      string error = folder ? "PDF saved, but its folder could not be opened." : "PDF saved, but it could not be opened. Check your default PDF viewer.";
+      try
+      {
+         global::Windows.Storage.StorageFile file = await global::Windows.Storage.StorageFile.GetFileFromPathAsync(path);
+         bool opened = folder
+            ? await global::Windows.System.Launcher.LaunchFolderAsync(await file.GetParentAsync())
+            : await global::Windows.System.Launcher.LaunchFileAsync(file);
+         if(!opened && !_closed)
+         {
+            StatusText.Text = error;
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or InvalidOperationException or IOException or UnauthorizedAccessException or ArgumentException)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = error;
+         }
+         App.Log.Warning(FormattableString.Invariant($"A post-export action could not be completed ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+
+
+
+   /// <summary>Busy and uncommitted documents cannot open multiple native print operations.</summary>
+   private void RefreshPrintCommand() => PrintMenuItem.IsEnabled = ToolbarPrintButton.IsEnabled = !_closed && !_printing && _documentPath is not null && _browser.IsReady;
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.PrintSettings.cs b/src/MarkdownViewr.Windows/MainWindow.PrintSettings.cs
new file mode 100644
index 0000000..0f10fa9
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.PrintSettings.cs
@@ -0,0 +1,44 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Printing;
+using Microsoft.UI.Xaml;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Print preferences save through the same checked path from Settings and the deliberate output dialog.</summary>
+public sealed partial class MainWindow
+{
+   /// <summary>Only print defaults change in the newest store, preserving unrelated sibling and reading preferences.</summary>
+   private bool SavePrintingSettings(PrintOptions options)
+   {
+      if(_closed)
+      {
+         return false;
+      }
+      Core.AppSettings settings = AppIdentity.SettingsStore.Load();
+      settings.Print = options.Sanitize();
+      if(!AppIdentity.SettingsStore.Save(settings))
+      {
+         return false;
+      }
+      ((App)Application.Current).ApplyPrintingSettings(settings.Print);
+      return true;
+   }
+
+
+
+   /// <summary>Committed shared defaults refresh each reader baseline without altering its live document or pending Settings draft.</summary>
+   internal void ApplyPrintingSettings(PrintOptions options)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      _settings.Print = _lastSavedSettings.Print = options;
+      _settingsWindow?.UpdatePrinting(options);
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Settings.cs b/src/MarkdownViewr.Windows/MainWindow.Settings.cs
new file mode 100644
index 0000000..97dea65
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Settings.cs
@@ -0,0 +1,162 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using KofTwentyTwo.AppKit.WinUI;
+using Microsoft.UI.Xaml;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Settings owns an ordinary native window and commits validated changes using the existing shared save paths.</summary>
+public sealed partial class MainWindow
+{
+   private SettingsWindow? _settingsWindow;
+
+
+
+   /// <summary>Configuration dialogs and pickers belong to the live settings window; regular reading dialogs retain their own root.</summary>
+   private SettingsWindow ConfigurationPage => _settingsWindow ?? throw new InvalidOperationException("Open Settings before editing configuration.");
+
+
+
+   /// <summary>Short confirmation dialogs remain owned by the current Settings root.</summary>
+   private XamlRoot ConfigurationRoot => _settingsWindow?.DialogRoot ?? Content.XamlRoot;
+
+
+
+   /// <summary>Native file pickers use the settings window's identity instead of a background document window.</summary>
+   private Microsoft.UI.WindowId ConfigurationWindowId => _settingsWindow?.AppWindow.Id ?? AppWindow.Id;
+
+
+
+   /// <summary>Reuses a modeless settings window instead of hiding/reopening a modal tabbed shell for each action.</summary>
+   private void Settings_Click(object sender, RoutedEventArgs e)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      if(_settingsWindow is null)
+      {
+         _settingsWindow = new SettingsWindow(_settings, SaveReadingAppearanceAsync, SaveStartupSettings, SaveContentsSettings, SavePrintingSettings, _themes, RunSettingsActionAsync);
+         WinUIShell.ApplyTheme((FrameworkElement)_settingsWindow.Content, _settings.ThemeKind);
+         _settingsWindow.Closed += (_, _) => _settingsWindow = null;
+      }
+      _settingsWindow.Activate();
+   }
+
+
+
+   /// <summary>Checked persistence precedes sibling updates; unrelated window and theme settings merge from the latest store.</summary>
+   private async Task<bool> SaveReadingAppearanceAsync(Core.Themes.ReadingAppearance appearance)
+   {
+      if(_closed)
+      {
+         return false;
+      }
+      Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+      Core.AppSettings draft = Core.SettingsChanges.Copy(before);
+      draft.ContentWidthEnabled = appearance.LimitWidth;
+      draft.ContentWidthPx = appearance.WidthPixels;
+      draft.GlobalCss = appearance.GlobalCss;
+      Core.AppSettings merged = Core.SettingsChanges.Merge(AppIdentity.SettingsStore.Load(), before, draft);
+      if(!AppIdentity.SettingsStore.Save(merged))
+      {
+         return false;
+      }
+      await ((App)Application.Current).ApplyReadingAppearanceAsync(merged.ReadingAppearance);
+      return true;
+   }
+
+
+
+   /// <summary>Only startup fields change in the latest store; checked persistence precedes reader and Settings broadcasts.</summary>
+   private bool SaveStartupSettings(bool showSplash, int milliseconds, bool checkUpdates, bool showOutline, bool showSource)
+   {
+      if(_closed)
+      {
+         return false;
+      }
+      Core.AppSettings settings = AppIdentity.SettingsStore.Load();
+      settings.ShowSplashScreen = showSplash;
+      settings.SplashMilliseconds = milliseconds;
+      settings.CheckForUpdatesOnStartup = checkUpdates;
+      settings.ShowOutlineByDefault = showOutline;
+      settings.ShowSourceByDefault = showSource;
+      settings.Sanitize();
+      if(!AppIdentity.SettingsStore.Save(settings))
+      {
+         return false;
+      }
+      ((App)Application.Current).ApplyStartupSettings(settings);
+      return true;
+   }
+
+
+
+   /// <summary>Shared saved startup options become the baseline so later reader saves cannot restore older choices.</summary>
+   internal void ApplyStartupSettings(Core.AppSettings settings)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      _settings.ShowSplashScreen = _lastSavedSettings.ShowSplashScreen = settings.ShowSplashScreen;
+      _settings.SplashMilliseconds = _lastSavedSettings.SplashMilliseconds = settings.SplashMilliseconds;
+      _settings.CheckForUpdatesOnStartup = _lastSavedSettings.CheckForUpdatesOnStartup = settings.CheckForUpdatesOnStartup;
+      _settings.ShowOutlineByDefault = _lastSavedSettings.ShowOutlineByDefault = settings.ShowOutlineByDefault;
+      _settings.ShowSourceByDefault = _lastSavedSettings.ShowSourceByDefault = settings.ShowSourceByDefault;
+      _settingsWindow?.UpdateStartup(settings);
+   }
+
+
+
+   /// <summary>Only Contents presentation fields change in the latest store, preserving sibling reader and CSS preferences.</summary>
+   private bool SaveContentsSettings(bool wrap, bool depthMarkers)
+   {
+      if(_closed)
+      {
+         return false;
+      }
+      Core.AppSettings settings = AppIdentity.SettingsStore.Load();
+      settings.WrapOutlineEntries = wrap;
+      settings.ShowOutlineDepthMarkers = depthMarkers;
+      if(!AppIdentity.SettingsStore.Save(settings))
+      {
+         return false;
+      }
+      ((App)Application.Current).ApplyContentsSettings(settings);
+      return true;
+   }
+
+
+
+   /// <summary>Committed Contents presentation refreshes live headings and the baseline without changing visibility or depth selection.</summary>
+   internal void ApplyContentsSettings(Core.AppSettings settings)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      _settings.WrapOutlineEntries = _lastSavedSettings.WrapOutlineEntries = settings.WrapOutlineEntries;
+      _settings.ShowOutlineDepthMarkers = _lastSavedSettings.ShowOutlineDepthMarkers = settings.ShowOutlineDepthMarkers;
+      RefreshOutline();
+      _settingsWindow?.UpdateContents(settings);
+   }
+
+
+
+   /// <summary>Only fixed native Settings controls launch configuration; document content cannot request these operations.</summary>
+   private Task RunSettingsActionAsync(string action) => action switch
+   {
+      "EditDocumentThemeMenu" => EditDocumentThemeAsync(),
+      "ManageDocumentThemesMenu" => ManageDocumentThemesAsync(),
+      "ImportDocumentThemesMenu" => ImportThemesAsync(),
+      "ExportDocumentThemesMenu" => ExportThemesAsync(),
+      "RestoreDocumentThemesMenu" => RestoreDocumentThemesAsync(),
+      "ConfigureEditorMenuItem" => ConfigureEditorAsync(),
+      _ => Task.CompletedTask,
+   };
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Source.Sync.cs b/src/MarkdownViewr.Windows/MainWindow.Source.Sync.cs
new file mode 100644
index 0000000..ebfd6e1
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Source.Sync.cs
@@ -0,0 +1,239 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.UI.Xaml.Media;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Synchronizes only owned native/browser viewports through validated numeric heading geometry.</summary>
+public sealed partial class MainWindow
+{
+   private Core.Documents.DocumentSourceText? _sourceDocument;
+   private ScrollViewer? _sourceScroller;
+   private Microsoft.UI.Dispatching.DispatcherQueueTimer? _sourceSyncTimer;
+   private bool _sourceSyncRunning;
+   private bool _sourceScrolled;
+   private bool _sourceCaptureAfterHold;
+   private long _sourceSyncHoldUntil;
+   private double _sourceLastY = double.NaN;
+   private double _sourceReaderLastY = double.NaN;
+
+
+
+   /// <summary>Polls fixed ready-page geometry without enabling authored scripts or messages; closing releases the timer.</summary>
+   private void InitializeSourceSync()
+   {
+      _sourceSyncTimer = DispatcherQueue.CreateTimer();
+      _sourceSyncTimer.Interval = TimeSpan.FromMilliseconds(150);
+      _sourceSyncTimer.Tick += async (_, _) => await SynchronizeSourceAsync();
+      SourceText.Loaded += (_, _) => AttachSourceScroller();
+      SourceText.GettingFocus += Source_GettingFocus;
+      _browser.DocumentReady += (_, _) => _sourceReaderLastY = double.NaN;
+      Closed += (_, _) => _sourceSyncTimer.Stop();
+      _sourceSyncTimer.Start();
+   }
+
+
+
+   /// <summary>Entering read-only source preserves its synchronized viewport instead of revealing the old native caret.</summary>
+   private void Source_GettingFocus(UIElement sender, Microsoft.UI.Xaml.Input.GettingFocusEventArgs args)
+   {
+      if(_closed || !_settings.ShowSource || FindBar.Visibility == Visibility.Visible)
+      {
+         return;
+      }
+      AttachSourceScroller();
+      if(_sourceScroller is not { } scroller)
+      {
+         return;
+      }
+      double position = scroller.VerticalOffset;
+      if(SourceText.SelectionLength == 0 && SourceText.TextLength > 0)
+      {
+         Microsoft.UI.Text.ITextRange visible = SourceText.Document.GetRangeFromPoint(
+            new global::Windows.Foundation.Point(scroller.HorizontalOffset + SourceText.Padding.Left, position + SourceText.Padding.Top), Microsoft.UI.Text.PointOptions.ClientCoordinates);
+         SourceText.Select(visible.StartPosition, 0);
+      }
+      Core.Documents.DocumentSourceText? snapshot = _sourceDocument;
+      DispatcherQueue.TryEnqueue(() =>
+      {
+         if(!_closed && ReferenceEquals(snapshot, _sourceDocument) && SourceText.FocusState != FocusState.Unfocused)
+         {
+            _sourceSyncHoldUntil = Environment.TickCount64 + 200;
+            scroller.ChangeView(null, position, null, disableAnimation: true);
+            _sourceLastY = position;
+            _sourceScrolled = false;
+         }
+      });
+   }
+
+
+
+   /// <summary>Owns the actual native text viewport; source gestures can originate from mouse, keyboard or accessibility.</summary>
+   private void AttachSourceScroller()
+   {
+      if(_sourceScroller is not null)
+      {
+         return;
+      }
+      SourceText.ApplyTemplate();
+      _sourceScroller = FindSourceScroller(SourceText);
+      if(_sourceScroller is not null)
+      {
+         _sourceScroller.ViewChanged += (_, _) =>
+         {
+            if(Environment.TickCount64 >= _sourceSyncHoldUntil)
+            {
+               _sourceScrolled = true;
+            }
+         };
+      }
+   }
+
+
+
+   /// <summary>Walks only this owned control's native visual tree, never other applications or desktop windows.</summary>
+   private static ScrollViewer? FindSourceScroller(DependencyObject element)
+   {
+      if(element is ScrollViewer scroller)
+      {
+         return scroller;
+      }
+      for(int index = 0; index < VisualTreeHelper.GetChildrenCount(element); index++)
+      {
+         if(FindSourceScroller(VisualTreeHelper.GetChild(element, index)) is { } found)
+         {
+            return found;
+         }
+      }
+      return null;
+   }
+
+
+
+   /// <summary>Search temporarily expands literal source; the canonical query/count remains independent of folding.</summary>
+   private void ExpandSourceForFind()
+   {
+      if(_sourceDocument is not null && _sourceDocument.SetCollapsed([]))
+      {
+         RefreshSource();
+      }
+      HoldSourceSync();
+   }
+
+
+
+   /// <summary>Find's explicit paired selection/viewport operations cannot be overwritten by scroll feedback.</summary>
+   private void HoldSourceSync(bool preserveSelection = true)
+   {
+      _sourceSyncHoldUntil = Environment.TickCount64 + 250;
+      _sourceScrolled = false;
+      _sourceCaptureAfterHold = preserveSelection;
+      _sourceLastY = _sourceScroller?.VerticalOffset ?? double.NaN;
+      _sourceReaderLastY = double.NaN;
+   }
+
+
+
+   /// <summary>Applies only current snapshot/query/page geometry and prevents reverse feedback after its own native movements.</summary>
+   private async Task SynchronizeSourceAsync()
+   {
+      if(_closed || _printing || _sourceSyncRunning || !_settings.ShowSource || _finding || !_browser.IsReady || _sourceDocument is not { } source)
+      {
+         return;
+      }
+      AttachSourceScroller();
+      if(_sourceScroller is not { } scroller)
+      {
+         return;
+      }
+      _sourceSyncRunning = true;
+      int findGeneration = _findGeneration;
+      try
+      {
+         Core.Documents.DocumentScrollState? frame = await _browser.CaptureScrollStateAsync();
+         if(frame is null || _closed || !ReferenceEquals(source, _sourceDocument) || findGeneration != _findGeneration || !_settings.ShowSource || !_browser.IsReady || _finding)
+         {
+            return;
+         }
+         if(source.SetCollapsed(frame.Collapsed))
+         {
+            RefreshSource();
+            if(FindBar.Visibility == Visibility.Visible && _find is not null)
+            {
+               RefreshFindResult();
+            }
+            return;
+         }
+         if(Environment.TickCount64 < _sourceSyncHoldUntil)
+         {
+            return;
+         }
+         if(_sourceCaptureAfterHold)
+         {
+            _sourceCaptureAfterHold = false;
+            _sourceScrolled = false;
+            _sourceLastY = scroller.VerticalOffset;
+            _sourceReaderLastY = frame.Position;
+            return;
+         }
+         await SynchronizeViewportsAsync(source, scroller, frame);
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or InvalidOperationException or ArgumentException)
+      {
+         if(!_closed)
+         {
+            App.Log.Warning("The source reading position could not be synchronized.");
+         }
+      }
+      finally
+      {
+         _sourceSyncRunning = false;
+      }
+   }
+
+
+
+   /// <summary>Pairs visible native character rectangles with generated heading tops and moves only the surface that follows.</summary>
+   private async Task SynchronizeViewportsAsync(Core.Documents.DocumentSourceText source, ScrollViewer scroller, Core.Documents.DocumentScrollState frame)
+   {
+      var anchors = new List<(double Source, double Reader)>();
+      foreach(Core.Documents.DocumentSourceHeading heading in source.Headings)
+      {
+         if(heading.Start < SourceText.TextLength && frame.Headings.TryGetValue(heading.Index, out double readerTop))
+         {
+            global::Windows.Foundation.Rect rectangle = SourceText.GetRectFromCharacterIndex(heading.Start, trailingEdge: false);
+            double sourceTop = rectangle.Y;
+            if(rectangle.Height > 0 && double.IsFinite(sourceTop))
+            {
+               anchors.Add((sourceTop, readerTop));
+            }
+         }
+      }
+      double sourceY = scroller.VerticalOffset;
+      bool sourceMoved = _sourceScrolled || double.IsFinite(_sourceLastY) && Math.Abs(sourceY - _sourceLastY) > 0.5;
+      _sourceScrolled = false;
+      if(sourceMoved && double.IsFinite(_sourceReaderLastY))
+      {
+         double target = Core.Documents.DocumentScrollState.MapPosition(sourceY, scroller.ScrollableHeight, frame.Maximum, anchors.Select(pair => (pair.Source, pair.Reader)));
+         _sourceSyncHoldUntil = Environment.TickCount64 + 200;
+         await _browser.ScrollToSourcePositionAsync(target);
+         _sourceLastY = sourceY;
+         _sourceReaderLastY = target;
+      }
+      else if(!double.IsFinite(_sourceReaderLastY) || Math.Abs(frame.Position - _sourceReaderLastY) > 0.5)
+      {
+         double target = Core.Documents.DocumentScrollState.MapPosition(frame.Position, frame.Maximum, scroller.ScrollableHeight, anchors.Select(pair => (pair.Reader, pair.Source)));
+         _sourceSyncHoldUntil = Environment.TickCount64 + 200;
+         scroller.ChangeView(null, target, null, disableAnimation: true);
+         _sourceLastY = target;
+         _sourceReaderLastY = frame.Position;
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Source.cs b/src/MarkdownViewr.Windows/MainWindow.Source.cs
new file mode 100644
index 0000000..f74d511
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Source.cs
@@ -0,0 +1,131 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls.Primitives;
+using Microsoft.UI.Xaml.Input;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Displays the same committed snapshot as literal text, without passing source through HTML.</summary>
+public sealed partial class MainWindow
+{
+   private string _sourceMarkdown = "";
+   private double _sourceFraction = 0.5;
+
+
+
+   /// <summary>Restores the independent source preference after XAML initialization.</summary>
+   private void InitializeSource()
+   {
+      SourceText.SetTheme(ActiveDocumentTheme());
+      SourceText.CopyFailed += (_, _) =>
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "The source could not be copied. Please try again.";
+         }
+      };
+      SourceToggle.IsChecked = _settings.ShowSource;
+      RefreshSource();
+      InitializeSourceSync();
+   }
+
+
+
+   /// <summary>A hidden source pane relinquishes its columns and accessibility surface.</summary>
+   private void RefreshSource()
+   {
+      ApplyReadingWidths();
+      RefreshToolbarReadingState();
+      SourceText.Visibility = _settings.ShowSource ? Visibility.Visible : Visibility.Collapsed;
+      string text = _settings.ShowSource ? _sourceDocument?.Text ?? _sourceMarkdown : "";
+      bool changed = !string.Equals(SourceText.Text, text, StringComparison.Ordinal);
+      SourceText.SetSource(text, _sourceDocument);
+      if(changed)
+      {
+         HoldSourceSync(preserveSelection: false);
+      }
+   }
+
+
+
+   /// <summary>Splits the document/source space proportionally, excluding the outline and its divider.</summary>
+   private void ApplyReadingWidths()
+   {
+      double available = Math.Max(0, RootGrid.ActualWidth - 200);
+      double outline = _settings.ShowOutline ? Math.Min(_settings.OutlineWidth, Math.Max(0, available - 6 - (_settings.ShowSource ? 166 : 0))) : 0;
+      double shared = Math.Max(0, RootGrid.ActualWidth - outline - (_settings.ShowOutline ? 6 : 0) - 6);
+      double fraction = Core.Layout.SourcePaneLayout.Fraction(shared, _sourceFraction);
+      OutlineColumn.Width = new GridLength(outline);
+      OutlineDividerColumn.Width = new GridLength(_settings.ShowOutline ? 6 : 0);
+      DocumentColumn.Width = new GridLength(_settings.ShowSource ? 1 - fraction : 1, GridUnitType.Star);
+      SourceColumn.Width = _settings.ShowSource ? new GridLength(fraction, GridUnitType.Star) : new GridLength(0);
+      SourceDividerColumn.Width = new GridLength(_settings.ShowSource ? 6 : 0);
+      SourceDivider.IsTabStop = _settings.ShowSource;
+   }
+
+
+
+   /// <summary>Keeps at least 200 reading pixels when the window shrinks or both panes are open.</summary>
+   private void ReadingArea_SizeChanged(object sender, SizeChangedEventArgs e) => ApplyReadingWidths();
+
+
+   /// <summary>Persists the view choice while preserving the actual Markdown, including hidden frontmatter.</summary>
+   private void Source_Click(object sender, RoutedEventArgs e)
+   {
+      _settings.ShowSource = SourceToggle.IsChecked;
+      if(_settings.ShowSource)
+      {
+         _sourceFraction = 0.5;
+      }
+      Save();
+      RefreshSource();
+      QueueFind();
+   }
+
+
+
+   /// <summary>The source pane grows toward the left within the available shared reading area.</summary>
+   private void SourceDivider_DragDelta(object sender, DragDeltaEventArgs e) => ResizeSource(e.HorizontalChange);
+
+
+
+   /// <summary>Keyboard users resize with Left/Right or restore equal panes with Home.</summary>
+   private void SourceDivider_KeyDown(object sender, KeyRoutedEventArgs e)
+   {
+      if(!_settings.ShowSource)
+      {
+         return;
+      }
+      switch(e.Key)
+      {
+         case global::Windows.System.VirtualKey.Left:
+            ResizeSource(-24);
+            break;
+         case global::Windows.System.VirtualKey.Right:
+            ResizeSource(24);
+            break;
+         case global::Windows.System.VirtualKey.Home:
+            _sourceFraction = 0.5;
+            ApplyReadingWidths();
+            break;
+         default:
+            return;
+      }
+      e.Handled = true;
+   }
+
+
+
+   /// <summary>The ratio belongs to this window; reopening source intentionally starts again at50/50.</summary>
+   private void ResizeSource(double horizontalChange)
+   {
+      double shared = DocumentColumn.ActualWidth + SourceColumn.ActualWidth;
+      _sourceFraction = Core.Layout.SourcePaneLayout.Resize(shared, SourceColumn.ActualWidth, horizontalChange);
+      ApplyReadingWidths();
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.ThemeManagement.cs b/src/MarkdownViewr.Windows/MainWindow.ThemeManagement.cs
new file mode 100644
index 0000000..db224e7
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.ThemeManagement.cs
@@ -0,0 +1,107 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Commits copied theme changes to the latest store and refreshes owned readers.</summary>
+public sealed partial class MainWindow
+{
+   private ulong _themeSettingsRevision;
+
+
+
+   /// <summary>The native manager edits a snapshot; cancellation cannot affect another reader or persisted state.</summary>
+   private async Task ManageDocumentThemesAsync()
+   {
+      Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+      Core.AppSettings? edited = await new ThemeManagementDialog(before, ConfigurationWindowId).ShowAsync(ConfigurationPage, () => !_closed);
+      if(edited is not null && !_closed)
+      {
+         await CommitThemeDraftAsync(before, edited);
+      }
+   }
+
+
+
+   /// <summary>Native menu cycling follows enabled saved order.</summary>
+   private async void NextDocumentTheme_Click(object sender, RoutedEventArgs e) => await CycleDocumentThemeAsync(forward: true);
+
+
+
+   /// <summary>Previous cycles backward with wraparound.</summary>
+   private async void PreviousDocumentTheme_Click(object sender, RoutedEventArgs e) => await CycleDocumentThemeAsync(forward: false);
+
+
+
+   /// <summary>An intentionally empty enabled list has no cycle action and retains the safe current surface.</summary>
+   private async Task CycleDocumentThemeAsync(bool forward)
+   {
+      Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+      Core.Themes.ReaderTheme? next = Core.Themes.ThemeManagement.Cycle(before, forward);
+      if(next is not null)
+      {
+         Core.AppSettings draft = Core.SettingsChanges.Copy(before);
+         draft.DocumentTheme = next.Name;
+         await CommitThemeDraftAsync(before, draft);
+      }
+   }
+
+
+
+   /// <summary>Failed persistence does not apply an unsaved theme draft; sibling fields untouched by this edit retain their latest values.</summary>
+   private async Task<bool> CommitThemeDraftAsync(Core.AppSettings before, Core.AppSettings edited)
+   {
+      Core.AppSettings merged = Core.SettingsChanges.Merge(AppIdentity.SettingsStore.Load(), before, edited);
+      if(!AppIdentity.SettingsStore.Save(merged))
+      {
+         StatusText.Text = "Could not save document themes.";
+         return false;
+      }
+      await ((App)Application.Current).ApplyThemeSettingsAsync(merged);
+      return true;
+   }
+
+
+
+   /// <summary>Shared palettes and their menu state update each window's save baseline before asynchronous rendering.</summary>
+   internal async Task ApplyThemeSettingsAsync(Core.AppSettings settings)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      ulong revision = ++_themeSettingsRevision;
+      _settings.DocumentTheme = _lastSavedSettings.DocumentTheme = settings.DocumentTheme;
+      _settings.UserThemes = settings.UserThemes.ToArray();
+      _lastSavedSettings.UserThemes = settings.UserThemes.ToArray();
+      _settings.ThemeOrder = settings.ThemeOrder.ToArray();
+      _lastSavedSettings.ThemeOrder = settings.ThemeOrder.ToArray();
+      _settings.DisabledThemes = settings.DisabledThemes.ToArray();
+      _lastSavedSettings.DisabledThemes = settings.DisabledThemes.ToArray();
+      _settings.DeletedBuiltInThemes = settings.DeletedBuiltInThemes.ToArray();
+      _lastSavedSettings.DeletedBuiltInThemes = settings.DeletedBuiltInThemes.ToArray();
+      RefreshDocumentThemes();
+      try
+      {
+         _browserInitialization ??= _browser.InitializeAsync();
+         await _browserInitialization;
+         if(!_closed && revision == _themeSettingsRevision)
+         {
+            await ApplyDocumentThemeAsync(ActiveDocumentTheme());
+         }
+      }
+      catch(System.Runtime.InteropServices.COMException exception)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "The document themes could not be displayed.";
+            App.Log.Error("The document themes could not be displayed.", exception);
+         }
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.ThemeTransfer.cs b/src/MarkdownViewr.Windows/MainWindow.ThemeTransfer.cs
new file mode 100644
index 0000000..00c72a0
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.ThemeTransfer.cs
@@ -0,0 +1,91 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Native theme transfer commits only explicitly selected, validated imports or user-chosen export destinations.</summary>
+public sealed partial class MainWindow
+{
+   private bool _transferringThemes;
+
+
+
+   /// <summary>Picker cancellation leaves settings intact; rejected files do not prevent other selected themes from importing.</summary>
+   private async Task ImportThemesAsync()
+   {
+      if(_closed || _transferringThemes)
+      {
+         return;
+      }
+      _transferringThemes = true;
+      try
+      {
+         Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+         ThemeTransfer.ImportOutcome? result = await ThemeTransfer.ImportAsync(ConfigurationWindowId, ConfigurationRoot, before);
+         if(result is not null && !_closed)
+         {
+            if(result.Imported > 0 && !await CommitThemeDraftAsync(before, result.Draft))
+            {
+               return;
+            }
+            if(!_closed)
+            {
+               StatusText.Text = FormattableString.Invariant($"Themes imported: {result.Imported}. Skipped: {result.Skipped}. Failed: {result.Failed}.");
+            }
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or ObjectDisposedException or InvalidOperationException or ArgumentException)
+      {
+         ReportThemeTransferError(exception);
+      }
+      finally
+      {
+         _transferringThemes = false;
+      }
+   }
+
+
+
+   /// <summary>Export offers all visible themes and writes the exact validated JSON after native destination confirmation.</summary>
+   private async Task ExportThemesAsync()
+   {
+      if(_closed || _transferringThemes)
+      {
+         return;
+      }
+      _transferringThemes = true;
+      try
+      {
+         Core.Themes.ReaderTheme? theme = await ThemeTransfer.SelectExportAsync(ConfigurationRoot, _settings);
+         if(theme is not null && !_closed && await ThemeTransfer.ExportAsync(ConfigurationWindowId, theme) && !_closed)
+         {
+            StatusText.Text = "Theme exported.";
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or ObjectDisposedException or InvalidOperationException or IOException or UnauthorizedAccessException or ArgumentException)
+      {
+         ReportThemeTransferError(exception);
+      }
+      finally
+      {
+         _transferringThemes = false;
+      }
+   }
+
+
+
+   /// <summary>Errors disclose only exception kind/HRESULT; paths and theme content stay private.</summary>
+   private void ReportThemeTransferError(Exception exception)
+   {
+      if(!_closed)
+      {
+         StatusText.Text = "Theme transfer could not be completed. Check the selected file or destination.";
+         App.Log.Warning(FormattableString.Invariant($"Theme transfer could not be completed ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Toolbar.cs b/src/MarkdownViewr.Windows/MainWindow.Toolbar.cs
new file mode 100644
index 0000000..b88c256
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Toolbar.cs
@@ -0,0 +1,170 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.UI.Xaml.Input;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Matches the reference document toolbar while sharing native menu action paths and responsive overflow.</summary>
+public sealed partial class MainWindow
+{
+   private readonly ToolTip _editorUnavailableTip = new();
+   private readonly DispatcherTimer _editorHoverDelay = new() { Interval = TimeSpan.FromMilliseconds(500) };
+
+
+
+   /// <summary>Fixed primary commands and reading actions share the same native menu state.</summary>
+   private void InitializeToolbar()
+   {
+      RefreshToolbarReadingState();
+      ReaderToolbar.Opening += (_, _) => RefreshToolbarEditors();
+      _editorUnavailableTip.PlacementTarget = ToolbarEditorButton;
+      AutomationProperties.SetAutomationId(_editorUnavailableTip, "EditorUnavailableTip");
+      _editorHoverDelay.Tick += (_, _) =>
+      {
+         _editorHoverDelay.Stop();
+         if(!_closed && !ToolbarEditorButton.IsEnabled && ToolbarEditorButton.IsLoaded && ToolbarEditorButton.XamlRoot is { } root)
+         {
+            _editorUnavailableTip.XamlRoot = root;
+            _editorUnavailableTip.IsOpen = true;
+         }
+      };
+      ReaderToolbar.PointerMoved += EditorUnavailablePointerMoved;
+      ReaderToolbar.PointerExited += (_, _) => CloseEditorExplanation();
+   }
+
+
+
+   /// <summary>Menu changes and toolbar clicks reflect the same visibility/depth preferences and accessible toggle state.</summary>
+   private void RefreshToolbarReadingState()
+   {
+      ToolbarOutlineButton.IsChecked = _settings.ShowOutline;
+      ToolbarSourceButton.IsChecked = _settings.ShowSource;
+      ToolTipService.SetToolTip(ToolbarOutlineButton, _settings.ShowOutline ? "Hide table of contents" : "Show table of contents");
+      ToolTipService.SetToolTip(ToolbarSourceButton, _settings.ShowSource ? "Hide Markdown source" : "Show Markdown source");
+
+   }
+
+
+
+   /// <summary>The toolbar routes TOC visibility through the same saved menu operation.</summary>
+   private void ToolbarOutline_Click(object sender, RoutedEventArgs e)
+   {
+      OutlineToggle.IsChecked = ToolbarOutlineButton.IsChecked == true;
+      Outline_Click(sender, e);
+   }
+
+
+
+   /// <summary>Source toggling uses the shared snapshot,50/50 opening and find refresh path.</summary>
+   private void ToolbarSource_Click(object sender, RoutedEventArgs e)
+   {
+      SourceToggle.IsChecked = ToolbarSourceButton.IsChecked == true;
+      Source_Click(sender, e);
+   }
+
+
+
+   /// <summary>Only enabled choices appear, following the same saved order and current selection as View.</summary>
+   private void RefreshToolbarThemes()
+   {
+      ToolbarThemeFlyout.Items.Clear();
+      string selected = ActiveDocumentTheme().Name;
+      ToolbarThemeButton.Label = selected;
+      ToolbarThemeButton.IsEnabled = _themes.Count > 0;
+      AutomationProperties.SetName(ToolbarThemeButton, "Document theme: " + selected);
+      foreach(Core.Themes.ReaderTheme theme in _themes)
+      {
+         var item = new RadioMenuFlyoutItem { Text = theme.Name, Tag = theme, GroupName = "ToolbarTheme", IsChecked = string.Equals(selected, theme.Name, StringComparison.Ordinal) };
+         AutomationProperties.SetAutomationId(item, "ToolbarTheme:" + theme.Name);
+         item.Click += DocumentTheme_Click;
+         ToolbarThemeFlyout.Items.Add(item);
+      }
+   }
+
+
+
+   /// <summary>The reference launches one existing editor directly; multiple existing editors expose named file/folder choices.</summary>
+   private void RefreshToolbarEditors()
+   {
+      Core.Editors.EditorConfiguration[] editors = _settings.ConfiguredEditors.Where(editor => File.Exists(editor.Executable)).ToArray();
+      string? unavailable = _documentPath is null ? "Open a document before opening it in an editor."
+         : !File.Exists(_documentPath) ? "The document is missing. Restore it before opening an editor."
+         : _settings.ConfiguredEditors.Length == 0 ? "No editor is configured. Choose one in File → Settings → Editors."
+         : editors.Length == 0 ? "The configured editor is unavailable. Choose an installed editor in File → Settings → Editors."
+         : null;
+      ToolbarEditorButton.IsEnabled = unavailable is null;
+      ToolbarEditorButton.Label = editors.Length == 1 ? "Open in " + editors[0].Name : "Open in editor";
+      ToolbarEditorButton.Tag = editors.Length == 1 ? editors[0].Id : null;
+      AutomationProperties.SetName(ToolbarEditorButton, ToolbarEditorButton.Label);
+      string explanation = unavailable ?? "Open the document in a configured editor.";
+      _editorUnavailableTip.Content = explanation;
+      ToolTipService.SetToolTip(ToolbarEditorButton, _editorUnavailableTip);
+      AutomationProperties.SetHelpText(ToolbarEditorButton, explanation);
+      AutomationProperties.SetHelpText(OpenEditorMenuItem, explanation);
+      ToolTipService.SetToolTip(OpenEditorMenuItem, explanation);
+      CloseEditorExplanation();
+      ToolbarEditorButton.Flyout = null;
+      if(editors.Length > 1)
+      {
+         var choices = new MenuFlyout();
+         foreach(Core.Editors.EditorConfiguration editor in editors)
+         {
+            var item = new MenuFlyoutItem { Text = editor.Name + (editor.OpensFolder ? " (folder)" : ""), Tag = editor.Id };
+            AutomationProperties.SetAutomationId(item, "ToolbarEditor:" + editor.Id);
+            item.Click += OpenEditor_Click;
+            choices.Items.Add(item);
+         }
+         ToolbarEditorButton.Flyout = choices;
+      }
+   }
+
+
+
+   /// <summary>The enabled toolbar receives hover even over a disabled child; native ToolTip explains its actual unavailable state.</summary>
+   private void EditorUnavailablePointerMoved(object sender, PointerRoutedEventArgs args)
+   {
+      global::Windows.Foundation.Point point = args.GetCurrentPoint(ToolbarEditorButton).Position;
+      if(!ToolbarEditorButton.IsEnabled && point.X >= 0 && point.Y >= 0 && point.X < ToolbarEditorButton.ActualWidth && point.Y < ToolbarEditorButton.ActualHeight)
+      {
+         if(!_editorHoverDelay.IsEnabled && !_editorUnavailableTip.IsOpen)
+         {
+            _editorHoverDelay.Start();
+         }
+      }
+      else
+      {
+         CloseEditorExplanation();
+      }
+   }
+
+
+
+   /// <summary>Leaving the disabled command or changing its state cancels pending hover and closes the owned tooltip.</summary>
+   private void CloseEditorExplanation()
+   {
+      _editorHoverDelay.Stop();
+      if(_editorUnavailableTip.IsOpen)
+      {
+         _editorUnavailableTip.IsOpen = false;
+      }
+   }
+
+
+
+   /// <summary>A direct editor action uses its stable identity; multiple choices are presented by the native flyout.</summary>
+   private void ToolbarEditor_Click(object sender, RoutedEventArgs e)
+   {
+      if(ToolbarEditorButton.Tag is Guid)
+      {
+         OpenEditor_Click(sender, e);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.Zoom.cs b/src/MarkdownViewr.Windows/MainWindow.Zoom.cs
new file mode 100644
index 0000000..0923dce
--- /dev/null
+++ b/src/MarkdownViewr.Windows/MainWindow.Zoom.cs
@@ -0,0 +1,84 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Owns native menu/toolbar reading zoom without changing independent windows or persisted theme data.</summary>
+public sealed partial class MainWindow
+{
+   private readonly Core.Navigation.ReaderZoom _readerZoom = new();
+   private bool _zooming;
+
+
+
+   /// <summary>Refreshes native controls only after the matching ready document has completed state restoration.</summary>
+   private void InitializeZoom()
+   {
+      _browser.DocumentReady += (_, _) => RefreshZoomCommands();
+      RefreshZoomCommands();
+   }
+
+
+
+   /// <summary>Native menus and compact toolbar buttons use the same bounded command path.</summary>
+   private async void Zoom_Click(object sender, RoutedEventArgs args)
+   {
+      if(sender is FrameworkElement { Tag: string value } && Enum.TryParse(value, out Core.Navigation.ReaderCommand command))
+      {
+         await ChangeZoomAsync(command);
+      }
+   }
+
+
+
+   /// <summary>Serializes font-size changes and lets existing ready-page find/source handlers restore current state.</summary>
+   private async Task ChangeZoomAsync(Core.Navigation.ReaderCommand command)
+   {
+      if(_closed || _zooming || !_browser.IsReady || _documentPath is null)
+      {
+         return;
+      }
+      _zooming = true;
+      try
+      {
+         _readerZoom.Apply(command);
+         await _browser.ApplyZoomAsync(_readerZoom.Scale);
+         HoldSourceSync(preserveSelection: false);
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or ObjectDisposedException or InvalidOperationException)
+      {
+         if(!_closed)
+         {
+            App.Log.Warning("The reading zoom could not be changed.");
+            StatusText.Text = "The reading zoom could not be changed.";
+         }
+      }
+      finally
+      {
+         _zooming = false;
+         RefreshZoomCommands();
+      }
+   }
+
+
+
+   /// <summary>The rounded percentage is an accessible reset control; actual rendering is checked separately.</summary>
+   private void RefreshZoomCommands()
+   {
+      bool enabled = !_closed && !_zooming && _documentPath is not null && _browser.IsReady;
+      foreach(Control control in new Control[] { ZoomInMenu, ZoomOutMenu, ZoomResetMenu, ZoomInButton, ZoomOutButton, ZoomResetButton })
+      {
+         control.IsEnabled = enabled;
+      }
+      string percent = Math.Round(_readerZoom.Scale * 100).ToString(System.Globalization.CultureInfo.InvariantCulture) + "%";
+      ZoomResetButton.Label = percent;
+      Microsoft.UI.Xaml.Automation.AutomationProperties.SetName(ZoomResetButton, "Actual size (" + percent + ")");
+   }
+}
diff --git a/src/MarkdownViewr.Windows/MainWindow.xaml b/src/MarkdownViewr.Windows/MainWindow.xaml
index cb58490..e53d936 100644
--- a/src/MarkdownViewr.Windows/MainWindow.xaml
+++ b/src/MarkdownViewr.Windows/MainWindow.xaml
@@ -2,50 +2,223 @@
 <Window
    x:Class="MarkdownViewr.Windows.MainWindow"
    xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
-   xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml">
+   xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
+   xmlns:local="using:MarkdownViewr.Windows"
+   xmlns:primitives="using:Microsoft.UI.Xaml.Controls.Primitives">
 
    <Window.SystemBackdrop>
       <MicaBackdrop />
    </Window.SystemBackdrop>
 
-   <Grid x:Name="RootGrid">
+   <Grid x:Name="RootGrid" SizeChanged="ReadingArea_SizeChanged" KeyboardAcceleratorPlacementMode="Hidden">
+      <Grid.KeyboardAccelerators>
+         <KeyboardAccelerator Key="F" Modifiers="Control" Invoked="Find_Invoked" />
+         <KeyboardAccelerator Key="P" Modifiers="Control" Invoked="Print_Invoked" />
+      </Grid.KeyboardAccelerators>
       <Grid.RowDefinitions>
+         <RowDefinition Height="Auto" />
+         <RowDefinition Height="Auto" />
          <RowDefinition Height="Auto" />
          <RowDefinition Height="*" />
+         <RowDefinition Height="Auto" />
       </Grid.RowDefinitions>
 
-      <MenuBar>
-         <MenuBarItem Title="File">
-            <MenuFlyoutItem x:Name="ExitMenuItem" Text="Exit" Click="Exit_Click" />
-         </MenuBarItem>
-         <MenuBarItem Title="View">
-            <RadioMenuFlyoutItem x:Name="ThemeSystem" Text="System theme" GroupName="Theme" Tag="System" Click="Theme_Click" />
-            <RadioMenuFlyoutItem x:Name="ThemeLight" Text="Light theme" GroupName="Theme" Tag="Light" Click="Theme_Click" />
-            <RadioMenuFlyoutItem x:Name="ThemeDark" Text="Dark theme" GroupName="Theme" Tag="Dark" Click="Theme_Click" />
-            <MenuFlyoutSeparator />
-            <ToggleMenuFlyoutItem x:Name="SplashToggle" Text="Show splash at startup" Click="Splash_Click" />
-            <ToggleMenuFlyoutItem x:Name="UpdateCheckToggle" Text="Check for updates at startup" Click="UpdateCheck_Click" />
-         </MenuBarItem>
-         <MenuBarItem Title="Help">
-            <MenuFlyoutItem x:Name="CheckForUpdatesMenuItem" Text="Check for updates" Click="CheckForUpdates_Click" />
-            <MenuFlyoutItem x:Name="ActivityLogMenuItem" Text="Activity log" Click="ActivityLog_Click" />
-            <MenuFlyoutSeparator />
-            <MenuFlyoutItem x:Name="AboutMenuItem" Text="About MarkdownViewr" Click="About_Click" />
-         </MenuBarItem>
-      </MenuBar>
+      <Grid>
+         <Grid.ColumnDefinitions>
+            <ColumnDefinition Width="*" />
+            <ColumnDefinition Width="Auto" />
+         </Grid.ColumnDefinitions>
+         <MenuBar>
+            <MenuBarItem Title="File" AccessKey="F">
+               <MenuFlyoutItem x:Name="NewWindowMenuItem" Text="New window" Click="NewWindow_Click">
+                  <MenuFlyoutItem.KeyboardAccelerators>
+                     <KeyboardAccelerator Key="N" Modifiers="Control" />
+                  </MenuFlyoutItem.KeyboardAccelerators>
+               </MenuFlyoutItem>
+               <MenuFlyoutItem x:Name="OpenMenuItem" Text="Open..." Click="Open_Click">
+                  <MenuFlyoutItem.KeyboardAccelerators>
+                     <KeyboardAccelerator Key="O" Modifiers="Control" />
+                  </MenuFlyoutItem.KeyboardAccelerators>
+               </MenuFlyoutItem>
+               <MenuFlyoutSubItem x:Name="RecentDocumentsMenu" Text="Recent files" />
+               <MenuFlyoutItem x:Name="ReloadMenuItem" Text="Reload" Click="Reload_Click" IsEnabled="False" />
+               <MenuFlyoutItem x:Name="PrintMenuItem" Text="Print..." Click="Print_Click" IsEnabled="False" KeyboardAcceleratorTextOverride="Ctrl+P" />
+               <MenuFlyoutSeparator />
+               <MenuFlyoutItem x:Name="OpenEditorMenuItem" Text="Open in editor" Click="OpenEditor_Click" IsEnabled="False" />
+               <MenuFlyoutSubItem x:Name="OpenEditorChoices" Text="Open in editor" Visibility="Collapsed" />
+               <MenuFlyoutItem x:Name="SettingsMenuItem" Text="Settings…" AccessKey="S" Click="Settings_Click" />
+               <MenuFlyoutSeparator />
+               <MenuFlyoutItem x:Name="CloseWindowMenuItem" Text="Close window" Click="CloseWindow_Click">
+                  <MenuFlyoutItem.KeyboardAccelerators>
+                     <KeyboardAccelerator Key="W" Modifiers="Control" />
+                  </MenuFlyoutItem.KeyboardAccelerators>
+               </MenuFlyoutItem>
+               <MenuFlyoutItem x:Name="ExitMenuItem" Text="Exit" Click="Exit_Click" />
+            </MenuBarItem>
+            <MenuBarItem Title="Edit">
+               <MenuFlyoutItem x:Name="FindMenuItem" Text="Find..." Click="Find_Click" KeyboardAcceleratorTextOverride="Ctrl+F" />
+            </MenuBarItem>
+            <MenuBarItem Title="View">
+               <MenuFlyoutItem x:Name="ZoomInMenu" Text="Zoom in" Tag="ZoomIn" Click="Zoom_Click" KeyboardAcceleratorTextOverride="Ctrl++" IsEnabled="False" />
+               <MenuFlyoutItem x:Name="ZoomOutMenu" Text="Zoom out" Tag="ZoomOut" Click="Zoom_Click" KeyboardAcceleratorTextOverride="Ctrl+-" IsEnabled="False" />
+               <MenuFlyoutItem x:Name="ZoomResetMenu" Text="Actual size" Tag="ZoomReset" Click="Zoom_Click" KeyboardAcceleratorTextOverride="Ctrl+0" IsEnabled="False" />
+               <MenuFlyoutSeparator />
+               <ToggleMenuFlyoutItem x:Name="SourceToggle" Text="Markdown source" Click="Source_Click" />
+               <ToggleMenuFlyoutItem x:Name="OutlineToggle" Text="Table of contents" Click="Outline_Click" />
+               <MenuFlyoutSeparator />
+               <MenuFlyoutSubItem x:Name="DocumentThemesMenu" Text="Document theme" />
+               <MenuFlyoutItem x:Name="NextDocumentThemeMenu" Text="Next document theme" Click="NextDocumentTheme_Click" KeyboardAcceleratorTextOverride="Ctrl+Shift+Down" />
+               <MenuFlyoutItem x:Name="PreviousDocumentThemeMenu" Text="Previous document theme" Click="PreviousDocumentTheme_Click" KeyboardAcceleratorTextOverride="Ctrl+Shift+Up" />
+               <MenuFlyoutSeparator />
+               <MenuFlyoutSubItem x:Name="MarkdownExtensionsMenu" Text="Markdown extensions">
+                  <ToggleMenuFlyoutItem x:Name="HighlightExtension" Text="Highlight (==text==)" Tag="Highlight" Click="MarkdownExtension_Click" />
+                  <ToggleMenuFlyoutItem x:Name="SuperscriptExtension" Text="Superscript (^text^)" Tag="Superscript" Click="MarkdownExtension_Click" />
+                  <ToggleMenuFlyoutItem x:Name="SubscriptExtension" Text="Subscript (~text~)" Tag="Subscript" Click="MarkdownExtension_Click" />
+                  <ToggleMenuFlyoutItem x:Name="UnderlineExtension" Text="Underline (++text++)" Tag="Underline" Click="MarkdownExtension_Click" />
+               </MenuFlyoutSubItem>
+               <MenuFlyoutSubItem x:Name="FrontmatterMenu" Text="Frontmatter">
+                  <RadioMenuFlyoutItem x:Name="FrontmatterHide" Text="Hide" GroupName="Frontmatter" Tag="Hide" Click="Frontmatter_Click" />
+                  <RadioMenuFlyoutItem x:Name="FrontmatterMetadata" Text="Show as metadata" GroupName="Frontmatter" Tag="Metadata" Click="Frontmatter_Click" />
+                  <RadioMenuFlyoutItem x:Name="FrontmatterMarkdown" Text="Show as Markdown" GroupName="Frontmatter" Tag="Markdown" Click="Frontmatter_Click" />
+               </MenuFlyoutSubItem>
+               <MenuFlyoutSeparator />
+               <RadioMenuFlyoutItem x:Name="ThemeSystem" Text="System theme" GroupName="Theme" Tag="System" Click="Theme_Click" />
+               <RadioMenuFlyoutItem x:Name="ThemeLight" Text="Light theme" GroupName="Theme" Tag="Light" Click="Theme_Click" />
+               <RadioMenuFlyoutItem x:Name="ThemeDark" Text="Dark theme" GroupName="Theme" Tag="Dark" Click="Theme_Click" />
+            </MenuBarItem>
+            <MenuBarItem Title="Help" AccessKey="H">
+               <MenuFlyoutItem Text="View on GitHub" AccessKey="G" AutomationProperties.AutomationId="MenuGitHub" Click="GitHub_Click" />
+               <MenuFlyoutItem Text="Submit an issue…" AccessKey="I" AutomationProperties.AutomationId="MenuSubmitIssue" ToolTipService.ToolTip="Report a bug or request a feature on GitHub" Click="SubmitIssue_Click" />
+               <MenuFlyoutItem Text="Community support…" AccessKey="S" AutomationProperties.AutomationId="MenuCommunitySupport" ToolTipService.ToolTip="Ask a question or share tips in GitHub Discussions" Click="CommunitySupport_Click" />
+               <MenuFlyoutSeparator />
+               <MenuFlyoutItem x:Name="CheckForUpdatesMenuItem" Text="Check for updates" Click="CheckForUpdates_Click" />
+               <MenuFlyoutItem x:Name="ActivityLogMenuItem" Text="Activity log" Click="ActivityLog_Click" />
+               <MenuFlyoutSeparator />
+               <MenuFlyoutItem x:Name="AboutMenuItem" Text="About MarkdownViewr" Click="About_Click" />
+            </MenuBarItem>
+         </MenuBar>
+      </Grid>
 
-      <!-- The example feature, bound to GreetingViewModel in MarkdownViewr.Windows.Core. Replace it with
-           the app's real content. -->
-      <StackPanel Grid.Row="1" Spacing="12" Padding="32" MaxWidth="560" HorizontalAlignment="Left">
-         <TextBlock Text="MarkdownViewr" Style="{ThemeResource TitleTextBlockStyle}" />
-         <TextBlock TextWrapping="Wrap" Text="A Windows Markdown viewer with live reload, themes and document navigation." />
-         <StackPanel Orientation="Horizontal" Spacing="8">
-            <TextBox x:Name="NameBox" Width="260" PlaceholderText="Your name" Text="{x:Bind ViewModel.Name, Mode=TwoWay, UpdateSourceTrigger=PropertyChanged}" />
-            <Button x:Name="GreetButton" Content="Greet" Command="{x:Bind ViewModel.GreetCommand}" />
+      <CommandBar x:Name="ReaderToolbar" Grid.Row="1" Height="48" Margin="12,4,12,4" HorizontalAlignment="Left" DefaultLabelPosition="Right" IsDynamicOverflowEnabled="True" AutomationProperties.Name="Document toolbar">
+         <CommandBar.Content>
+            <StackPanel Orientation="Horizontal" VerticalAlignment="Center" Spacing="4" Margin="0,0,8,0">
+               <ToggleButton x:Name="ToolbarOutlineButton" Height="48" Padding="12,0" VerticalAlignment="Center" Click="ToolbarOutline_Click" AutomationProperties.Name="Table of contents" ToolTipService.ToolTip="Show table of contents">
+                  <StackPanel Orientation="Horizontal" Spacing="8">
+                     <SymbolIcon Symbol="Bullets" />
+                     <TextBlock Text="Contents" VerticalAlignment="Center" />
+                  </StackPanel>
+               </ToggleButton>
+               <Button x:Name="ToolbarPrintButton" Height="48" Padding="12,0" VerticalAlignment="Center" Click="Print_Click" IsEnabled="False" AutomationProperties.Name="Print" ToolTipService.ToolTip="Print document">
+                  <StackPanel Orientation="Horizontal" Spacing="8">
+                     <SymbolIcon Symbol="Print" />
+                     <TextBlock Text="Print" VerticalAlignment="Center" />
+                  </StackPanel>
+               </Button>
+            </StackPanel>
+         </CommandBar.Content>
+         <AppBarToggleButton x:Name="ToolbarSourceButton" Icon="Document" Label="Source" Click="ToolbarSource_Click" AutomationProperties.Name="Markdown source" ToolTipService.ToolTip="Show Markdown source" />
+         <AppBarSeparator />
+         <AppBarButton x:Name="ZoomOutButton" Icon="ZoomOut" Label="Zoom out" Tag="ZoomOut" Click="Zoom_Click" IsEnabled="False" AutomationProperties.Name="Zoom out" ToolTipService.ToolTip="Zoom out (Ctrl+-)" />
+         <AppBarButton x:Name="ZoomResetButton" Icon="Refresh" Label="100%" Tag="ZoomReset" Click="Zoom_Click" IsEnabled="False" AutomationProperties.Name="Actual size" ToolTipService.ToolTip="Actual size (Ctrl+0)" />
+         <AppBarButton x:Name="ZoomInButton" Icon="ZoomIn" Label="Zoom in" Tag="ZoomIn" Click="Zoom_Click" IsEnabled="False" AutomationProperties.Name="Zoom in" ToolTipService.ToolTip="Zoom in (Ctrl++)" />
+         <AppBarSeparator />
+         <AppBarButton x:Name="ToolbarThemeButton" Label="Theme" MaxWidth="220" ToolTipService.ToolTip="Document theme">
+            <AppBarButton.Icon>
+               <FontIcon FontFamily="Segoe Fluent Icons" Glyph="&#xE790;" />
+            </AppBarButton.Icon>
+            <AppBarButton.Flyout>
+               <MenuFlyout x:Name="ToolbarThemeFlyout" />
+            </AppBarButton.Flyout>
+         </AppBarButton>
+         <AppBarButton x:Name="ToolbarEditorButton" Icon="Edit" Label="Open in editor" Click="ToolbarEditor_Click" IsEnabled="False" AutomationProperties.Name="Open in editor" ToolTipService.ToolTip="Configure an editor in File → Settings → Editors" />
+      </CommandBar>
+
+      <Grid x:Name="FindBar" Grid.Row="2" Visibility="Collapsed" Margin="16,8" ColumnSpacing="8">
+         <Grid.ColumnDefinitions>
+            <ColumnDefinition Width="*" />
+            <ColumnDefinition Width="Auto" />
+            <ColumnDefinition Width="Auto" />
+            <ColumnDefinition Width="Auto" />
+            <ColumnDefinition Width="Auto" />
+         </Grid.ColumnDefinitions>
+         <TextBox x:Name="FindText" PlaceholderText="Find in document and source" MaxLength="256" TextChanged="FindText_Changed" KeyDown="FindText_KeyDown" AutomationProperties.Name="Find in document and source" />
+         <TextBlock x:Name="FindCountText" Grid.Column="1" Text="0 of 0" VerticalAlignment="Center" AutomationProperties.Name="{Binding Text, ElementName=FindCountText}" AutomationProperties.LiveSetting="Polite" />
+         <Button x:Name="FindPreviousButton" Grid.Column="2" Content="Previous" Click="FindPrevious_Click" IsEnabled="False" />
+         <Button x:Name="FindNextButton" Grid.Column="3" Content="Next" Click="FindNext_Click" IsEnabled="False" />
+         <Button x:Name="FindCloseButton" Grid.Column="4" Content="Close find" Click="FindClose_Click" />
+      </Grid>
+      <Grid x:Name="DocumentFooter" Grid.Row="4" Margin="16,4" ColumnSpacing="12">
+         <Grid.ColumnDefinitions>
+            <ColumnDefinition Width="*" />
+            <ColumnDefinition Width="Auto" />
+         </Grid.ColumnDefinitions>
+         <TextBlock x:Name="StatusText" Margin="0,4" VerticalAlignment="Center" Text="Starting the document surface..." TextWrapping="Wrap" Foreground="{ThemeResource TextFillColorSecondaryBrush}" AutomationProperties.AutomationId="StatusText" AutomationProperties.Name="{Binding Text, ElementName=StatusText}" AutomationProperties.AccessibilityView="Content" AutomationProperties.LiveSetting="Polite" />
+         <StackPanel Grid.Column="1" Orientation="Horizontal" Spacing="8" VerticalAlignment="Center">
+            <TextBlock x:Name="FileModifiedText" FontSize="12" VerticalAlignment="Center" Foreground="{ThemeResource TextFillColorSecondaryBrush}" Visibility="Collapsed" AutomationProperties.AutomationId="FileModifiedText" AutomationProperties.Name="{Binding Text, ElementName=FileModifiedText}" />
+            <HyperlinkButton x:Name="FileStaleButton" Padding="0,4" Visibility="Collapsed" Click="Reload_Click" AutomationProperties.AutomationId="FileStaleButton" AutomationProperties.LiveSetting="Polite" />
+            <HyperlinkButton x:Name="OpenDocumentFolderButton" Content="Open folder" Padding="0,4" IsEnabled="False" Click="OpenDocumentFolder_Click" AutomationProperties.AutomationId="OpenDocumentFolderButton" ToolTipService.ToolTip="Open this file's containing folder in Explorer" />
          </StackPanel>
-         <TextBlock x:Name="GreetingText" Text="{x:Bind ViewModel.Message, Mode=OneWay}" Style="{ThemeResource SubtitleTextBlockStyle}" />
-         <Button x:Name="ThrowButton" Content="Throw an unhandled exception" Click="Throw_Click" />
-         <TextBlock x:Name="StatusText" Foreground="{ThemeResource TextFillColorSecondaryBrush}" />
-      </StackPanel>
+      </Grid>
+      <Grid Grid.Row="3">
+         <Grid.ColumnDefinitions>
+            <ColumnDefinition x:Name="OutlineColumn" Width="0" />
+            <ColumnDefinition x:Name="OutlineDividerColumn" Width="0" />
+            <ColumnDefinition x:Name="DocumentColumn" Width="*" />
+            <ColumnDefinition x:Name="SourceDividerColumn" Width="0" />
+            <ColumnDefinition x:Name="SourceColumn" Width="0" />
+         </Grid.ColumnDefinitions>
+         <Grid x:Name="OutlinePanel" Visibility="Collapsed" Padding="8">
+            <Grid.RowDefinitions>
+               <RowDefinition Height="Auto" />
+               <RowDefinition Height="*" />
+               <RowDefinition Height="Auto" />
+            </Grid.RowDefinitions>
+            <StackPanel Spacing="8">
+               <TextBlock Text="Table of contents" Style="{ThemeResource SubtitleTextBlockStyle}" />
+               <ComboBox x:Name="OutlineDepth" Header="Heading depth" HorizontalAlignment="Stretch" SelectionChanged="OutlineDepth_Changed" AutomationProperties.AutomationId="OutlineDepth">
+                  <ComboBoxItem Content="Level 1" />
+                  <ComboBoxItem Content="Levels 1–2" />
+                  <ComboBoxItem Content="Levels 1–3" />
+                  <ComboBoxItem Content="Levels 1–4" />
+                  <ComboBoxItem Content="Levels 1–5" />
+                  <ComboBoxItem Content="Levels 1–6" />
+               </ComboBox>
+            </StackPanel>
+            <ListView x:Name="OutlineList" Grid.Row="1" Margin="0,8" SelectionChanged="OutlineSelection_Changed" IsItemClickEnabled="True" ItemClick="Outline_ItemClick" AutomationProperties.Name="Document headings" />
+            <StackPanel Grid.Row="2" Spacing="8">
+               <Button x:Name="ToggleSection" Content="Collapse / expand section" HorizontalAlignment="Stretch" Click="ToggleSection_Click" IsEnabled="False" />
+               <Button x:Name="CollapseSections" Content="Collapse all" HorizontalAlignment="Stretch" Click="CollapseSections_Click" />
+               <Button x:Name="ExpandSections" Content="Expand all" HorizontalAlignment="Stretch" Click="ExpandSections_Click" />
+            </StackPanel>
+         </Grid>
+         <primitives:Thumb x:Name="OutlineDivider" Grid.Column="1" Background="{ThemeResource DividerStrokeColorDefaultBrush}" DragDelta="OutlineDivider_DragDelta" DragCompleted="OutlineDivider_DragCompleted" AutomationProperties.Name="Resize table of contents">
+            <primitives:Thumb.Template>
+               <ControlTemplate TargetType="primitives:Thumb">
+                  <Border Background="{TemplateBinding Background}" />
+               </ControlTemplate>
+            </primitives:Thumb.Template>
+         </primitives:Thumb>
+         <primitives:Thumb x:Name="SourceDivider" Grid.Column="3" Background="{ThemeResource DividerStrokeColorDefaultBrush}" DragDelta="SourceDivider_DragDelta" KeyDown="SourceDivider_KeyDown" AutomationProperties.Name="Resize Markdown source" AutomationProperties.HelpText="Use Left and Right arrow keys to resize; Home restores equal document and source widths.">
+            <primitives:Thumb.Template>
+               <ControlTemplate TargetType="primitives:Thumb">
+                  <Border x:Name="SourceGrip" Background="{TemplateBinding Background}" BorderBrush="{ThemeResource ControlStrongStrokeColorDefaultBrush}">
+                     <VisualStateManager.VisualStateGroups>
+                        <VisualStateGroup x:Name="FocusStates">
+                           <VisualState x:Name="Unfocused" />
+                           <VisualState x:Name="PointerFocused" />
+                           <VisualState x:Name="Focused">
+                              <VisualState.Setters>
+                                 <Setter Target="SourceGrip.BorderThickness" Value="2" />
+                              </VisualState.Setters>
+                           </VisualState>
+                        </VisualStateGroup>
+                     </VisualStateManager.VisualStateGroups>
+                  </Border>
+               </ControlTemplate>
+            </primitives:Thumb.Template>
+         </primitives:Thumb>
+         <local:SourceTextView x:Name="SourceText" Grid.Column="4" Visibility="Collapsed" IsReadOnly="True" TextWrapping="NoWrap" FontFamily="Consolas" Padding="12" ScrollViewer.HorizontalScrollBarVisibility="Auto" ScrollViewer.VerticalScrollBarVisibility="Auto" AutomationProperties.Name="Markdown source" />
+         <WebView2 x:Name="DocumentView" Grid.Column="2" Loaded="DocumentView_Loaded" AutomationProperties.Name="Markdown document" />
+      </Grid>
    </Grid>
 </Window>
diff --git a/src/MarkdownViewr.Windows/MainWindow.xaml.cs b/src/MarkdownViewr.Windows/MainWindow.xaml.cs
index ca70048..e26f58f 100644
--- a/src/MarkdownViewr.Windows/MainWindow.xaml.cs
+++ b/src/MarkdownViewr.Windows/MainWindow.xaml.cs
@@ -7,6 +7,8 @@ using KofTwentyTwo.AppKit.Settings;
 using KofTwentyTwo.AppKit.Updates;
 using KofTwentyTwo.AppKit.WinUI;
 using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.Windows.Storage.Pickers;
 
 
 namespace MarkdownViewr.Windows;
@@ -15,21 +17,50 @@ namespace MarkdownViewr.Windows;
 /// The main window: the AppKit shell (splash, About, activity log, update checks, theme)
 /// around the app's content. Handlers here only route to AppKit or to view models in Core.
 /// </summary>
-public sealed partial class MainWindow : Window
+public sealed partial class MainWindow : Window, IDisposable
 {
    private readonly AppSettings _settings = AppIdentity.SettingsStore.Load();
    private readonly UpdateCoordinator _updates;
+   private readonly DocumentBrowser _browser;
+   private Task? _browserInitialization;
+   private string? _documentPath;
+   private readonly string? _requiredDocumentRoot;
+   private string? _documentPhysicalRoot;
+   private bool _loaded;
+   private bool _closed;
+   private readonly Core.Documents.DocumentLoadScheduler _loads = new();
+   private DocumentWatcher? _watcher;
+   private IReadOnlyList<Core.Themes.ReaderTheme> _themes = [];
 
 
 
-   /// <summary>Sizes and brands the window, creates the view model, shows the splash, and schedules the quiet startup update check.</summary>
-   public MainWindow()
+   /// <summary>Sizes and brands the window, creates the document host, shows the splash, and schedules the quiet startup update check.</summary>
+   public MainWindow(string? documentPath = null, bool initialWindow = true, string? requiredDocumentRoot = null)
    {
-      ViewModel = new GreetingViewModel(new GreetingService(), _settings, AppIdentity.SettingsStore, App.Log);
+      _initialDocumentPath = documentPath;
+      _requiredDocumentRoot = requiredDocumentRoot;
+      _settings.ShowOutline = _settings.ShowOutlineByDefault;
+      _settings.ShowSource = _settings.ShowSourceByDefault;
+      _lastSavedSettings = Core.SettingsChanges.Copy(_settings);
       InitializeComponent();
+      RefreshRecentDocuments();
+      _themes = Core.Themes.ThemeManagement.Enabled(_settings);
+      _browser = new DocumentBrowser(DocumentView, message => StatusText.Text = message, ActiveDocumentTheme(), _settings.ReadingAppearance, (path, root) => ((App)Application.Current).OpenLinkedDocumentAsync(this, path, root));
+      CreateDocumentThemeMenu();
+      InitializeOutline();
+      InitializeSource();
+      InitializeFind();
+      InitializeKeyboard();
+      InitializeZoom();
+      InitializePrinting();
+      InitializeMarkdownExtensions();
+      RefreshEditorCommands();
+      InitializeToolbar();
+      InitializeInputDiagnostics();
+      InitializeDocumentFooter();
+      (_settings.FrontmatterKind switch { Core.Documents.FrontmatterMode.Metadata => FrontmatterMetadata, Core.Documents.FrontmatterMode.Markdown => FrontmatterMarkdown, _ => FrontmatterHide }).IsChecked = true;
       Title = AppIdentity.Info.DisplayName;
-      this.ResizeForDpi(900, 600);
-      this.SetMinimumSize(640, 420);
+      FitInitialWindow();
       this.SetAppIcon(AppIdentity.Info);
 
       _updates = new UpdateCoordinator(
@@ -38,14 +69,15 @@ public sealed partial class MainWindow : Window
          AppIdentity.Info.DisplayName,
          App.Log);
 
-      SplashToggle.IsChecked = _settings.ShowSplashScreen;
-      UpdateCheckToggle.IsChecked = _settings.CheckForUpdatesOnStartup;
       (_settings.ThemeKind switch { AppTheme.Light => ThemeLight, AppTheme.Dark => ThemeDark, _ => ThemeSystem }).IsChecked = true;
 
-      SplashOverlay.ShowOver(RootGrid, AppIdentity.Info, _settings);
-      Closed += (_, _) => LogWindow.CloseCurrent(); // a log-only process would linger otherwise
+      if(initialWindow)
+      {
+         SplashOverlay.ShowOver(RootGrid, AppIdentity.Info, _settings);
+      }
+      Closed += (_, _) => Dispose();
 
-      if(_settings.CheckForUpdatesOnStartup)
+      if(initialWindow && _settings.CheckForUpdatesOnStartup)
       {
          // The constructor runs on the UI thread, so the check resumes there to show dialogs.
          _ = CheckForUpdatesAfterStartupAsync();
@@ -54,9 +86,26 @@ public sealed partial class MainWindow : Window
 
 
 
-   /// <summary>The greeting screen's state; x:Bind targets it.</summary>
-   public GreetingViewModel ViewModel { get; }
-
+   /// <summary>Keeps the full initial window and status line inside the current monitor's working area.</summary>
+   private void FitInitialWindow()
+   {
+      global::Windows.Graphics.RectInt32 area = Microsoft.UI.Windowing.DisplayArea.GetFromWindowId(AppWindow.Id, Microsoft.UI.Windowing.DisplayAreaFallback.Primary).WorkArea;
+      double scale = this.DpiScale();
+      int width = Math.Min((int)(1100 * scale), area.Width);
+      int height = Math.Min((int)(760 * scale), area.Height);
+      if(AppWindow.Presenter is Microsoft.UI.Windowing.OverlappedPresenter presenter)
+      {
+         presenter.PreferredMinimumWidth = Math.Min((int)(640 * scale), area.Width);
+         presenter.PreferredMinimumHeight = Math.Min((int)(420 * scale), area.Height);
+      }
+      AppWindow.MoveAndResize(new global::Windows.Graphics.RectInt32
+      {
+         X = area.X + (area.Width - width) / 2,
+         Y = area.Y + (area.Height - height) / 2,
+         Width = width,
+         Height = height,
+      });
+   }
 
 
    /// <summary>
@@ -71,34 +120,381 @@ public sealed partial class MainWindow : Window
 
 
 
-   /// <summary>File, Exit.</summary>
-   private void Exit_Click(object sender, RoutedEventArgs e) => Close();
+   /// <summary>Initializes the browser once and opens a document supplied as a literal process argument.</summary>
+   private async void DocumentView_Loaded(object sender, RoutedEventArgs e)
+   {
+      if(_loaded)
+      {
+         return;
+      }
+      _loaded = true;
+      _browserInitialization ??= _browser.InitializeAsync();
+      try
+      {
+         await _browserInitialization;
+         if(_closed)
+         {
+            return;
+         }
+         StatusText.Text = _activationError ? "One or more startup file paths could not be opened." : "Choose File → Open to read a Markdown document.";
+         if(_initialDocumentPath is { } path)
+         {
+            await OpenDocumentAsync(path);
+            _initialDocumentPath = null;
+         }
+      }
+      catch(Exception exception) when(exception is IOException or System.Runtime.InteropServices.COMException)
+      {
+         StatusText.Text = "The document surface could not start. Check that the Microsoft Edge WebView2 Runtime is installed.";
+         App.Log.Error("The document surface could not start.", exception);
+      }
+   }
 
 
 
+   /// <summary>Shows the Windows picker in this window; cancellation leaves the current document intact.</summary>
+   private async void Open_Click(object sender, RoutedEventArgs e)
+   {
+      try
+      {
+         var picker = new FileOpenPicker(AppWindow.Id);
+         foreach(string extension in new[] { ".md", ".markdown", ".mdown", ".mkd", ".txt" })
+         {
+            picker.FileTypeFilter.Add(extension);
+         }
+         IReadOnlyList<PickFileResult> files = await picker.PickMultipleFilesAsync();
+         foreach(PickFileResult file in files)
+         {
+            if(_closed)
+            {
+               return;
+            }
+            await ((App)Application.Current).OpenDocumentAsync(this, file.Path);
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or InvalidOperationException)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "The file picker could not complete. Please try again.";
+            App.Log.Warning(FormattableString.Invariant($"The native document picker could not complete. Exception={exception.GetType().Name}; HRESULT=0x{exception.HResult:X8}."));
+         }
+      }
+   }
+
+
+
+   /// <summary>Reopens the selected file explicitly and retains the current scroll position.</summary>
+   private async void Reload_Click(object sender, RoutedEventArgs e)
+   {
+      if(_documentPath is not null)
+      {
+         await OpenDocumentAsync(_documentPath, reload: true);
+      }
+   }
+
+
+
+   /// <summary>Reads and parses outside the UI thread; a failed open preserves the previous document.</summary>
+   internal async Task OpenDocumentAsync(string path, bool reload = false)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      if(!_loads.TryBegin(path, reload))
+      {
+         return;
+      }
+      OpenMenuItem.IsEnabled = false;
+      ReloadMenuItem.IsEnabled = false;
+      FrontmatterMenu.IsEnabled = false;
+      try
+      {
+         _browserInitialization ??= _browser.InitializeAsync();
+         await _browserInitialization;
+         Core.Documents.DocumentViewport viewport = reload ? await _browser.CaptureViewportAsync() : default;
+         (DocumentFiles files, Core.Documents.DocumentOutline outline) = await ReadDocumentAsync(path, _settings.FrontmatterKind, _settings.MarkdownExtensions, _requiredDocumentRoot);
+         if(_closed)
+         {
+            return;
+         }
+         ShowDocument(files, outline, path, viewport, reload);
+      }
+      catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or ArgumentException or NotSupportedException or System.Runtime.InteropServices.COMException)
+      {
+         App.Log.Warning(FormattableString.Invariant($"Could not open a Markdown document. Reload={reload}; exception={exception.GetType().Name}; HRESULT=0x{exception.HResult:X8}; UIThread={DispatcherQueue.HasThreadAccess}."));
+         if(!_closed)
+         {
+            if(reload)
+            {
+               MarkDocumentStale();
+            }
+            StatusText.Text = reload && exception is FileNotFoundException
+               ? "The document is missing. Showing the last version; it will reload when restored."
+               : reload
+                  ? "The document could not be reloaded. Showing the previous version; use File → Reload."
+                  : "Could not open this document: " + exception.Message;
+         }
+
+      }
+      finally
+      {
+         (string Path, bool Reload)? next = _loads.Complete(_documentPath);
+         if(!_closed)
+         {
+            if(next is { } request)
+            {
+               await OpenDocumentAsync(request.Path, request.Reload);
+            }
+            else
+            {
+               OpenMenuItem.IsEnabled = true;
+               FrontmatterMenu.IsEnabled = true;
+               ReloadMenuItem.IsEnabled = _documentPath is not null;
+            }
+         }
+      }
+   }
+
+
+
+   /// <summary>Directory watching survives atomic replacement and file recreation; callbacks only enqueue UI work.</summary>
+   private void StartWatching()
+   {
+      _watcher?.Dispose();
+      _watcher = null;
+      string watchedPath = _documentPath!;
+      try
+      {
+         _watcher = new DocumentWatcher(
+            _documentPath!,
+            () => DispatcherQueue.TryEnqueue(() =>
+            {
+               if(string.Equals(_documentPath, watchedPath, StringComparison.Ordinal))
+               {
+                  MarkDocumentStale();
+                  _ = OpenDocumentAsync(watchedPath, reload: true);
+               }
+            }),
+            () => DispatcherQueue.TryEnqueue(() =>
+            {
+               if(!_closed)
+               {
+                  StatusText.Text = "Live reload encountered a filesystem error. Use File → Reload if changes stop appearing.";
+                  MarkDocumentStale();
+                  App.Log.Warning("The document watcher reported a filesystem error.");
+               }
+            }));
+      }
+      catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or ArgumentException)
+      {
+         StatusText.Text = "Live reload is unavailable for this folder. Use File → Reload.";
+         MarkDocumentStale();
+         App.Log.Warning("Could not start the document watcher.");
+      }
+   }
+
+
+
+   /// <summary>Retries only transient missing/sharing violations from an editor's replace/save operation.</summary>
+   private static async Task<(DocumentFiles Files, Core.Documents.DocumentOutline Outline)> ReadDocumentAsync(string path, Core.Documents.FrontmatterMode frontmatter, Core.Documents.MarkdownExtensions extensions, string? requiredDocumentRoot)
+   {
+      for(int attempt = 0; ; attempt++)
+      {
+         try
+         {
+            return await Task.Run(() =>
+            {
+               var document = DocumentFiles.Open(path, requiredDocumentRoot);
+               return (document, new Core.Documents.DocumentOutline(document.Markdown, frontmatter, extensions));
+            });
+         }
+         catch(IOException exception) when(attempt < 3 && (exception.HResult & 0xFFFF) is 2 or 3 or 32 or 33)
+         {
+            await Task.Delay(200);
+         }
+      }
+   }
+
+
+
+   /// <summary>Commits a fully parsed snapshot and changes the watcher only when the selected document changes.</summary>
+   private void ShowDocument(DocumentFiles files, Core.Documents.DocumentOutline outline, string path, Core.Documents.DocumentViewport viewport, bool reload)
+   {
+      _browser.Show(files, outline.Html, Path.GetFileName(path), viewport, outline.Headings);
+      _find = null;
+      _findGeneration++;
+      _documentKeyboard?.Reset();
+      _sourceMarkdown = files.Markdown;
+      _outline = outline;
+      _sourceDocument = new Core.Documents.DocumentSourceText(_sourceMarkdown, outline);
+      RefreshSource();
+      RefreshOutline();
+      _documentPath = Path.GetFullPath(path);
+      _documentPhysicalRoot = files.PhysicalRoot;
+      CommitDocumentFooter(files);
+      RefreshEditorCommands();
+      Title = Path.GetFileName(path) + " — " + AppIdentity.Info.DisplayName;
+      StatusText.Text = (reload ? "Reloaded " : "Opened ") + Path.GetFileName(path);
+      App.Log.Info(reload ? "Reloaded a Markdown document." : "Opened a Markdown document.");
+      if(!reload)
+      {
+         StartWatching();
+         if(!((App)Application.Current).RecordRecentDocument(_documentPath))
+         {
+            StatusText.Text = "Opened the document, but could not save recent files.";
+         }
+      }
+   }
+
+
+
+   /// <summary>Closing the window releases its browser and directory subscription before any queued work can run.</summary>
+   public void Dispose()
+   {
+      if(!_closed)
+      {
+         _closed = true;
+         _findGeneration++;
+         _findDelay?.Stop();
+         _watcher?.Dispose();
+         _watcher = null;
+         _footerPoll.Stop();
+         CloseEditorExplanation();
+         _settingsWindow?.Close();
+         SourceText.Dispose();
+         _browser.Close();
+      }
+      GC.SuppressFinalize(this);
+   }
+
+
+
+   /// <summary>File, Exit.</summary>
+   private void Exit_Click(object sender, RoutedEventArgs e) => ((App)Application.Current).CloseDocumentWindows();
+
+
+
+   /// <summary>Builds the original document theme choices without mixing them with the AppKit shell theme.</summary>
+   private void CreateDocumentThemeMenu()
+   {
+      DocumentThemesMenu.Items.Clear();
+      string selected = ActiveDocumentTheme().Name;
+      NextDocumentThemeMenu.IsEnabled = PreviousDocumentThemeMenu.IsEnabled = _themes.Count > 0;
+      foreach(Core.Themes.ReaderTheme theme in _themes)
+      {
+         var item = new RadioMenuFlyoutItem { Text = theme.Name, Tag = theme, GroupName = "DocumentTheme", IsChecked = string.Equals(selected, theme.Name, StringComparison.Ordinal) };
+         Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(item, "DocumentTheme:" + theme.Name);
+         item.Click += DocumentTheme_Click;
+         DocumentThemesMenu.Items.Add(item);
+      }
+      RefreshToolbarThemes();
+   }
+
+
+
+   /// <summary>Persists the document palette and redisplays the current snapshot at its reading position.</summary>
+   private async void DocumentTheme_Click(object sender, RoutedEventArgs e)
+   {
+      var theme = (Core.Themes.ReaderTheme)((FrameworkElement)sender).Tag;
+      Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+      Core.AppSettings draft = Core.SettingsChanges.Copy(before);
+      draft.DocumentTheme = theme.Name;
+      await CommitThemeDraftAsync(before, draft);
+   }
+
+
+
+   /// <summary>Persists frontmatter appearance and rereads the active snapshot at its reading position.</summary>
+   private async void Frontmatter_Click(object sender, RoutedEventArgs e)
+   {
+      _settings.Frontmatter = (string)((FrameworkElement)sender).Tag;
+      Save();
+      if(_documentPath is not null)
+      {
+         await OpenDocumentAsync(_documentPath, reload: true);
+      }
+   }
+
+
+
+   /// <summary>Resolves user overrides and safely falls back after a saved custom theme is removed.</summary>
+   private Core.Themes.ReaderTheme ActiveDocumentTheme() => Core.Themes.ThemeManagement.Active(_settings);
+
+
+
+   /// <summary>A same-name edit overrides the original; a new name creates a custom theme.</summary>
+   private async Task EditDocumentThemeAsync()
+   {
+      Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+      Core.Themes.ReaderTheme original = ActiveDocumentTheme();
+      Core.Themes.ReaderTheme? edited = await ThemeEditor.ShowAsync(ConfigurationPage, original, Core.Themes.ThemeManagement.All(before).Select(theme => theme.Name));
+      if(edited is null || _closed)
+      {
+         return;
+      }
+      Core.AppSettings draft = Core.Themes.ThemeManagement.SaveEdited(before, original, edited);
+      await CommitThemeDraftAsync(before, draft);
+   }
+
+
+
+   /// <summary>Restores original palettes and removes their overrides, retaining separately named custom themes.</summary>
+   private async Task RestoreDocumentThemesAsync()
+   {
+      var dialog = new ContentDialog { XamlRoot = ConfigurationRoot, Title = "Restore built-in themes?", Content = "Original built-ins will be restored and enabled. Edited built-ins will be kept as uniquely named custom themes.", PrimaryButtonText = "Restore themes", CloseButtonText = "Cancel" };
+      if(await dialog.ShowAsync() != ContentDialogResult.Primary || _closed)
+      {
+         return;
+      }
+      Core.AppSettings before = Core.SettingsChanges.Copy(_settings);
+      await CommitThemeDraftAsync(before, Core.Themes.ThemeManagement.RestoreBuiltIns(before));
+   }
+
+
+
+   /// <summary>Rebuilds the visible catalog after a successful preference edit.</summary>
+   private void RefreshDocumentThemes()
+   {
+      _themes = Core.Themes.ThemeManagement.Enabled(_settings);
+      _settingsWindow?.UpdatePrintThemes(_themes);
+      CreateDocumentThemeMenu();
+   }
+
+
+
+   /// <summary>Applies a theme without allowing browser errors to escape a native event handler.</summary>
+   private async Task ApplyDocumentThemeAsync(Core.Themes.ReaderTheme theme)
+   {
+      SourceText.SetTheme(theme);
+      try
+      {
+         _browserInitialization ??= _browser.InitializeAsync();
+         await _browserInitialization;
+         await _browser.ApplyThemeAsync(theme);
+      }
+      catch(System.Runtime.InteropServices.COMException exception)
+      {
+         if(!_closed)
+         {
+            StatusText.Text = "The document theme could not be displayed.";
+            App.Log.Error("The document theme could not be displayed.", exception);
+         }
+      }
+   }
+
+
    /// <summary>View, theme: applies the chosen theme to the window and saves it.</summary>
    private void Theme_Click(object sender, RoutedEventArgs e)
    {
       _settings.Theme = (string)((FrameworkElement)sender).Tag;
       WinUIShell.ApplyTheme(RootGrid, _settings.ThemeKind);
-      Save();
-   }
-
-
-
-   /// <summary>View, Show splash at startup: saves the preference.</summary>
-   private void Splash_Click(object sender, RoutedEventArgs e)
-   {
-      _settings.ShowSplashScreen = SplashToggle.IsChecked;
-      Save();
-   }
-
-
-
-   /// <summary>View, Check for updates at startup: saves the preference.</summary>
-   private void UpdateCheck_Click(object sender, RoutedEventArgs e)
-   {
-      _settings.CheckForUpdatesOnStartup = UpdateCheckToggle.IsChecked;
+      if(_settingsWindow is not null)
+      {
+         WinUIShell.ApplyTheme((FrameworkElement)_settingsWindow.Content, _settings.ThemeKind);
+      }
+      SourceText.SetTheme(ActiveDocumentTheme());
       Save();
    }
 
@@ -115,15 +511,10 @@ public sealed partial class MainWindow : Window
 
 
    /// <summary>Help, About: shows the About dialog.</summary>
-   private async void About_Click(object sender, RoutedEventArgs e) => await AboutDialog.ShowAsync(AppIdentity.Info, Content.XamlRoot);
-
-
-
-   /// <summary>Throws on purpose: proves the crash net logs the exception and the app keeps running. Remove it from a real app.</summary>
-   private void Throw_Click(object sender, RoutedEventArgs e)
+   private async void About_Click(object sender, RoutedEventArgs e)
    {
-      StatusText.Text = "Threw; the crash net logged it and the app kept running.";
-      throw new InvalidOperationException("Deliberately unhandled exception from the template.");
+      AboutDialog dialog = AppAbout.Create(Content.XamlRoot);
+      await DialogGuard.ShowAsync(dialog);
    }
 
 
@@ -131,7 +522,12 @@ public sealed partial class MainWindow : Window
    /// <summary>Saves the settings and reports a failed save in the status line.</summary>
    private void Save()
    {
-      if(!AppIdentity.SettingsStore.Save(_settings))
+      Core.AppSettings merged = Core.SettingsChanges.Merge(AppIdentity.SettingsStore.Load(), _lastSavedSettings, _settings);
+      if(AppIdentity.SettingsStore.Save(merged))
+      {
+         _lastSavedSettings = Core.SettingsChanges.Copy(_settings);
+      }
+      else
       {
          StatusText.Text = "Could not save settings.";
       }
diff --git a/src/MarkdownViewr.Windows/MarkdownViewr.Windows.csproj b/src/MarkdownViewr.Windows/MarkdownViewr.Windows.csproj
index 386f6ea..cc084bd 100644
--- a/src/MarkdownViewr.Windows/MarkdownViewr.Windows.csproj
+++ b/src/MarkdownViewr.Windows/MarkdownViewr.Windows.csproj
@@ -12,6 +12,8 @@
       <Platforms>x86;x64;ARM64</Platforms>
       <RuntimeIdentifiers>win-x86;win-x64;win-arm64</RuntimeIdentifiers>
       <UseWinUI>true</UseWinUI>
+      <!-- LibraryImport generates the file-handle path verification stub. -->
+      <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
       <WindowsPackageType>None</WindowsPackageType>
       <WindowsAppSDKSelfContained>true</WindowsAppSDKSelfContained>
       <!-- Velopack must run before any XAML starts, so the app supplies its own Main (Program.cs). -->
@@ -23,6 +25,8 @@
            reach the build and publish output, since the unpackaged app has no MSIX step. -->
       <Content Include="Assets\Brand\app-icon.svg" CopyToOutputDirectory="PreserveNewest" />
       <Content Include="Assets\Brand\app.ico" CopyToOutputDirectory="PreserveNewest" />
+      <Content Include="..\..\THIRD-PARTY-NOTICES.md" Link="THIRD-PARTY-NOTICES.md" CopyToOutputDirectory="PreserveNewest" />
+      <None Include="..\..\THIRD-PARTY-LICENSES\**\*.txt" Link="ThirdPartyLicenses\%(RecursiveDir)%(Filename)%(Extension)" CopyToOutputDirectory="PreserveNewest" CopyToPublishDirectory="PreserveNewest" />
       <Manifest Include="$(ApplicationManifest)" />
    </ItemGroup>
 
@@ -41,7 +45,6 @@
       <!-- The app's own namespaces are global usings: their sort position against other
            usings depends on the app's name, which the template replaces. -->
       <Using Include="MarkdownViewr.Windows.Core" />
-      <Using Include="MarkdownViewr.Windows.Core.Greetings" />
    </ItemGroup>
 
    <!-- Unpackaged WinUI publishes omit the app PRI/XBF items (WindowsAppSDK#6720).
diff --git a/src/MarkdownViewr.Windows/PrintOptionsDialog.cs b/src/MarkdownViewr.Windows/PrintOptionsDialog.cs
new file mode 100644
index 0000000..6ad2dec
--- /dev/null
+++ b/src/MarkdownViewr.Windows/PrintOptionsDialog.cs
@@ -0,0 +1,79 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Printing;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Provides a copied print draft with separate native print, PDF save and cancellation actions.</summary>
+internal sealed class PrintOptionsDialog
+{
+   private readonly PrintOptionsEditor _editor;
+   private readonly CheckBox _openPdf = new() { Name = "PrintOpenPdf", Content = "Open PDF after saving" };
+   private readonly CheckBox _openFolder = new() { Name = "PrintOpenPdfFolder", Content = "Open containing folder after saving" };
+   private readonly ContentDialog _dialog;
+
+
+
+   /// <summary>Restores bounded saved choices; missing named themes fall back to Clean Printing.</summary>
+   public PrintOptionsDialog(PrintOptions options, IEnumerable<Core.Themes.ReaderTheme> themes)
+   {
+      _editor = new PrintOptionsEditor(options, themes);
+      var panel = new StackPanel { Spacing = 8, MinWidth = 300 };
+      panel.Children.Add(_editor.Fields);
+      foreach(FrameworkElement control in new FrameworkElement[] { _openPdf, _openFolder })
+      {
+         AutomationProperties.SetAutomationId(control, control.Name);
+         panel.Children.Add(control);
+      }
+      _dialog = new ContentDialog
+      {
+         Title = "Print document",
+         Content = new ScrollViewer { Content = panel, MaxHeight = 320 },
+         PrimaryButtonText = "Print...",
+         SecondaryButtonText = "Save PDF...",
+         CloseButtonText = "Cancel",
+         DefaultButton = ContentDialogButton.Primary,
+      };
+      AutomationProperties.SetAutomationId(_dialog, "PrintOptionsDialog");
+      _dialog.Resources["ContentDialogMaxWidth"] = 640d;
+      _dialog.PrimaryButtonClick += (_, args) => args.Cancel = _editor.Read() is null;
+      _dialog.SecondaryButtonClick += (_, args) => args.Cancel = _editor.Read() is null;
+   }
+
+
+
+   /// <summary>Only committed print/PDF actions return preferences; closing the draft leaves saved choices untouched.</summary>
+   public async Task<PrintOptions?> ShowAsync(XamlRoot root)
+   {
+      double width = Math.Max(0, Math.Min(520, root.Size.Width - 96));
+      ((FrameworkElement)((ScrollViewer)_dialog.Content).Content).MinWidth = width;
+      _dialog.Resources["ContentDialogMinWidth"] = width + 48;
+      _dialog.XamlRoot = root;
+      ContentDialogResult result = await _dialog.ShowAsync();
+      SaveAsPdf = result == ContentDialogResult.Secondary;
+      return result == ContentDialogResult.None ? null : _editor.Read();
+   }
+
+
+
+   /// <summary>The selected destination is an action, not a persisted output path.</summary>
+   public bool SaveAsPdf { get; private set; }
+
+
+
+   /// <summary>A deliberate post-export action, never run after cancellation or failed generation.</summary>
+   public bool OpenPdfAfterSave => _openPdf.IsChecked == true;
+
+
+
+   /// <summary>The folder may be opened independently or together with the generated PDF.</summary>
+   public bool OpenFolderAfterSave => _openFolder.IsChecked == true;
+}
diff --git a/src/MarkdownViewr.Windows/PrintOptionsEditor.cs b/src/MarkdownViewr.Windows/PrintOptionsEditor.cs
new file mode 100644
index 0000000..dcbc578
--- /dev/null
+++ b/src/MarkdownViewr.Windows/PrintOptionsEditor.cs
@@ -0,0 +1,118 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Printing;
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Settings and the print dialog share the same native bounded options and validation.</summary>
+internal sealed class PrintOptionsEditor
+{
+   private static readonly string[] s_specialThemes = ["Clean Printing", "Active Theme", "Plain HTML"];
+   private readonly ComboBox _theme = new() { Name = "PrintTheme", Header = "Print theme", HorizontalAlignment = HorizontalAlignment.Stretch };
+   private readonly CheckBox _backgrounds = new() { Name = "PrintBackgrounds", Content = "Print backgrounds" };
+   private readonly CheckBox _images = new() { Name = "PrintImages", Content = "Print images" };
+   private readonly ComboBox _zoom = new() { Name = "PrintZoom", Header = "Font zoom", HorizontalAlignment = HorizontalAlignment.Stretch };
+   private readonly ComboBox _width = new() { Name = "PrintWidth", Header = "Content width", HorizontalAlignment = HorizontalAlignment.Stretch };
+   private readonly CheckBox _borders = new() { Name = "PrintBorders", Content = "Add borders to code and content blocks" };
+   private readonly NumberBox _padding = new() { Name = "PrintPadding", Header = "Page padding (px)", Minimum = 0, Maximum = 96, SmallChange = 8, SpinButtonPlacementMode = NumberBoxSpinButtonPlacementMode.Inline };
+   private readonly TextBlock _error = new() { Name = "PrintError", TextWrapping = TextWrapping.Wrap };
+
+
+
+   /// <summary>Restores saved options before subscribing to user changes, using the available named themes.</summary>
+   public PrintOptionsEditor(PrintOptions options, IEnumerable<ReaderTheme> themes)
+   {
+      SetThemes(themes);
+      _zoom.Items.Add("Standard (100%)");
+      _zoom.Items.Add("Match screen");
+      _width.Items.Add("Full page");
+      _width.Items.Add("Document width");
+      Update(options);
+      foreach(FrameworkElement control in new FrameworkElement[] { _theme, _backgrounds, _images, _zoom, _width, _borders, _padding, _error })
+      {
+         AutomationProperties.SetAutomationId(control, control.Name);
+         Fields.Children.Add(control);
+      }
+      foreach(ComboBox control in new[] { _theme, _zoom, _width })
+      {
+         control.SelectionChanged += (_, _) => Changed?.Invoke(this, EventArgs.Empty);
+      }
+      foreach(CheckBox control in new[] { _backgrounds, _images, _borders })
+      {
+         control.Checked += (_, _) => Changed?.Invoke(this, EventArgs.Empty);
+         control.Unchecked += (_, _) => Changed?.Invoke(this, EventArgs.Empty);
+      }
+      _padding.ValueChanged += (_, _) => Changed?.Invoke(this, EventArgs.Empty);
+   }
+
+
+
+   /// <summary>One native form is hosted in either the regular Settings scroll region or the deliberate print dialog.</summary>
+   public StackPanel Fields { get; } = new() { Spacing = 12, MinWidth = 300 };
+
+
+
+   /// <summary>Hosts can retain unsubmitted drafts when another window saves newer print defaults.</summary>
+   public event EventHandler? Changed;
+
+
+
+   /// <summary>The current enabled theme catalog replaces stale names without losing the other print choices.</summary>
+   public void SetThemes(IEnumerable<ReaderTheme> themes)
+   {
+      string? selected = (_theme.SelectedItem as ComboBoxItem)?.Content as string;
+      _theme.Items.Clear();
+      foreach(string name in s_specialThemes.Concat(themes.Select(theme => theme.Name)).Distinct(StringComparer.Ordinal))
+      {
+         _theme.Items.Add(new ComboBoxItem { Content = name });
+      }
+      SelectTheme(selected);
+   }
+
+
+
+   /// <summary>Only a known saved name is selected; removed named themes use Clean Printing.</summary>
+   private void SelectTheme(string? name)
+      => _theme.SelectedItem = _theme.Items.OfType<ComboBoxItem>().FirstOrDefault(item => string.Equals((string)item.Content, name, StringComparison.Ordinal)) ?? _theme.Items[0];
+
+
+
+   /// <summary>Committed defaults refresh routine fields while the host controls whether a draft should be preserved.</summary>
+   public void Update(PrintOptions options)
+   {
+      options = options.Sanitize();
+      SelectTheme(options.Theme);
+      _backgrounds.IsChecked = options.Backgrounds;
+      _images.IsChecked = options.Images;
+      _zoom.SelectedIndex = options.MatchScreenZoom ? 1 : 0;
+      _width.SelectedIndex = options.FullPage ? 0 : 1;
+      _borders.IsChecked = options.Borders;
+      _padding.Value = options.PaddingPixels;
+      _error.Text = "";
+   }
+
+
+
+   /// <summary>Invalid page padding remains a visible draft and cannot reach saved preferences or output.</summary>
+   public PrintOptions? Read()
+   {
+      if(!double.IsFinite(_padding.Value) || _padding.Value is < 0 or > 96)
+      {
+         _error.Text = "Enter page padding between 0 and 96 pixels.";
+         return null;
+      }
+      _error.Text = "";
+      return new PrintOptions((string)((ComboBoxItem)_theme.SelectedItem).Content,
+         _backgrounds.IsChecked == true, _images.IsChecked == true, _zoom.SelectedIndex == 1,
+         _width.SelectedIndex == 0, _borders.IsChecked == true, _padding.Value);
+   }
+}
diff --git a/src/MarkdownViewr.Windows/Program.cs b/src/MarkdownViewr.Windows/Program.cs
index cf7fd3b..2aba1d2 100644
--- a/src/MarkdownViewr.Windows/Program.cs
+++ b/src/MarkdownViewr.Windows/Program.cs
@@ -4,6 +4,7 @@
  */
 
 using Microsoft.UI.Dispatching;
+using Microsoft.Windows.AppLifecycle;
 using Velopack;
 
 
@@ -15,19 +16,71 @@ namespace MarkdownViewr.Windows;
 /// </summary>
 public static class Program
 {
-   /// <summary>Runs Velopack's hooks first (they may exit the process), then starts the WinUI application.</summary>
-   [STAThread]
-   private static void Main()
-   {
-      // Keep this direct call: vpk verifies the entry assembly before creating installers.
-      VelopackApp.Build().Run();
+   /// <summary>The primary's bounded current-user inbox is attached by App only after the native reader initializes.</summary>
+   internal static ActivationInbox? Inbox { get; private set; }
 
-      // The remainder mirrors the XAML-generated Main.
+
+
+   /// <summary>The initial canonical request preserves sender-relative paths and SDK rich file activation.</summary>
+   internal static ActivationRequest InitialRequest { get; private set; } = new([]);
+
+
+
+   /// <summary>Runs install hooks before XAML, chooses a profile/install-specific primary, then starts or forwards the native document request.</summary>
+   [STAThread]
+   private static int Main()
+   {
+      // Keep Build/Run in this entry point: vpk verifies it before creating installers.
+      VelopackApp.Build()
+         .OnAfterInstallFastCallback(_ => InstalledFileTypes.Register())
+         .OnAfterUpdateFastCallback(_ => InstalledFileTypes.Register())
+         .OnBeforeUninstallFastCallback(_ => InstalledFileTypes.Unregister())
+         .Run();
       WinRT.ComWrappersSupport.InitializeComWrappers();
-      Microsoft.UI.Xaml.Application.Start(callbackParams =>
+      InitialRequest = DesktopActivation.ReadInitialRequest();
+      string key = ActivationRequest.InstanceKey(AppContext.BaseDirectory, Path.GetDirectoryName(AppIdentity.Paths.SettingsFile)!);
+      var primary = AppInstance.FindOrRegisterForKey(key);
+      if(!primary.IsCurrent)
       {
-         SynchronizationContext.SetSynchronizationContext(new DispatcherQueueSynchronizationContext(DispatcherQueue.GetForCurrentThread()));
-         _ = new App();
-      });
+         return ForwardToPrimary(key, primary.ProcessId);
+      }
+      using var inbox = new ActivationInbox(key, DesktopActivation.ReportFailure);
+      Inbox = inbox;
+      try
+      {
+         Microsoft.UI.Xaml.Application.Start(callbackParams =>
+         {
+            SynchronizationContext.SetSynchronizationContext(new DispatcherQueueSynchronizationContext(DispatcherQueue.GetForCurrentThread()));
+            _ = new App();
+         });
+      }
+      finally
+      {
+         Inbox = null;
+         primary.UnregisterKey();
+      }
+      return 0;
+   }
+
+
+
+   /// <summary>Current-user .NET pipe delivery avoids the SDK STA redirection deadlock and resolves relative paths before crossing processes.</summary>
+   private static int ForwardToPrimary(string key, uint processId)
+   {
+      try
+      {
+         DesktopActivation.AllowPrimaryForeground(processId);
+         bool delivered = ActivationInbox.SendAsync(key, InitialRequest, CancellationToken.None).GetAwaiter().GetResult();
+         if(!delivered)
+         {
+            DesktopActivation.ReportFailure(new IOException("The running reader is busy."));
+         }
+         return delivered ? 0 : 1;
+      }
+      catch(Exception exception) when(exception is IOException or ArgumentException or InvalidDataException or OperationCanceledException or UnauthorizedAccessException)
+      {
+         DesktopActivation.ReportFailure(exception);
+         return 1;
+      }
    }
 }
diff --git a/src/MarkdownViewr.Windows/ReadingAppearanceEditor.cs b/src/MarkdownViewr.Windows/ReadingAppearanceEditor.cs
new file mode 100644
index 0000000..1aa86af
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ReadingAppearanceEditor.cs
@@ -0,0 +1,117 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+using CoreAppearance = MarkdownViewr.Windows.Core.Themes.ReadingAppearance;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Native routine layout fields and an advanced CSS draft validate before checked persistence.</summary>
+internal sealed class ReadingAppearanceEditor
+{
+   private readonly ToggleSwitch _limit;
+   private readonly NumberBox _width;
+   private readonly TextBox _css;
+   private readonly TextBlock _error = new() { TextWrapping = TextWrapping.Wrap };
+
+
+
+   /// <summary>Native fields keep routine layout changes separate from unsubmitted CSS and print data.</summary>
+   public ReadingAppearanceEditor(CoreAppearance current)
+   {
+      _limit = new ToggleSwitch { Header = "Limit reading width", IsOn = current.LimitWidth };
+      Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(_limit, "ReadingAppearanceLimit");
+      _width = new NumberBox { Header = "Maximum content width (pixels at 100%)", Minimum = 200, Maximum = 4000, SmallChange = 50, LargeChange = 200, Value = current.WidthPixels };
+      Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(_width, "ReadingAppearanceWidth");
+      _css = new TextBox
+      {
+         Header = "Global custom CSS",
+         Text = current.GlobalCss,
+         AcceptsReturn = true,
+         TextWrapping = TextWrapping.Wrap,
+         FontFamily = new Microsoft.UI.Xaml.Media.FontFamily("Consolas"),
+         MaxLength = CoreAppearance.MaximumCssCharacters,
+         Height = 160,
+      };
+      Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(_css, "ReadingAppearanceCss");
+      Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(_error, "ReadingAppearanceError");
+      Fields.Children.Add(_limit);
+      Fields.Children.Add(_width);
+      Fields.Children.Add(new TextBlock { Text = "Global CSS applies across document themes. Per-theme CSS takes precedence. Print layout has its own settings.", TextWrapping = TextWrapping.Wrap });
+      Fields.Children.Add(_css);
+      Fields.Children.Add(_error);
+      _limit.Toggled += (_, _) => LayoutChanged?.Invoke(this, EventArgs.Empty);
+      _width.ValueChanged += (_, _) => LayoutChanged?.Invoke(this, EventArgs.Empty);
+   }
+
+
+
+   /// <summary>The native form remains alive while navigating categories or editing a document theme.</summary>
+   public StackPanel Fields { get; } = new() { Spacing = 12 };
+
+
+
+   /// <summary>The unsubmitted CSS draft stays local even when other readers save new shared preferences.</summary>
+   public string CssDraft => _css.Text;
+
+
+
+   /// <summary>Shared saved layout updates native fields without replacing a deliberately edited CSS draft.</summary>
+   public void Update(CoreAppearance appearance, bool preserveCss)
+   {
+      _limit.IsOn = appearance.LimitWidth;
+      _width.Value = appearance.WidthPixels;
+      if(!preserveCss)
+      {
+         _css.Text = appearance.GlobalCss;
+      }
+   }
+
+
+
+   /// <summary>Prevents concurrent edits during a checked save while retaining ordinary native disabled states.</summary>
+   public void SetEnabled(bool enabled)
+   {
+      _limit.IsEnabled = enabled;
+      _width.IsEnabled = enabled;
+      _css.IsEnabled = enabled;
+   }
+
+
+
+   /// <summary>Routine layout edits can be saved independently from the unsubmitted advanced CSS draft.</summary>
+   public event EventHandler? LayoutChanged;
+
+
+
+   /// <summary>Routine width changes preserve the last saved CSS until the user explicitly applies a new draft.</summary>
+   public CoreAppearance? ReadLayout(string savedCss) => Validate(new CoreAppearance(_limit.IsOn, _width.Value, savedCss));
+
+
+
+   /// <summary>Invalid input keeps Settings open and directs focus to a readable error.</summary>
+   public CoreAppearance? Read() => Validate(new CoreAppearance(_limit.IsOn, _width.Value, _css.Text));
+
+
+
+   /// <summary>Invalid native fields produce a visible, focusable validation message without saving a partial draft.</summary>
+   private CoreAppearance? Validate(CoreAppearance draft)
+   {
+      try
+      {
+         draft.Validate();
+         _error.Text = "";
+         return draft;
+      }
+      catch(InvalidOperationException exception)
+      {
+         _error.Text = exception.Message;
+         _error.StartBringIntoView();
+         return null;
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SettingsWindow.Contents.cs b/src/MarkdownViewr.Windows/SettingsWindow.Contents.cs
new file mode 100644
index 0000000..60517ff
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SettingsWindow.Contents.cs
@@ -0,0 +1,85 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>General settings expose native Contents presentation and independent new-window defaults.</summary>
+internal sealed partial class SettingsWindow
+{
+   private readonly ToggleSwitch _wrapOutlineEntries = new() { Header = "Wrap long entries in Contents" };
+   private readonly ToggleSwitch _showOutlineDepthMarkers = new() { Header = "Show heading-depth markers in Contents" };
+   private readonly Func<bool, bool, bool> _saveContents;
+
+
+
+   /// <summary>Related controls share one page; presentation updates live while panel defaults apply to new windows.</summary>
+   private void AddContentsPreferences(StackPanel page, Core.AppSettings current)
+   {
+      page.Children.Add(new TextBlock { Text = "New document windows", FontSize = 20, FontWeight = Microsoft.UI.Text.FontWeights.SemiBold });
+      page.Children.Add(new TextBlock { Text = "Contents and Source start hidden by default. Toolbar changes affect only the current window.", TextWrapping = TextWrapping.Wrap });
+      AutomationProperties.SetAutomationId(_showOutlineByDefault, "SettingsDefaultContentsToggle");
+      AutomationProperties.SetAutomationId(_showSourceByDefault, "SettingsDefaultSourceToggle");
+      _showOutlineByDefault.Toggled += (_, _) => SaveStartup();
+      _showSourceByDefault.Toggled += (_, _) => SaveStartup();
+      page.Children.Add(_showOutlineByDefault);
+      page.Children.Add(_showSourceByDefault);
+      page.Children.Add(new TextBlock { Text = "Contents", FontSize = 20, FontWeight = Microsoft.UI.Text.FontWeights.SemiBold });
+      AutomationProperties.SetAutomationId(_wrapOutlineEntries, "SettingsContentsWrapToggle");
+      AutomationProperties.SetAutomationId(_showOutlineDepthMarkers, "SettingsContentsDepthMarkersToggle");
+      UpdateContents(current);
+      _wrapOutlineEntries.Toggled += (_, _) => SaveContents();
+      _showOutlineDepthMarkers.Toggled += (_, _) => SaveContents();
+      page.Children.Add(_wrapOutlineEntries);
+      page.Children.Add(new TextBlock { Text = "When off, long headings end with an ellipsis. Hover over an entry to see its full title.", TextWrapping = TextWrapping.Wrap, Opacity = 0.7 });
+      page.Children.Add(_showOutlineDepthMarkers);
+      page.Children.Add(new TextBlock { Text = "A different shape marks each heading level. These changes apply to all open windows.", TextWrapping = TextWrapping.Wrap, Opacity = 0.7 });
+   }
+
+
+
+   /// <summary>Saved sibling changes refresh the toggles without creating recursive saves.</summary>
+   internal void UpdateContents(Core.AppSettings settings)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      bool previous = _updating;
+      _updating = true;
+      try
+      {
+         _wrapOutlineEntries.IsOn = settings.WrapOutlineEntries;
+         _showOutlineDepthMarkers.IsOn = settings.ShowOutlineDepthMarkers;
+      }
+      finally
+      {
+         _updating = previous;
+      }
+   }
+
+
+
+   /// <summary>Persistence precedes visible changes; failure stays visible in the native status area.</summary>
+   private void SaveContents()
+   {
+      if(_closed || _updating)
+      {
+         return;
+      }
+      try
+      {
+         _status.Text = _saveContents(_wrapOutlineEntries.IsOn, _showOutlineDepthMarkers.IsOn) ? "Saved. Applies to all open windows." : "Could not save the setting. Please try again.";
+      }
+      catch(Exception exception)
+      {
+         ReportError(exception);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SettingsWindow.Editing.cs b/src/MarkdownViewr.Windows/SettingsWindow.Editing.cs
new file mode 100644
index 0000000..dd4d8b9
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SettingsWindow.Editing.cs
@@ -0,0 +1,92 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Long configuration forms use the normal Settings window, with native Back and explicit draft actions.</summary>
+internal sealed partial class SettingsWindow
+{
+   private readonly StackPanel _editActions = new() { Orientation = Orientation.Horizontal, Spacing = 8, HorizontalAlignment = HorizontalAlignment.Right, Margin = new Thickness(24, 12, 24, 12), Visibility = Visibility.Collapsed };
+   private TaskCompletionSource<ContentDialogResult>? _editCompletion;
+
+
+
+   /// <summary>Window closure cancels the draft; configuration callers cannot continue editing a closed owner.</summary>
+   internal bool IsOpen => !_closed;
+
+
+
+   /// <summary>Shows one scrollable form within Settings and retains invalid drafts until validation succeeds or the user cancels.</summary>
+   internal Task<ContentDialogResult> ShowEditorAsync(string title, UIElement fields, string saveLabel, Func<bool>? validate = null)
+   {
+      if(_closed)
+      {
+         return Task.FromResult(ContentDialogResult.None);
+      }
+      if(_editCompletion is not null)
+      {
+         throw new InvalidOperationException("A Settings edit is already open.");
+      }
+      var completion = new TaskCompletionSource<ContentDialogResult>(TaskCreationOptions.RunContinuationsAsynchronously);
+      _editCompletion = completion;
+      _navigation.Header = title;
+      _navigation.IsBackButtonVisible = NavigationViewBackButtonVisible.Visible;
+      foreach(NavigationViewItem item in _navigation.MenuItems.Cast<NavigationViewItem>())
+      {
+         item.IsEnabled = false;
+      }
+      _pageScroll.Content = null;
+      _pageScroll.Content = fields;
+      _pageScroll.ChangeView(null, 0, null, disableAnimation: true);
+      var save = new Button { Content = saveLabel, MinWidth = 120 };
+      var cancel = new Button { Content = "Cancel", MinWidth = 120 };
+      AutomationProperties.SetAutomationId(save, "PrimaryButton");
+      AutomationProperties.SetAutomationId(cancel, "CloseButton");
+      save.Click += (_, _) =>
+      {
+         if(validate?.Invoke() != false)
+         {
+            EndEdit(ContentDialogResult.Primary);
+         }
+      };
+      cancel.Click += (_, _) => EndEdit(ContentDialogResult.None);
+      _editActions.Children.Clear();
+      _editActions.Children.Add(save);
+      _editActions.Children.Add(cancel);
+      _editActions.Visibility = Visibility.Visible;
+      return completion.Task;
+   }
+
+
+
+   /// <summary>Detaches the edit before completing its task, allowing a manager to open another page while preserving its copied draft.</summary>
+   internal void EndEdit(ContentDialogResult result)
+   {
+      TaskCompletionSource<ContentDialogResult>? completion = _editCompletion;
+      if(completion is null)
+      {
+         return;
+      }
+      _editCompletion = null;
+      _pageScroll.Content = null;
+      _editActions.Children.Clear();
+      _editActions.Visibility = Visibility.Collapsed;
+      if(!_closed)
+      {
+         _navigation.IsBackButtonVisible = NavigationViewBackButtonVisible.Collapsed;
+         foreach(NavigationViewItem item in _navigation.MenuItems.Cast<NavigationViewItem>())
+         {
+            item.IsEnabled = true;
+         }
+         SelectPage((string)((NavigationViewItem)_navigation.SelectedItem).Tag);
+      }
+      completion.TrySetResult(result);
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SettingsWindow.FileTypes.cs b/src/MarkdownViewr.Windows/SettingsWindow.FileTypes.cs
new file mode 100644
index 0000000..d1f11a7
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SettingsWindow.FileTypes.cs
@@ -0,0 +1,126 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Default-file configuration is an explicit native Settings action owned by Windows, never by document content.</summary>
+internal sealed partial class SettingsWindow
+{
+   private readonly TextBlock _defaultMarkdownStatus = new() { TextWrapping = TextWrapping.Wrap };
+   private readonly Button _chooseDefaultFiles = new() { Content = "Choose default file types", HorizontalAlignment = HorizontalAlignment.Left, IsEnabled = false };
+   private readonly TextBlock _unregisteredFilesGuidance = new() { Text = "Install or repair MarkdownViewr to make it available in Open with and Default Apps. This preview does not change Windows file associations.", TextWrapping = TextWrapping.Wrap };
+
+
+
+   /// <summary>Installed builds offer the OS chooser; unregistered previews explain why they cannot become a registered default here.</summary>
+   private void AddDefaultFileTypes(StackPanel page)
+   {
+      page.Children.Add(new TextBlock { Text = "Default file types", FontSize = 20, FontWeight = Microsoft.UI.Text.FontWeights.SemiBold, Margin = new Thickness(0, 16, 0, 0) });
+      var guidance = new TextBlock
+      {
+         Text = "Choose MarkdownViewr for .md, .markdown, .mdown or .mkd in Windows Default Apps. Plain text (.txt) is optional. Windows keeps your choices until you change them.",
+         TextWrapping = TextWrapping.Wrap,
+      };
+      AutomationProperties.SetAutomationId(guidance, "SettingsDefaultFilesGuidance");
+      page.Children.Add(guidance);
+      AutomationProperties.SetAutomationId(_defaultMarkdownStatus, "SettingsDefaultMarkdownStatus");
+      AutomationProperties.SetLiveSetting(_defaultMarkdownStatus, Microsoft.UI.Xaml.Automation.Peers.AutomationLiveSetting.Polite);
+      AutomationProperties.SetAutomationId(_chooseDefaultFiles, "SettingsDefaultFilesButton");
+      page.Children.Add(_defaultMarkdownStatus);
+      var actions = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 12 };
+      var refresh = new Button { Content = "Refresh status" };
+      AutomationProperties.SetAutomationId(refresh, "SettingsRefreshDefaultFiles");
+      refresh.Click += (_, _) => RefreshDefaultFileTypes();
+      _chooseDefaultFiles.Click += async (_, _) => await OpenDefaultFileTypesAsync();
+      actions.Children.Add(_chooseDefaultFiles);
+      actions.Children.Add(refresh);
+      page.Children.Add(actions);
+      page.Children.Add(_unregisteredFilesGuidance);
+      RefreshDefaultFileTypes();
+      Activated += (_, args) =>
+      {
+         if(args.WindowActivationState != WindowActivationState.Deactivated)
+         {
+            RefreshDefaultFileTypes();
+         }
+      };
+   }
+
+
+
+   /// <summary>Returning from Windows Settings refreshes effective status; unknown/error states never advertise a selected default.</summary>
+   private void RefreshDefaultFileTypes()
+   {
+      if(_closed)
+      {
+         return;
+      }
+      try
+      {
+         _chooseDefaultFiles.IsEnabled = InstalledFileTypes.GetDefaultAppsUri() is not null;
+         _unregisteredFilesGuidance.Visibility = _chooseDefaultFiles.IsEnabled ? Visibility.Collapsed : Visibility.Visible;
+         _defaultMarkdownStatus.Text = !_chooseDefaultFiles.IsEnabled ? "This copy is not registered for Markdown defaults." : InstalledFileTypes.IsDefaultMarkdownViewer() switch
+         {
+            true => "Default viewer for .md files.",
+            false => "Not the default viewer for .md files.",
+            null => "Windows did not report the current .md default. Use Default Apps to check your choice.",
+         };
+      }
+      catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or System.Security.SecurityException or ArgumentException)
+      {
+         _chooseDefaultFiles.IsEnabled = false;
+         _defaultMarkdownStatus.Text = "Could not read the current .md default. Open Windows Settings → Apps → Default apps to check.";
+         ReportError(exception);
+      }
+   }
+
+
+
+   /// <summary>Revalidates the installed registration at click time and opens only Microsoft's fixed settings scheme.</summary>
+   private async Task OpenDefaultFileTypesAsync()
+   {
+      if(_closed || _busy)
+      {
+         return;
+      }
+      _busy = true;
+      try
+      {
+         Uri? target = InstalledFileTypes.GetDefaultAppsUri();
+         if(target is null)
+         {
+            _status.Text = "Install or repair MarkdownViewr, then try again.";
+         }
+         else if(await global::Windows.System.Launcher.LaunchUriAsync(target))
+         {
+            if(!_closed)
+            {
+               _status.Text = "Choose MarkdownViewr for your Markdown extensions in Windows Default Apps. You can leave .txt unchanged.";
+            }
+         }
+         else if(!_closed)
+         {
+            _status.Text = "Open Windows Settings → Apps → Default apps, search for .md, then choose MarkdownViewr.";
+         }
+      }
+      catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or System.Security.SecurityException or System.Runtime.InteropServices.COMException or InvalidOperationException or ArgumentException)
+      {
+         if(!_closed)
+         {
+            _status.Text = "Open Windows Settings → Apps → Default apps, search for .md, then choose MarkdownViewr.";
+         }
+         App.Log.Warning(FormattableString.Invariant($"Default Apps could not be opened ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+      finally
+      {
+         _busy = false;
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SettingsWindow.Pages.cs b/src/MarkdownViewr.Windows/SettingsWindow.Pages.cs
new file mode 100644
index 0000000..8f313a3
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SettingsWindow.Pages.cs
@@ -0,0 +1,75 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Configuration pages use normal Windows controls; each explicit theme/editor edit retains its own Save and Cancel.</summary>
+internal sealed partial class SettingsWindow
+{
+   /// <summary>Theme editing, transfer and management are grouped together instead of crowded into the reader's View menu.</summary>
+   private StackPanel ThemesPage()
+   {
+      var page = new StackPanel { Spacing = 16, MaxWidth = 720 };
+      page.Children.Add(new TextBlock { Text = "Customize document fonts, colors and spacing, or manage your saved themes.", TextWrapping = TextWrapping.Wrap });
+      page.Children.Add(Action("EditDocumentThemeMenu", "Edit current theme", "Fonts, colors, sizes and custom CSS"));
+      page.Children.Add(Action("ManageDocumentThemesMenu", "Manage themes", "Create, copy, reorder, enable or delete themes"));
+      var transfer = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 12 };
+      transfer.Children.Add(Action("ImportDocumentThemesMenu", "Import", "Read themes from JSON files"));
+      transfer.Children.Add(Action("ExportDocumentThemesMenu", "Export", "Save a theme as JSON"));
+      page.Children.Add(transfer);
+      page.Children.Add(Action("RestoreDocumentThemesMenu", "Restore built-in themes", "Keep edited themes as custom copies"));
+      return page;
+   }
+
+
+
+   /// <summary>External-editor configuration is discoverable as a normal page with one deliberate edit action.</summary>
+   private StackPanel EditorsPage()
+   {
+      var page = new StackPanel { Spacing = 16, MaxWidth = 720 };
+      page.Children.Add(new TextBlock { Text = "Choose the editors used by Open in editor. Editors can open the document or its containing folder.", TextWrapping = TextWrapping.Wrap });
+      page.Children.Add(Action("ConfigureEditorMenuItem", "Configure editors", "Add, remove and reorder editors"));
+      return page;
+   }
+
+
+
+   /// <summary>Native labeled buttons show ordinary explanatory text rather than custom settings widgets.</summary>
+   private Button Action(string identity, string label, string description)
+   {
+      var text = new StackPanel { Spacing = 4 };
+      text.Children.Add(new TextBlock { Text = label, TextWrapping = TextWrapping.Wrap });
+      text.Children.Add(new TextBlock { Text = description, TextWrapping = TextWrapping.Wrap, Opacity = 0.7 });
+      var button = new Button { Content = text, HorizontalAlignment = HorizontalAlignment.Stretch, HorizontalContentAlignment = HorizontalAlignment.Left, Padding = new Thickness(16, 12, 16, 12) };
+      AutomationProperties.SetAutomationId(button, identity);
+      AutomationProperties.SetName(button, label);
+      button.Click += async (_, _) =>
+      {
+         if(_closed || _busy)
+         {
+            return;
+         }
+         _busy = true;
+         try
+         {
+            await _runAction(identity);
+         }
+         catch(Exception exception)
+         {
+            ReportError(exception);
+         }
+         finally
+         {
+            _busy = false;
+         }
+      };
+      return button;
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SettingsWindow.Printing.cs b/src/MarkdownViewr.Windows/SettingsWindow.Printing.cs
new file mode 100644
index 0000000..2a4a5e4
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SettingsWindow.Printing.cs
@@ -0,0 +1,129 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Printing;
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>A native Printing settings page saves defaults without opening a printer or exporting a file.</summary>
+internal sealed partial class SettingsWindow
+{
+   private readonly PrintOptionsEditor _printEditor;
+   private readonly Func<PrintOptions, bool> _savePrint;
+   private PrintOptions _savedPrint;
+   private bool _printDirty;
+
+
+
+   /// <summary>Print/PDF choices share one form; Apply saves the draft and Restore discards it without changing stored defaults.</summary>
+   private StackPanel PrintingPage()
+   {
+      var page = new StackPanel { Spacing = 16, MaxWidth = 720 };
+      page.Children.Add(new TextBlock { Text = "Choose the defaults for printing and PDF export. Apply saves these choices; the Print dialog lets you adjust them for your next output.", TextWrapping = TextWrapping.Wrap });
+      page.Children.Add(_printEditor.Fields);
+      var actions = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 12 };
+      var apply = new Button { Content = "Apply printing defaults" };
+      var restore = new Button { Content = "Restore saved choices" };
+      AutomationProperties.SetAutomationId(apply, "SettingsApplyPrint");
+      AutomationProperties.SetAutomationId(restore, "SettingsRestorePrint");
+      apply.Click += (_, _) => SavePrint();
+      restore.Click += (_, _) =>
+      {
+         _printDirty = false;
+         UpdatePrinting(_savedPrint);
+      };
+      actions.Children.Add(apply);
+      actions.Children.Add(restore);
+      page.Children.Add(actions);
+      page.Children.Add(new TextBlock { Text = "PDF destinations and Open PDF/Open folder actions are selected when exporting. This page never sends a print job.", TextWrapping = TextWrapping.Wrap, Opacity = 0.7 });
+      _printEditor.Changed += (_, _) =>
+      {
+         if(!_updating)
+         {
+            _printDirty = true;
+         }
+      };
+      return page;
+   }
+
+
+
+   /// <summary>Sibling saves refresh the baseline while retaining an unsubmitted print draft.</summary>
+   internal void UpdatePrinting(PrintOptions options)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      _savedPrint = options;
+      bool previous = _updating;
+      _updating = true;
+      try
+      {
+         if(!_printDirty)
+         {
+            _printEditor.Update(options);
+         }
+      }
+      finally
+      {
+         _updating = previous;
+      }
+   }
+
+
+
+   /// <summary>New/disabled/deleted themes refresh the shared choices without erasing other draft options.</summary>
+   internal void UpdatePrintThemes(IEnumerable<ReaderTheme> themes)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      bool previous = _updating;
+      _updating = true;
+      try
+      {
+         _printEditor.SetThemes(themes);
+      }
+      finally
+      {
+         _updating = previous;
+      }
+   }
+
+
+
+   /// <summary>Only valid explicit Apply persists; failure leaves the draft available to correct or retry.</summary>
+   private void SavePrint()
+   {
+      if(_closed || _busy || _printEditor.Read() is not { } options)
+      {
+         return;
+      }
+      try
+      {
+         if(_savePrint(options))
+         {
+            _printDirty = false;
+            UpdatePrinting(options);
+            _status.Text = "Printing defaults saved.";
+         }
+         else
+         {
+            _status.Text = "Could not save printing defaults. Please try again.";
+         }
+      }
+      catch(Exception exception)
+      {
+         ReportError(exception);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SettingsWindow.Startup.cs b/src/MarkdownViewr.Windows/SettingsWindow.Startup.cs
new file mode 100644
index 0000000..501c20f
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SettingsWindow.Startup.cs
@@ -0,0 +1,98 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using KofTwentyTwo.AppKit.Settings;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Native Advanced controls expose the same splash toggle, bounds and duration steps as gclo.</summary>
+internal sealed partial class SettingsWindow
+{
+   private readonly ToggleSwitch _showSplash = new() { Header = "Show splash screen at startup" };
+   private readonly NumberBox _splashDuration = new() { Header = "Splash duration (milliseconds)", Minimum = ShellSettings.MinSplashMilliseconds, Maximum = ShellSettings.MaxSplashMilliseconds, SmallChange = 250, SpinButtonPlacementMode = NumberBoxSpinButtonPlacementMode.Inline, HorizontalAlignment = HorizontalAlignment.Left, Width = 280 };
+   private readonly ToggleSwitch _checkStartupUpdates = new() { Header = "Check for updates at startup" };
+   private readonly ToggleSwitch _showOutlineByDefault = new() { Header = "Show Contents in new windows" };
+   private readonly ToggleSwitch _showSourceByDefault = new() { Header = "Show Source in new windows" };
+   private readonly Func<bool, int, bool, bool, bool, bool> _saveStartup;
+
+
+
+   /// <summary>Initial launch owns the shared branded AppKit overlay; later document windows open directly into their reader.</summary>
+   private StackPanel AdvancedPage(Core.AppSettings current)
+   {
+      var page = new StackPanel { Spacing = 16, MaxWidth = 720 };
+      page.Children.Add(new TextBlock { Text = "Startup", FontSize = 20, FontWeight = Microsoft.UI.Text.FontWeights.SemiBold });
+      page.Children.Add(new TextBlock { Text = "Changes apply the next time you launch MarkdownViewr. The splash fades away automatically while your document loads.", TextWrapping = TextWrapping.Wrap });
+      AutomationProperties.SetAutomationId(_showSplash, "SettingsSplashToggle");
+      AutomationProperties.SetAutomationId(_splashDuration, "SettingsSplashDurationBox");
+      AutomationProperties.SetAutomationId(_checkStartupUpdates, "SettingsStartupUpdatesToggle");
+      ToolTipService.SetToolTip(_splashDuration, "Time before the splash fades: 500–30000 milliseconds, in 250 millisecond steps.");
+      UpdateStartup(current);
+      _showSplash.Toggled += (_, _) => SaveStartup();
+      _splashDuration.ValueChanged += (_, _) => SaveStartup();
+      _checkStartupUpdates.Toggled += (_, _) => SaveStartup();
+      page.Children.Add(_showSplash);
+      page.Children.Add(_splashDuration);
+      page.Children.Add(_checkStartupUpdates);
+      return page;
+   }
+
+
+
+   /// <summary>Saved sibling preferences refresh without generating a new save or altering an unsaved CSS draft.</summary>
+   internal void UpdateStartup(Core.AppSettings settings)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      bool previous = _updating;
+      _updating = true;
+      try
+      {
+         _showSplash.IsOn = settings.ShowSplashScreen;
+         _splashDuration.Value = settings.SplashMilliseconds;
+         _splashDuration.IsEnabled = settings.ShowSplashScreen;
+         _checkStartupUpdates.IsOn = settings.CheckForUpdatesOnStartup;
+         _showOutlineByDefault.IsOn = settings.ShowOutlineByDefault;
+         _showSourceByDefault.IsOn = settings.ShowSourceByDefault;
+      }
+      finally
+      {
+         _updating = previous;
+      }
+   }
+
+
+
+   /// <summary>Routine startup choices save immediately; invalid numeric input never reaches persisted preferences.</summary>
+   private void SaveStartup()
+   {
+      if(_closed || _updating)
+      {
+         return;
+      }
+      double duration = _splashDuration.Value;
+      if(!double.IsFinite(duration))
+      {
+         _status.Text = "Enter a splash duration between 500 and 30000 milliseconds.";
+         return;
+      }
+      _splashDuration.IsEnabled = _showSplash.IsOn;
+      int milliseconds = (int)Math.Round(Math.Clamp(duration, ShellSettings.MinSplashMilliseconds, ShellSettings.MaxSplashMilliseconds));
+      try
+      {
+         _status.Text = _saveStartup(_showSplash.IsOn, milliseconds, _checkStartupUpdates.IsOn, _showOutlineByDefault.IsOn, _showSourceByDefault.IsOn) ? "Saved. Applies to new windows and the next launch." : "Could not save the setting. Please try again.";
+      }
+      catch(Exception exception)
+      {
+         ReportError(exception);
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SettingsWindow.cs b/src/MarkdownViewr.Windows/SettingsWindow.cs
new file mode 100644
index 0000000..f1a98f0
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SettingsWindow.cs
@@ -0,0 +1,220 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using KofTwentyTwo.AppKit.WinUI;
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Automation.Peers;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.UI.Xaml.Media;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>A normal resizable WinUI settings window with adaptive navigation and independently scrolling native pages.</summary>
+internal sealed partial class SettingsWindow : Window
+{
+   private readonly Grid _root = new();
+   private readonly NavigationView _navigation = new() { PaneDisplayMode = NavigationViewPaneDisplayMode.Auto, ExpandedModeThresholdWidth = 840, CompactModeThresholdWidth = 640, IsSettingsVisible = false, IsBackButtonVisible = NavigationViewBackButtonVisible.Collapsed, OpenPaneLength = 220, AlwaysShowHeader = true };
+   private readonly Dictionary<string, (string Title, UIElement Page)> _pages = new(StringComparer.Ordinal);
+   private readonly ScrollViewer _pageScroll = new() { Padding = new Thickness(24, 12, 24, 24), HorizontalScrollBarVisibility = ScrollBarVisibility.Disabled, VerticalScrollBarVisibility = ScrollBarVisibility.Auto };
+   private readonly TextBlock _status = new() { TextWrapping = TextWrapping.Wrap, Margin = new Thickness(24, 8, 24, 12) };
+   private readonly ReadingAppearanceEditor _appearance;
+   private readonly Func<ReadingAppearance, Task<bool>> _saveAppearance;
+   private readonly Func<string, Task> _runAction;
+   private string _savedCss;
+   private bool _busy;
+   private bool _closed;
+   private bool _updating;
+
+
+
+   /// <summary>Settings is a separate window; routine layout saves immediately and advanced CSS has an explicit Apply action.</summary>
+   public SettingsWindow(Core.AppSettings current, Func<ReadingAppearance, Task<bool>> saveAppearance, Func<bool, int, bool, bool, bool, bool> saveStartup, Func<bool, bool, bool> saveContents, Func<Core.Printing.PrintOptions, bool> savePrint, IEnumerable<ReaderTheme> themes, Func<string, Task> runAction)
+   {
+      Title = AppIdentity.Info.DisplayName + " — Settings";
+      SystemBackdrop = new MicaBackdrop();
+      _appearance = new ReadingAppearanceEditor(current.ReadingAppearance);
+      _savedCss = current.GlobalCss;
+      _saveStartup = saveStartup;
+      _saveContents = saveContents;
+      _savePrint = savePrint;
+      _savedPrint = current.Print;
+      _printEditor = new PrintOptionsEditor(current.Print, themes);
+      _saveAppearance = saveAppearance;
+      _runAction = runAction;
+      _root.RowDefinitions.Add(new RowDefinition { Height = new GridLength(1, GridUnitType.Star) });
+      _root.RowDefinitions.Add(new RowDefinition { Height = GridLength.Auto });
+      _root.RowDefinitions.Add(new RowDefinition { Height = GridLength.Auto });
+      Grid.SetRow(_editActions, 1);
+      _root.Children.Add(_editActions);
+      _root.Children.Add(_navigation);
+      Grid.SetRow(_status, 2);
+      AutomationProperties.SetAutomationId(_root, "SettingsWindowRoot");
+      AutomationProperties.SetName(_root, "Settings");
+      AutomationProperties.SetAutomationId(_status, "SettingsStatus");
+      AutomationProperties.SetLiveSetting(_status, AutomationLiveSetting.Polite);
+      _root.Children.Add(_status);
+      Content = _root;
+      AddPage("SettingsAppearanceTab", "General", Symbol.Home, AppearancePage(current));
+      AddPage("SettingsThemesTab", "Document themes", Symbol.Library, ThemesPage());
+      AddPage("SettingsEditorsTab", "Editors", Symbol.Edit, EditorsPage());
+      AddPage("SettingsPrintingTab", "Printing", Symbol.Print, PrintingPage());
+      AddPage("SettingsAdvancedTab", "Advanced", Symbol.Setting, AdvancedPage(current));
+      _navigation.Content = _pageScroll;
+      _navigation.SelectionChanged += (_, args) => SelectPage((string)((NavigationViewItem)args.SelectedItem).Tag);
+      _navigation.SelectedItem = _navigation.MenuItems[0];
+      _appearance.LayoutChanged += async (_, _) => await SaveAppearanceAsync(includeCss: false);
+      _navigation.BackRequested += (_, _) => EndEdit(ContentDialogResult.None);
+      Closed += (_, _) =>
+      {
+         _closed = true;
+         EndEdit(ContentDialogResult.None);
+      };
+      this.SetAppIcon(AppIdentity.Info);
+      FitWindow();
+   }
+
+
+
+   /// <summary>Uses normal Windows resizing while keeping navigation and settings controls within the monitor work area.</summary>
+   private void FitWindow()
+   {
+      double scale = this.DpiScale();
+      global::Windows.Graphics.RectInt32 area = Microsoft.UI.Windowing.DisplayArea.GetFromWindowId(AppWindow.Id, Microsoft.UI.Windowing.DisplayAreaFallback.Primary).WorkArea;
+      int width = Math.Min((int)(960 * scale), area.Width);
+      int height = Math.Min((int)(720 * scale), area.Height);
+      AppWindow.MoveAndResize(new global::Windows.Graphics.RectInt32(area.X + (area.Width - width) / 2, area.Y + (area.Height - height) / 2, width, height));
+      if(AppWindow.Presenter is Microsoft.UI.Windowing.OverlappedPresenter presenter)
+      {
+         presenter.PreferredMinimumWidth = Math.Min((int)(640 * scale), area.Width);
+         presenter.PreferredMinimumHeight = Math.Min((int)(420 * scale), area.Height);
+      }
+   }
+
+
+
+   /// <summary>The current settings XamlRoot owns theme/editor dialogs, rather than the reading window beneath it.</summary>
+   public XamlRoot DialogRoot => _root.XamlRoot;
+
+
+
+   /// <summary>Reader broadcasts refresh saved fields and CSS baselines while retaining unsubmitted CSS drafts.</summary>
+   public void UpdateAppearance(ReadingAppearance appearance)
+   {
+      if(_closed)
+      {
+         return;
+      }
+      _updating = true;
+      try
+      {
+         bool preserveCss = !string.Equals(_appearance.CssDraft, _savedCss, StringComparison.Ordinal);
+         _appearance.Update(appearance, preserveCss);
+         _savedCss = appearance.GlobalCss;
+      }
+      finally
+      {
+         _updating = false;
+      }
+   }
+
+
+
+   /// <summary>Pages use native NavigationView items and ordinary scrolling, with no nested tab or custom modal-shell behavior.</summary>
+   private void AddPage(string identity, string title, Symbol icon, UIElement content)
+   {
+      var item = new NavigationViewItem { Content = title, Icon = new SymbolIcon(icon), Tag = identity };
+      AutomationProperties.SetAutomationId(item, identity);
+      if(string.Equals(identity, "SettingsThemesTab", StringComparison.Ordinal))
+      {
+         item.Icon = new FontIcon { FontFamily = new FontFamily("Segoe Fluent Icons"), Glyph = "\uE790" };
+      }
+      _navigation.MenuItems.Add(item);
+      _pages.Add(identity, (title, content));
+   }
+
+
+
+   /// <summary>Category switches retain deliberate CSS drafts and keyboard-accessible fields within the same live window.</summary>
+   private void SelectPage(string identity)
+   {
+      (string title, UIElement page) = _pages[identity];
+      _navigation.Header = title;
+      _pageScroll.Content = null;
+      _pageScroll.Content = page;
+      _pageScroll.ChangeView(null, 0, null, disableAnimation: true);
+   }
+
+
+
+   /// <summary>Native layout controls save their validated changes; unsubmitted CSS stays a separate draft.</summary>
+   private StackPanel AppearancePage(Core.AppSettings current)
+   {
+      var page = new StackPanel { Spacing = 16, MaxWidth = 720, HorizontalAlignment = HorizontalAlignment.Stretch };
+      AddDefaultFileTypes(page);
+      AddContentsPreferences(page, current);
+      page.Children.Add(_appearance.Fields);
+      var apply = new Button { Content = "Apply custom CSS", HorizontalAlignment = HorizontalAlignment.Left };
+      AutomationProperties.SetAutomationId(apply, "SettingsApplyCss");
+      apply.Click += async (_, _) => await SaveAppearanceAsync(includeCss: true);
+      page.Children.Add(apply);
+      return page;
+   }
+
+
+
+   /// <summary>A validated save reports persistence failure and never applies an unsaved document appearance.</summary>
+   private async Task SaveAppearanceAsync(bool includeCss)
+   {
+      if(_closed || _busy || _updating)
+      {
+         return;
+      }
+      ReadingAppearance? draft = includeCss ? _appearance.Read() : _appearance.ReadLayout(_savedCss);
+      if(draft is null)
+      {
+         return;
+      }
+      _busy = true;
+      _appearance.SetEnabled(false);
+      try
+      {
+         if(await _saveAppearance(draft) && !_closed)
+         {
+            _status.Text = "Saved.";
+         }
+         else if(!_closed)
+         {
+            _status.Text = "Could not save the setting. Please try again.";
+         }
+      }
+      catch(Exception exception)
+      {
+         ReportError(exception);
+      }
+      finally
+      {
+         _busy = false;
+         if(!_closed)
+         {
+            _appearance.SetEnabled(true);
+         }
+      }
+   }
+
+
+
+   /// <summary>Errors disclose no document paths or authored CSS, and stay visible in the owned settings window.</summary>
+   private void ReportError(Exception exception)
+   {
+      if(!_closed)
+      {
+         _status.Text = "The setting could not be changed. Please try again.";
+         App.Log.Warning(FormattableString.Invariant($"Settings could not be completed ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+}
diff --git a/src/MarkdownViewr.Windows/ShellFileAssociations.cs b/src/MarkdownViewr.Windows/ShellFileAssociations.cs
new file mode 100644
index 0000000..76b67da
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ShellFileAssociations.cs
@@ -0,0 +1,43 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Queries Windows' effective user-selected ProgID without inspecting or changing protected UserChoice data.</summary>
+internal static partial class ShellFileAssociations
+{
+   private const int AssocStrProgId = 20;
+   private const int NoAssociation = unchecked((int)0x80070483);
+   private const int MaximumCharacters = 1024;
+
+
+
+   /// <summary>Windows 10+ supplies ASSOCSTR_PROGID; a missing association differs from an unavailable/oversized query.</summary>
+   internal static unsafe string? QueryProgId(string extension)
+   {
+      char[] buffer = new char[MaximumCharacters];
+      uint length = MaximumCharacters;
+      int result;
+      fixed(char* output = buffer)
+      {
+         result = QueryString(0, AssocStrProgId, extension, null, output, ref length);
+      }
+      if(result == NoAssociation)
+      {
+         return "";
+      }
+      return result == 0 && length is > 0 and <= MaximumCharacters && buffer[length - 1] == '\0'
+         ? new string(buffer, 0, (int)length - 1) : null;
+   }
+
+
+
+   /// <summary>A fixed bounded Unicode query reads the effective association; no default-setting API is exposed.</summary>
+   [LibraryImport("shlwapi.dll", EntryPoint = "AssocQueryStringW", StringMarshalling = StringMarshalling.Utf16)]
+   private static unsafe partial int QueryString(uint flags, int value, string association, string? extra, char* output, ref uint characters);
+}
diff --git a/src/MarkdownViewr.Windows/SourceTextAutomationPeer.cs b/src/MarkdownViewr.Windows/SourceTextAutomationPeer.cs
new file mode 100644
index 0000000..dfefcd0
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SourceTextAutomationPeer.cs
@@ -0,0 +1,32 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml.Automation.Peers;
+using Microsoft.UI.Xaml.Automation.Provider;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Adds read-only native plain-value accessibility while preserving RichEdit's own actual text-range provider.</summary>
+internal sealed class SourceTextAutomationPeer(SourceTextView owner) : RichEditBoxAutomationPeer(owner), IValueProvider
+{
+   /// <summary>Source cannot be edited by accessibility, just as it cannot be edited by keyboard or paste.</summary>
+   public bool IsReadOnly => true;
+
+
+
+   /// <summary>Returns the real native plain text, never a cached renderer diagnostic or synthetic test value.</summary>
+   public string Value => owner.Text;
+
+
+
+   /// <summary>Read-only source rejects accessibility editing rather than silently modifying the committed document.</summary>
+   public void SetValue(string value) => throw new InvalidOperationException("Markdown source is read-only.");
+
+
+
+   /// <summary>Only Value is extended; native RichEdit supplies Text, selection and scrolling patterns.</summary>
+   protected override object GetPatternCore(PatternInterface patternInterface) => patternInterface == PatternInterface.Value ? this : base.GetPatternCore(patternInterface);
+}
diff --git a/src/MarkdownViewr.Windows/SourceTextView.Highlighting.cs b/src/MarkdownViewr.Windows/SourceTextView.Highlighting.cs
new file mode 100644
index 0000000..ed902e0
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SourceTextView.Highlighting.cs
@@ -0,0 +1,172 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Media;
+using NativeText = Microsoft.UI.Text;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Parser classification runs off-thread; bounded native paint batches discard stale snapshots and palettes.</summary>
+public sealed partial class SourceTextView
+{
+   /// <summary>Native hover/focus chrome remains intact; semantic document ranges own their foreground across visual states.</summary>
+   protected override void OnApplyTemplate()
+   {
+      base.OnApplyTemplate();
+      if(VisualTreeHelper.GetChildrenCount(this) > 0 && VisualTreeHelper.GetChild(this, 0) is FrameworkElement root)
+      {
+         foreach(VisualStateGroup group in VisualStateManager.GetVisualStateGroups(root))
+         {
+            foreach(VisualState state in group.States)
+            {
+               if(state.Storyboard is null)
+               {
+                  continue;
+               }
+               Microsoft.UI.Xaml.Media.Animation.Timeline[] foregroundAnimations = state.Storyboard.Children
+                  .Where(animation => string.Equals(Microsoft.UI.Xaml.Media.Animation.Storyboard.GetTargetName(animation), "ContentElement", StringComparison.Ordinal)
+                     && string.Equals(Microsoft.UI.Xaml.Media.Animation.Storyboard.GetTargetProperty(animation), "Foreground", StringComparison.Ordinal))
+                  .ToArray();
+               foreach(Microsoft.UI.Xaml.Media.Animation.Timeline animation in foregroundAnimations)
+               {
+                  state.Storyboard.Children.Remove(animation);
+               }
+            }
+         }
+      }
+      _ = PaintAsync();
+   }
+
+
+
+   /// <summary>Only the most recent literal snapshot can install tokens after background parsing completes.</summary>
+   private async Task HighlightAsync(string text, int generation, CancellationToken cancellationToken)
+   {
+      try
+      {
+         IReadOnlyList<SourceToken> tokens = await Task.Run(() => MarkdownSourceHighlighting.Parse(text, cancellationToken), cancellationToken);
+         if(_disposed || generation != _generation || cancellationToken.IsCancellationRequested)
+         {
+            return;
+         }
+         _tokens = tokens;
+         await PaintAsync();
+      }
+      catch(OperationCanceledException)
+      {
+         // A newer snapshot or closing window owns the source now.
+      }
+      catch(Exception exception)
+      {
+         App.Log.Warning(FormattableString.Invariant($"Source highlighting could not complete ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+
+
+
+   /// <summary>Windows high contrast overrides semantic colors; ordinary light/dark modes use readable document accents.</summary>
+   private async Task PaintAsync()
+   {
+      try
+      {
+         await PaintPaletteAsync();
+      }
+      catch(Exception exception)
+      {
+         App.Log.Warning(FormattableString.Invariant($"Source colors could not be applied ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+
+
+
+   /// <summary>Lets native inherited properties settle before semantic formatting, then yields between bounded paint batches.</summary>
+   private async Task PaintPaletteAsync()
+   {
+      if(_disposed)
+      {
+         return;
+      }
+      int generation = ++_paintGeneration;
+      int snapshot = _generation;
+      var palette = new SourcePalette(_theme, ActualTheme == ElementTheme.Dark);
+      bool highContrast = _accessibility.HighContrast;
+      global::Windows.UI.Color foreground = highContrast ? _systemColors.UIElementColor(global::Windows.UI.ViewManagement.UIElementType.WindowText) : Color(palette.Foreground);
+      global::Windows.UI.Color background = highContrast ? _systemColors.UIElementColor(global::Windows.UI.ViewManagement.UIElementType.Window) : Color(palette.Background);
+      Background = new SolidColorBrush(background);
+      Foreground = new SolidColorBrush(foreground);
+      var propertiesApplied = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+      if(!DispatcherQueue.TryEnqueue(Microsoft.UI.Dispatching.DispatcherQueuePriority.Low, propertiesApplied.SetResult))
+      {
+         return;
+      }
+      await propertiesApplied.Task;
+      if(_disposed || generation != _paintGeneration || snapshot != _generation)
+      {
+         return;
+      }
+      NativeText.ITextCharacterFormat defaults = Document.GetDefaultCharacterFormat();
+      defaults.ForegroundColor = foreground;
+      defaults.Bold = NativeText.FormatEffect.Off;
+      defaults.Italic = NativeText.FormatEffect.Off;
+      defaults.Strikethrough = NativeText.FormatEffect.Off;
+      WriteNative(() =>
+      {
+         Document.SetDefaultCharacterFormat(defaults);
+         Document.GetRange(0, TextLength).CharacterFormat = defaults;
+      });
+      IReadOnlyList<SourceToken> tokens = _tokens;
+      for(int first = 0; first < tokens.Count; first += 256)
+      {
+         if(_disposed || generation != _paintGeneration || snapshot != _generation)
+         {
+            return;
+         }
+         PaintBatch(tokens, first, palette, foreground, highContrast);
+         await Task.Yield();
+      }
+   }
+
+
+
+   /// <summary>Independent ranges change character appearance only, retaining source selection, spelling and scroll positions.</summary>
+   private void PaintBatch(IReadOnlyList<SourceToken> tokens, int first, SourcePalette palette, global::Windows.UI.Color foreground, bool highContrast)
+   {
+      WriteNative(() =>
+      {
+         Document.BatchDisplayUpdates();
+         try
+         {
+            for(int index = first; index < Math.Min(first + 256, tokens.Count); index++)
+            {
+               SourceToken token = tokens[index];
+               NativeText.ITextRange range = Document.GetRange(token.Start, token.Start + token.Length);
+               NativeText.ITextCharacterFormat format = range.CharacterFormat;
+               format.ForegroundColor = highContrast ? foreground : Color(palette.Color(token.Kind));
+               if(token.Kind is SourceTokenKind.Heading or SourceTokenKind.Strong)
+               {
+                  format.Bold = NativeText.FormatEffect.On;
+               }
+               if(token.Kind is SourceTokenKind.Emphasis or SourceTokenKind.Quote)
+               {
+                  format.Italic = NativeText.FormatEffect.On;
+               }
+               if(token.Kind == SourceTokenKind.Strikethrough)
+               {
+                  format.Strikethrough = NativeText.FormatEffect.On;
+               }
+               range.CharacterFormat = format;
+            }
+         }
+         finally
+         {
+            Document.ApplyDisplayUpdates();
+         }
+      });
+   }
+}
diff --git a/src/MarkdownViewr.Windows/SourceTextView.cs b/src/MarkdownViewr.Windows/SourceTextView.cs
new file mode 100644
index 0000000..72dbf42
--- /dev/null
+++ b/src/MarkdownViewr.Windows/SourceTextView.cs
@@ -0,0 +1,215 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using MarkdownViewr.Windows.Core.Documents;
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation.Peers;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.UI.Xaml.Input;
+using NativeText = Microsoft.UI.Text;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Read-only native source with passive character formatting, literal copying and real text accessibility.</summary>
+public sealed partial class SourceTextView : RichEditBox, IDisposable
+{
+   private readonly global::Windows.UI.ViewManagement.AccessibilitySettings _accessibility = new();
+   private readonly global::Windows.UI.ViewManagement.UISettings _systemColors = new();
+   private CancellationTokenSource? _classification;
+   private IReadOnlyList<SourceToken> _tokens = [];
+   private ReaderTheme _theme = ThemeCatalog.Find(null);
+   private DocumentSourceText? _snapshot;
+   private string _input = "";
+   private int _generation;
+   private int _paintGeneration;
+   private bool _disposed;
+
+
+
+   /// <summary>Source never loads rich text or enables URL input; copy emits only deliberate plain text.</summary>
+   public SourceTextView()
+   {
+      IsReadOnly = true;
+      IsSpellCheckEnabled = false;
+      IsTextPredictionEnabled = false;
+      ClipboardCopyFormat = RichEditClipboardFormat.PlainText;
+      InputScope = new InputScope();
+      InputScope.Names.Add(new InputScopeName { NameValue = InputScopeNameValue.Default });
+      ActualThemeChanged += ThemeChanged;
+      _systemColors.ColorValuesChanged += SystemColorsChanged;
+      CopyingToClipboard += CopySource;
+   }
+
+
+
+   /// <summary>Reads actual native plain text, excluding RichEdit's final paragraph sentinel.</summary>
+   public string Text
+   {
+      get
+      {
+         Document.GetRange(0, TextLength).GetText(NativeText.TextGetOptions.None, out string text);
+         return text;
+      }
+   }
+
+
+
+   /// <summary>Literal UTF16 character count bounds native selection and geometry without repeatedly allocating the document.</summary>
+   public int TextLength => _input.Length;
+
+
+
+   /// <summary>Reports the actual native selection, keeping paired find and read-only source focus intact.</summary>
+   public int SelectionLength => Document.Selection.EndPosition - Document.Selection.StartPosition;
+
+
+
+   /// <summary>Commits a new shared snapshot only as literal native text; parser work can never replace or mutate it.</summary>
+   public void SetSource(string text, DocumentSourceText? snapshot)
+   {
+      ArgumentNullException.ThrowIfNull(text);
+      _snapshot = snapshot;
+      if(string.Equals(_input, text, StringComparison.Ordinal))
+      {
+         return;
+      }
+      _input = text;
+      WriteNative(() => Document.SetText(NativeText.TextSetOptions.None, text));
+      _tokens = [];
+      _classification?.Cancel();
+      _classification?.Dispose();
+      _classification = new CancellationTokenSource();
+      _ = HighlightAsync(text, ++_generation, _classification.Token);
+   }
+
+
+
+   /// <summary>Palette changes recolor the current tokens without reparsing or altering the selected text.</summary>
+   public void SetTheme(ReaderTheme theme)
+   {
+      _theme = theme;
+      _ = PaintAsync();
+   }
+
+
+
+   /// <summary>Find selections remain native UTF16 ranges, never HTML or synthetic accessibility values.</summary>
+   public void Select(int start, int length)
+   {
+      int first = Math.Clamp(start, 0, TextLength);
+      Document.Selection.SetRange(first, Math.Clamp(start + length, first, TextLength));
+   }
+
+
+
+   /// <summary>Returns full native content-client geometry, including offscreen characters, without adding the scroll offset again.</summary>
+   public global::Windows.Foundation.Rect GetRectFromCharacterIndex(int index, bool trailingEdge)
+   {
+      int position = Math.Clamp(index + (trailingEdge ? 1 : 0), 0, TextLength);
+      NativeText.ITextRange range = Document.GetRange(position, Math.Min(position + 1, TextLength));
+      const NativeText.PointOptions Options = NativeText.PointOptions.ClientCoordinates | NativeText.PointOptions.AllowOffClient | NativeText.PointOptions.Start;
+      range.GetPoint(NativeText.HorizontalCharacterAlignment.Left, NativeText.VerticalCharacterAlignment.Top, Options, out global::Windows.Foundation.Point first);
+      range.GetPoint(NativeText.HorizontalCharacterAlignment.Right, NativeText.VerticalCharacterAlignment.Bottom, Options, out global::Windows.Foundation.Point last);
+      return new global::Windows.Foundation.Rect(first.X, first.Y, Math.Max(0, last.X - first.X), Math.Max(0, last.Y - first.Y));
+   }
+
+
+
+   /// <summary>Preserves native Text/Scroll patterns while exposing the actual read-only plain value for accessibility.</summary>
+   protected override AutomationPeer OnCreateAutomationPeer() => new SourceTextAutomationPeer(this);
+
+
+
+   /// <summary>Repaints after native theme propagation finishes so inherited foreground updates cannot erase semantic ranges.</summary>
+   private void ThemeChanged(FrameworkElement sender, object args) => DispatcherQueue.TryEnqueue(() =>
+   {
+      if(!_disposed)
+      {
+         _ = PaintAsync();
+      }
+   });
+
+
+
+   /// <summary>System high contrast takes precedence over document accents and marshals back to the owned UI queue.</summary>
+   private void SystemColorsChanged(global::Windows.UI.ViewManagement.UISettings sender, object args) => DispatcherQueue.TryEnqueue(() =>
+   {
+      if(!_disposed)
+      {
+         _ = PaintAsync();
+      }
+   });
+
+
+
+   /// <summary>A native clipboard failure can be reported by the owning reader without exposing selected document content.</summary>
+   public event EventHandler? CopyFailed;
+
+
+
+   /// <summary>Only an explicit native Copy action receives exact original visible source, with no rich-text clipboard formats.</summary>
+   private void CopySource(RichEditBox sender, TextControlCopyingToClipboardEventArgs args)
+   {
+      int start = Math.Clamp(Document.Selection.StartPosition, 0, TextLength);
+      int end = Math.Clamp(Document.Selection.EndPosition, start, TextLength);
+      string text = _snapshot?.GetCopyText(start, end - start) ?? Text.Substring(start, end - start);
+      args.Handled = true;
+      try
+      {
+         var package = new global::Windows.ApplicationModel.DataTransfer.DataPackage();
+         package.SetText(text);
+         global::Windows.ApplicationModel.DataTransfer.Clipboard.SetContent(package);
+      }
+      catch(System.Runtime.InteropServices.COMException exception)
+      {
+         App.Log.Warning(FormattableString.Invariant($"The source could not be copied ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+         CopyFailed?.Invoke(this, EventArgs.Empty);
+      }
+   }
+
+
+
+   /// <summary>Closing cancels stale classification and painting and releases the system accessibility subscription.</summary>
+   public void Dispose()
+   {
+      if(!_disposed)
+      {
+         _disposed = true;
+         _generation++;
+         _paintGeneration++;
+         _classification?.Cancel();
+         _classification?.Dispose();
+         _systemColors.ColorValuesChanged -= SystemColorsChanged;
+         ActualThemeChanged -= ThemeChanged;
+         CopyingToClipboard -= CopySource;
+      }
+      GC.SuppressFinalize(this);
+   }
+
+
+
+   /// <summary>Read-only RichEdit denies host range formatting; native writes run synchronously with read-only restored before yielding.</summary>
+   private void WriteNative(Action write)
+   {
+      IsReadOnly = false;
+      try
+      {
+         write();
+         Document.ClearUndoRedoHistory();
+      }
+      finally
+      {
+         IsReadOnly = true;
+      }
+   }
+
+
+
+   /// <summary>Converts only validated six-digit RGB values to native colors, never authored CSS.</summary>
+   private static global::Windows.UI.Color Color(string value) => global::Windows.UI.Color.FromArgb(255, byte.Parse(value.AsSpan(1, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture), byte.Parse(value.AsSpan(3, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture), byte.Parse(value.AsSpan(5, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture));
+}
diff --git a/src/MarkdownViewr.Windows/ThemeEditor.cs b/src/MarkdownViewr.Windows/ThemeEditor.cs
new file mode 100644
index 0000000..4634c1c
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ThemeEditor.cs
@@ -0,0 +1,162 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Edits document appearance through native controls; invalid input leaves the editor open.</summary>
+internal static class ThemeEditor
+{
+   /// <summary>Returns a validated edited theme, or null after cancellation.</summary>
+   public static async Task<Core.Themes.ReaderTheme?> ShowAsync(SettingsWindow host, Core.Themes.ReaderTheme theme, IEnumerable<string>? existingNames = null)
+   {
+      JsonNode source = JsonNode.Parse(theme.Json)!;
+      TextBox name = Field("Name (a new name creates a custom theme)", theme.Name, "ThemeEditorName", 80);
+      TextBox css = Field("Custom CSS", source["customCSS"]?.GetValue<string>() ?? "", "ThemeEditorCss", 128 * 1024);
+      css.AcceptsReturn = true;
+      css.Height = 160;
+      css.TextWrapping = TextWrapping.Wrap;
+      css.FontFamily = new Microsoft.UI.Xaml.Media.FontFamily("Consolas");
+      var error = new TextBlock { TextWrapping = TextWrapping.Wrap };
+      Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(error, "ThemeEditorError");
+      var fields = new StackPanel { Spacing = 12 };
+      fields.Children.Add(name);
+      Dictionary<string, TextBox> fonts = AddFonts(fields, source["fonts"]!.AsObject());
+      Dictionary<string, NumberBox> sizes = AddSizes(fields, source["sizes"]!.AsObject());
+      Dictionary<string, TextBox> colors = AddColors(fields, source["colors"]!.AsObject());
+      fields.Children.Add(css);
+      fields.Children.Add(error);
+      Core.Themes.ReaderTheme? edited = null;
+      bool Validate()
+      {
+         try
+         {
+            Core.Themes.ReaderTheme candidate = theme.Edit(name.Text, fonts.ToDictionary(pair => pair.Key, pair => pair.Value.Text, StringComparer.Ordinal),
+               sizes.ToDictionary(pair => pair.Key, pair => pair.Value.Value, StringComparer.Ordinal),
+               colors.ToDictionary(pair => pair.Key, pair => pair.Value.Text, StringComparer.Ordinal), css.Text);
+            Core.Themes.ThemeManagement.ValidateEditName(theme.Name, candidate.Name, existingNames ?? []);
+            edited = candidate;
+            return true;
+         }
+         catch(Exception exception) when(exception is JsonException or ArgumentException)
+         {
+            error.Text = exception.Message;
+            error.StartBringIntoView();
+            return false;
+         }
+      }
+      ContentDialogResult result = await host.ShowEditorAsync("Edit document theme", fields, "Save theme", Validate);
+      return result == ContentDialogResult.Primary ? edited : null;
+   }
+
+
+
+   /// <summary>All three reference font families remain editable through stable native controls.</summary>
+   private static Dictionary<string, TextBox> AddFonts(StackPanel fields, JsonObject source)
+   {
+      var fonts = new Dictionary<string, TextBox>(StringComparer.Ordinal);
+      foreach((string key, string label, string id) in new[]
+      {
+         ("body", "Body font", "ThemeEditorBodyFont"),
+         ("heading", "Heading font", "ThemeEditorHeadingFont"),
+         ("code", "Code font", "ThemeEditorCodeFont"),
+      })
+      {
+         TextBox input = Field(label, source[key]!.GetValue<string>(), id, 80);
+         fonts.Add(key, input);
+         fields.Children.Add(input);
+      }
+      return fonts;
+   }
+
+
+
+   /// <summary>Font-size and line-height controls use the same finite bounds as the saved schema.</summary>
+   private static Dictionary<string, NumberBox> AddSizes(StackPanel fields, JsonObject source)
+   {
+      var sizes = new Dictionary<string, NumberBox>(StringComparer.Ordinal);
+      foreach((string key, string label, string id) in new[]
+      {
+         ("baseFontSize", "Body font size", "ThemeEditorBodySize"),
+         ("h1Size", "Heading 1 size", "ThemeEditorHeading1Size"),
+         ("h2Size", "Heading 2 size", "ThemeEditorHeading2Size"),
+         ("h3Size", "Heading 3 size", "ThemeEditorHeading3Size"),
+         ("h4Size", "Heading 4 size", "ThemeEditorHeading4Size"),
+         ("h5Size", "Heading 5 size", "ThemeEditorHeading5Size"),
+         ("h6Size", "Heading 6 size", "ThemeEditorHeading6Size"),
+         ("codeFontSize", "Code font size", "ThemeEditorCodeSize"),
+         ("lineHeight", "Line height", "ThemeEditorLineHeight"),
+      })
+      {
+         bool lineHeight = string.Equals(key, "lineHeight", StringComparison.Ordinal);
+         var input = new NumberBox
+         {
+            Header = label,
+            Minimum = lineHeight ? 0.5 : 6,
+            Maximum = lineHeight ? 4 : 96,
+            SmallChange = lineHeight ? 0.1 : 1,
+            LargeChange = lineHeight ? 0.5 : 5,
+            Value = source[key]!.GetValue<double>(),
+         };
+         Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(input, id);
+         sizes.Add(key, input);
+         fields.Children.Add(input);
+      }
+      return sizes;
+   }
+
+
+
+   /// <summary>Keeps every palette field editable, including all heading and highlight colors.</summary>
+   private static Dictionary<string, TextBox> AddColors(StackPanel fields, JsonObject source)
+   {
+      var colors = new Dictionary<string, TextBox>(StringComparer.Ordinal);
+      foreach((string key, JsonNode? value) in source)
+      {
+         string? label = key switch
+         {
+            "background" => "Background",
+            "text" => "Text",
+            "heading1" => "Heading 1",
+            "heading2" => "Heading 2",
+            "heading3" => "Heading 3",
+            "heading4" => "Heading 4",
+            "heading5" => "Heading 5",
+            "heading6" => "Heading 6",
+            "link" => "Links",
+            "codeBackground" => "Code background",
+            "codeText" => "Code text",
+            "blockquoteBorder" => "Quote border",
+            "blockquoteBackground" => "Quote background",
+            "highlightBackground" => "Highlight/selection background",
+            "highlightText" => "Highlight/selection text",
+            _ => null,
+         };
+         if(label is null)
+         {
+            continue;
+         }
+         TextBox input = Field(label + " (#RRGGBB)", value!.GetValue<string>(), "ThemeEditorColor:" + key, 7);
+         colors.Add(key, input);
+         fields.Children.Add(input);
+      }
+      return colors;
+   }
+
+
+
+   /// <summary>Creates a labeled text control with a stable accessibility identifier.</summary>
+   private static TextBox Field(string label, string value, string id, int maximumLength)
+   {
+      var input = new TextBox { Header = label, Text = value, MaxLength = maximumLength };
+      Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(input, id);
+      return input;
+   }
+}
diff --git a/src/MarkdownViewr.Windows/ThemeManagementDialog.Palette.cs b/src/MarkdownViewr.Windows/ThemeManagementDialog.Palette.cs
new file mode 100644
index 0000000..15a5694
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ThemeManagementDialog.Palette.cs
@@ -0,0 +1,59 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.UI.Xaml.Media;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Native theme rows preview validated palettes and state without depending on color alone.</summary>
+internal sealed partial class ThemeManagementDialog
+{
+   /// <summary>Accessible names and textual built-in/enabled/default labels remain readable in light, dark and high contrast.</summary>
+   private static StackPanel ThemeRow(ReaderTheme theme, bool enabled, bool isDefault, bool edited)
+   {
+      var row = new StackPanel { Spacing = 4, Padding = new Thickness(0, 4, 0, 4) };
+      row.Children.Add(new TextBlock { Text = theme.Name, TextWrapping = TextWrapping.Wrap, FontWeight = Microsoft.UI.Text.FontWeights.SemiBold });
+      var palette = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 4 };
+      using var document = JsonDocument.Parse(theme.Json);
+      JsonElement colors = document.RootElement.GetProperty("colors");
+      foreach((string field, string label) in new[] { ("background", "Background"), ("text", "Text"), ("heading1", "Heading 1"), ("heading2", "Heading 2"), ("link", "Link") })
+      {
+         palette.Children.Add(ColorPreview(theme.Name, field, label, colors.GetProperty(field).GetString()!));
+      }
+      row.Children.Add(palette);
+      bool builtIn = ThemeCatalog.BuiltIn.Any(item => string.Equals(item.Name, theme.Name, StringComparison.Ordinal));
+      string kind = builtIn ? (edited ? "Built-in (edited)" : "Built-in") : "Custom";
+      var state = new TextBlock { Text = kind + " · " + (enabled ? "Enabled" : "Disabled") + (isDefault ? " · Default" : ""), TextWrapping = TextWrapping.Wrap, FontSize = 12, Opacity = 0.7 };
+      AutomationProperties.SetAutomationId(state, "ThemeState:" + theme.Name);
+      row.Children.Add(state);
+      return row;
+   }
+
+
+
+   /// <summary>Only validated six-digit palette colors become native brushes; the hexadecimal value also has a textual name/tooltip.</summary>
+   private static Border ColorPreview(string theme, string field, string label, string value)
+   {
+      var color = global::Windows.UI.Color.FromArgb(255,
+         byte.Parse(value.AsSpan(1, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture),
+         byte.Parse(value.AsSpan(3, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture),
+         byte.Parse(value.AsSpan(5, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture));
+      var brush = new SolidColorBrush(color);
+      var swatch = new TextBlock { Text = "●", Width = 18, Height = 18, FontSize = 14, TextAlignment = TextAlignment.Center, Foreground = brush };
+      AutomationProperties.SetName(swatch, label + " color " + value);
+      AutomationProperties.SetAutomationId(swatch, "ThemePalette:" + theme + ":" + field);
+      var border = new Border { Width = 20, Height = 20, CornerRadius = new CornerRadius(10), BorderThickness = new Thickness(1), BorderBrush = new SolidColorBrush(global::Windows.UI.Color.FromArgb(255, 128, 128, 128)), Background = brush, Child = swatch };
+      ToolTipService.SetToolTip(border, label + ": " + value);
+      return border;
+   }
+}
diff --git a/src/MarkdownViewr.Windows/ThemeManagementDialog.cs b/src/MarkdownViewr.Windows/ThemeManagementDialog.cs
new file mode 100644
index 0000000..f7b083a
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ThemeManagementDialog.cs
@@ -0,0 +1,328 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Automation;
+using Microsoft.UI.Xaml.Controls;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>A copied native theme-list draft cannot alter saved choices until the owner presses Save.</summary>
+internal sealed partial class ThemeManagementDialog
+{
+   private AppSettings _draft;
+   private readonly ListBox _list = new() { Name = "ThemeList", Height = 360 };
+   private readonly CheckBox _enabled = new() { Name = "ThemeListEnabled", Content = "Enabled in theme menu and cycling" };
+   private readonly RadioButton _defaultTheme = new() { Name = "ThemeListDefault", Content = "Default document theme", GroupName = "DefaultDocumentTheme" };
+   private readonly TextBlock _status = new() { TextWrapping = TextWrapping.Wrap };
+   private readonly Grid _content;
+   private SettingsWindow? _host;
+   private string? _selected;
+   private bool _loading;
+   private readonly Microsoft.UI.WindowId _owner;
+   private ManagerAction _action;
+   private ReaderTheme? _requestedTheme;
+
+
+
+   /// <summary>The manager includes disabled choices and keeps deletion/restoration inside the cancel-safe draft.</summary>
+   public ThemeManagementDialog(AppSettings settings, Microsoft.UI.WindowId owner)
+   {
+      _draft = SettingsChanges.Copy(settings);
+      _owner = owner;
+      var actions = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 8 };
+      actions.Children.Add(ActionButton("ThemeListUp", "Move up", () => ChangeSelected(up: true)));
+      actions.Children.Add(ActionButton("ThemeListDown", "Move down", () => ChangeSelected(up: false)));
+      actions.Children.Add(ActionButton("ThemeListDelete", "Delete", DeleteSelected));
+      var panel = new StackPanel { Spacing = 8 };
+      panel.Children.Add(new TextBlock { Text = "Disabled themes stay editable. Deleted built-ins can be restored. Save commits these changes; Cancel discards them.", TextWrapping = TextWrapping.Wrap });
+      panel.Children.Add(_enabled);
+      panel.Children.Add(_defaultTheme);
+      panel.Children.Add(new TextBlock { Text = "The saved default is used in new windows and applied to open readers when you save.", TextWrapping = TextWrapping.Wrap, Opacity = 0.7 });
+      var editActions = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 8 };
+      editActions.Children.Add(ActionButton("ThemeListNew", "New", () => RequestEdit(ThemeManagement.NewTheme(_draft))));
+      editActions.Children.Add(ActionButton("ThemeListCopy", "Copy", () => EditSelected(copy: true)));
+      editActions.Children.Add(ActionButton("ThemeListEdit", "Edit", () => EditSelected(copy: false)));
+
+      panel.Children.Add(editActions);
+      var transfers = new StackPanel { Orientation = Orientation.Horizontal, Spacing = 8 };
+      transfers.Children.Add(ActionButton("ThemeListImport", "Import...", () => RequestTransfer(ManagerAction.Import)));
+      transfers.Children.Add(ActionButton("ThemeListExport", "Export...", () => RequestTransfer(ManagerAction.Export)));
+      panel.Children.Add(transfers);
+      panel.Children.Add(actions);
+      panel.Children.Add(ActionButton("ThemeListRestore", "Restore built-ins", Restore));
+      panel.Children.Add(_status);
+      _content = new Grid { ColumnSpacing = 16, RowSpacing = 16 };
+      _content.ColumnDefinitions.Add(new ColumnDefinition { Width = new GridLength(220) });
+      _content.ColumnDefinitions.Add(new ColumnDefinition { Width = new GridLength(1, GridUnitType.Star) });
+      _content.RowDefinitions.Add(new RowDefinition { Height = GridLength.Auto });
+      _content.RowDefinitions.Add(new RowDefinition { Height = GridLength.Auto });
+      _content.Children.Add(_list);
+      Grid.SetColumn(panel, 1);
+      _content.Children.Add(panel);
+      _content.SizeChanged += (_, _) =>
+      {
+         bool narrow = _content.ActualWidth < 600;
+         _content.ColumnDefinitions[0].Width = narrow ? new GridLength(1, GridUnitType.Star) : new GridLength(220);
+         _content.ColumnDefinitions[1].Width = narrow ? new GridLength(0) : new GridLength(1, GridUnitType.Star);
+         Grid.SetColumn(panel, narrow ? 0 : 1);
+         Grid.SetRow(panel, narrow ? 1 : 0);
+      };
+      InitializeSelectionControls();
+      Refresh(ThemeManagement.Active(_draft).Name);
+   }
+
+
+
+   /// <summary>All selected-theme controls edit only the copied manager draft, with guarded refresh events.</summary>
+   private void InitializeSelectionControls()
+   {
+      _list.SelectionChanged += (_, _) => Select();
+      _enabled.Checked += (_, _) => SetEnabled(true);
+      _enabled.Unchecked += (_, _) => SetEnabled(false);
+      _defaultTheme.Checked += (_, _) =>
+      {
+         if(!_loading)
+         {
+            UseSelected();
+         }
+      };
+   }
+
+
+
+   /// <summary>Only explicit Save returns the copied theme state to the owning window.</summary>
+   public async Task<AppSettings?> ShowAsync(SettingsWindow host, Func<bool> isOpen)
+   {
+      _host = host;
+      while(isOpen() && host.IsOpen)
+      {
+         _action = ManagerAction.None;
+         if(await host.ShowEditorAsync("Manage document themes", _content, "Save themes") == ContentDialogResult.Primary)
+         {
+            return _draft;
+         }
+         if(!isOpen() || _action == ManagerAction.None)
+         {
+            return null;
+         }
+         try
+         {
+            await RunActionAsync(host.DialogRoot);
+         }
+         catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or System.Runtime.InteropServices.COMException or ObjectDisposedException or InvalidOperationException or ArgumentException)
+         {
+            _status.Text = "The selected theme action could not be completed. Your draft is retained.";
+            App.Log.Warning(FormattableString.Invariant($"A native theme action could not be completed ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+         }
+         if(isOpen())
+         {
+            Refresh(_selected);
+         }
+      }
+      return null;
+   }
+
+
+
+   /// <summary>Native action identities are available to accessibility and real acceptance tests.</summary>
+   private static Button ActionButton(string name, string text, Action action)
+   {
+      var button = new Button { Name = name, Content = text };
+      button.Click += (_, _) => action();
+      return button;
+   }
+
+
+
+   /// <summary>Shows saved order and enabled state while retaining selection through moves.</summary>
+   private void Refresh(string? selected)
+   {
+      _loading = true;
+      _list.Items.Clear();
+      var editedNames = _draft.UserThemes.Select(ReaderTheme.ParseCompatible).Select(theme => theme.Name).ToHashSet(StringComparer.Ordinal);
+      foreach(ReaderTheme theme in ThemeManagement.All(_draft))
+      {
+         bool enabled = !_draft.DisabledThemes.Contains(theme.Name, StringComparer.Ordinal);
+         bool isDefault = enabled && string.Equals(theme.Name, _draft.DocumentTheme, StringComparison.Ordinal);
+         var item = new ListBoxItem { Content = ThemeRow(theme, enabled, isDefault, editedNames.Contains(theme.Name)), Tag = theme.Name, HorizontalContentAlignment = HorizontalAlignment.Stretch };
+         AutomationProperties.SetName(item, theme.Name);
+         AutomationProperties.SetAutomationId(item, "ThemeChoice:" + theme.Name);
+         _list.Items.Add(item);
+         if(string.Equals(selected, theme.Name, StringComparison.Ordinal))
+         {
+            _list.SelectedItem = item;
+         }
+      }
+      if(_list.SelectedItem is null && _list.Items.Count > 0)
+      {
+         _list.SelectedIndex = 0;
+      }
+      _loading = false;
+      Select();
+   }
+
+
+
+   /// <summary>Selection changes update only native draft controls.</summary>
+   private void Select()
+   {
+      if(_loading)
+      {
+         return;
+      }
+      _loading = true;
+      _selected = (_list.SelectedItem as ListBoxItem)?.Tag as string;
+      _enabled.IsEnabled = _selected is not null;
+      _enabled.IsChecked = _selected is not null && !_draft.DisabledThemes.Contains(_selected, StringComparer.Ordinal);
+      _defaultTheme.IsEnabled = _selected is not null;
+      _defaultTheme.IsChecked = _enabled.IsChecked == true && string.Equals(_selected, _draft.DocumentTheme, StringComparison.Ordinal);
+      if(_list.SelectedItem is not null)
+      {
+         _list.ScrollIntoView(_list.SelectedItem);
+      }
+      _loading = false;
+   }
+
+
+
+   /// <summary>Enable/disable changes preserve JSON and all other draft fields.</summary>
+   private void SetEnabled(bool enabled)
+   {
+      if(!_loading && _selected is not null)
+      {
+         _draft = ThemeManagement.SetEnabled(_draft, _selected, enabled);
+         Refresh(_selected);
+      }
+   }
+
+
+
+   /// <summary>Reorders a selected visible entry, including a disabled theme.</summary>
+   private void ChangeSelected(bool up)
+   {
+      if(_selected is not null)
+      {
+         _draft = ThemeManagement.Move(_draft, _selected, up);
+         Refresh(_selected);
+      }
+   }
+
+
+
+   /// <summary>Deletion remains reversible with Cancel; saved built-in deletion is restorable.</summary>
+   private void DeleteSelected()
+   {
+      if(_selected is not null)
+      {
+         _draft = ThemeManagement.Delete(_draft, _selected);
+         _status.Text = "Removed from this draft. Save commits the deletion; Cancel discards it.";
+         Refresh(null);
+      }
+   }
+
+
+
+   /// <summary>Restoration retains edited palettes as renamed custom themes and re-enables all choices.</summary>
+   private void Restore()
+   {
+      _draft = ThemeManagement.RestoreBuiltIns(_draft);
+      _status.Text = "Original built-ins restored in this draft. Edited built-ins are kept as renamed custom themes.";
+      Refresh(_draft.DocumentTheme);
+   }
+
+
+
+   /// <summary>Each secondary dialog finishes before the manager reopens; cancellation keeps the copied draft intact.</summary>
+   private async Task RunActionAsync(XamlRoot root)
+   {
+      if(_action == ManagerAction.Edit && _requestedTheme is { } original)
+      {
+         ReaderTheme? edited = await ThemeEditor.ShowAsync(_host!, original, ThemeManagement.All(_draft).Select(theme => theme.Name));
+         if(edited is not null)
+         {
+            _draft = ThemeManagement.SaveEdited(_draft, original, edited);
+            _selected = edited.Name;
+         }
+      }
+      else if(_action == ManagerAction.Import)
+      {
+         ThemeTransfer.ImportOutcome? result = await ThemeTransfer.ImportAsync(_owner, root, _draft);
+         if(result is not null)
+         {
+            _draft = result.Draft;
+            _status.Text = FormattableString.Invariant($"Themes imported into this draft: {result.Imported}. Skipped: {result.Skipped}. Failed: {result.Failed}.");
+         }
+      }
+      else if(_action == ManagerAction.Export && _requestedTheme is { } theme && await ThemeTransfer.ExportAsync(_owner, theme))
+      {
+         _status.Text = "The selected draft theme was exported. Save themes commits these settings; Cancel discards them.";
+      }
+   }
+
+
+
+   /// <summary>New/copy/edit actions reuse the full native editor without nesting incompatible content dialogs.</summary>
+   private void RequestEdit(ReaderTheme theme)
+   {
+      _requestedTheme = theme;
+      _action = ManagerAction.Edit;
+      _host!.EndEdit(ContentDialogResult.None);
+   }
+
+
+
+   /// <summary>Disabled choices remain editable and copyable without enabling them prematurely.</summary>
+   private void EditSelected(bool copy)
+   {
+      ReaderTheme? theme = ThemeManagement.All(_draft).FirstOrDefault(theme => string.Equals(theme.Name, _selected, StringComparison.Ordinal));
+      if(theme is not null)
+      {
+         RequestEdit(copy ? ThemeManagement.CopyTheme(_draft, theme) : theme);
+      }
+   }
+
+
+
+   /// <summary>Choosing a default explicitly enables it; selection alone never changes the reading palette.</summary>
+   private void UseSelected()
+   {
+      if(_selected is not null)
+      {
+         _draft = ThemeManagement.SetEnabled(_draft, _selected, enabled: true);
+         _draft.DocumentTheme = _selected;
+         _status.Text = "Selected as the default in this draft. Save themes applies it.";
+         Refresh(_selected);
+      }
+   }
+
+
+
+   /// <summary>Export can select a disabled theme, while import has its own owned multiple-file picker.</summary>
+   private void RequestTransfer(ManagerAction action)
+   {
+      _requestedTheme = ThemeManagement.All(_draft).FirstOrDefault(theme => string.Equals(theme.Name, _selected, StringComparison.Ordinal));
+      if(action == ManagerAction.Import || _requestedTheme is not null)
+      {
+         _action = action;
+         _host!.EndEdit(ContentDialogResult.None);
+      }
+   }
+
+
+
+   /// <summary>Only native action buttons can request the next manager operation.</summary>
+   private enum ManagerAction
+   {
+      None,
+      Edit,
+      Import,
+      Export,
+   }
+
+}
diff --git a/src/MarkdownViewr.Windows/ThemeTransfer.cs b/src/MarkdownViewr.Windows/ThemeTransfer.cs
new file mode 100644
index 0000000..18715b0
--- /dev/null
+++ b/src/MarkdownViewr.Windows/ThemeTransfer.cs
@@ -0,0 +1,145 @@
+/*
+ * Copyright (c) 2026 Darin Kelkhoff
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text;
+using System.Text.Json;
+using MarkdownViewr.Windows.Core.Themes;
+using Microsoft.UI.Xaml;
+using Microsoft.UI.Xaml.Controls;
+using Microsoft.Windows.Storage.Pickers;
+
+
+namespace MarkdownViewr.Windows;
+
+/// <summary>Deliberate native pickers transfer validated theme JSON without exposing document-created commands.</summary>
+internal static class ThemeTransfer
+{
+   /// <summary>Counts are user-visible results; file paths/JSON are never written to the activity log.</summary>
+   public sealed record ImportOutcome(AppSettings Draft, int Imported, int Skipped, int Failed);
+
+
+
+   /// <summary>Multiple selected JSON files are read serially within the schema bound and each conflict has its own explicit choice.</summary>
+   public static async Task<ImportOutcome?> ImportAsync(Microsoft.UI.WindowId owner, XamlRoot root, AppSettings settings)
+   {
+      var picker = new FileOpenPicker(owner);
+      picker.FileTypeFilter.Add(".json");
+      IReadOnlyList<PickFileResult> files = await picker.PickMultipleFilesAsync();
+      if(files.Count == 0)
+      {
+         return null;
+      }
+      AppSettings draft = Core.SettingsChanges.Copy(settings);
+      int imported = 0;
+      int skipped = 0;
+      int failed = 0;
+      foreach(PickFileResult file in files)
+      {
+         try
+         {
+            await using var stream = new FileStream(file.Path, FileMode.Open, FileAccess.Read, FileShare.Read, 4096, FileOptions.Asynchronous | FileOptions.SequentialScan);
+            ReaderTheme theme = await ThemeJson.ReadAsync(stream);
+            if(theme.SchemaVersion > 1 && !await ConfirmNewerAsync(root, theme))
+            {
+               skipped++;
+               continue;
+            }
+            ThemeImportResolution resolution = ThemeManagement.All(draft).Any(item => string.Equals(item.Name, theme.Name, StringComparison.Ordinal))
+               ? await ResolveConflictAsync(root, theme) : ThemeImportResolution.KeepBoth;
+            if(resolution == ThemeImportResolution.Skip)
+            {
+               skipped++;
+               continue;
+            }
+            draft = ThemeManagement.Import(draft, theme, resolution, approveNewerSchema: theme.SchemaVersion > 1);
+            imported++;
+         }
+         catch(Exception exception) when(exception is IOException or UnauthorizedAccessException or JsonException or DecoderFallbackException)
+         {
+            failed++;
+            App.Log.Warning(FormattableString.Invariant($"A selected theme could not be imported ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+         }
+      }
+      return new ImportOutcome(draft, imported, skipped, failed);
+   }
+
+
+
+   /// <summary>The reference newer-schema warning requires confirmation even when the known fields validate.</summary>
+   private static async Task<bool> ConfirmNewerAsync(XamlRoot root, ReaderTheme theme)
+   {
+      var dialog = new ContentDialog
+      {
+         XamlRoot = root,
+         Title = "Theme uses a newer schema",
+         Content = $"{theme.Name} uses theme schema {theme.SchemaVersion}. It may not display correctly. Import anyway?",
+         PrimaryButtonText = "Import anyway",
+         CloseButtonText = "Skip",
+      };
+      return await dialog.ShowAsync() == ContentDialogResult.Primary;
+   }
+
+
+
+   /// <summary>Closing a conflict skips it; Keep both retains both schemas and metadata under a deterministic unique name.</summary>
+   private static async Task<ThemeImportResolution> ResolveConflictAsync(XamlRoot root, ReaderTheme theme)
+   {
+      var dialog = new ContentDialog
+      {
+         XamlRoot = root,
+         Title = "Theme already exists",
+         Content = $"A theme named {theme.Name} already exists. Choose how to handle the imported copy.",
+         PrimaryButtonText = "Overwrite",
+         SecondaryButtonText = "Keep both",
+         CloseButtonText = "Skip",
+         DefaultButton = ContentDialogButton.Secondary,
+      };
+      return await dialog.ShowAsync() switch
+      {
+         ContentDialogResult.Primary => ThemeImportResolution.Overwrite,
+         ContentDialogResult.Secondary => ThemeImportResolution.KeepBoth,
+         _ => ThemeImportResolution.Skip,
+      };
+   }
+
+
+
+   /// <summary>Exporting a selected theme, including a disabled choice or draft, never changes saved settings.</summary>
+   public static async Task<bool> ExportAsync(Microsoft.UI.WindowId owner, ReaderTheme theme)
+   {
+      var picker = new FileSavePicker(owner) { SuggestedFileName = ThemeJson.SuggestedFileName(theme), DefaultFileExtension = ".json" };
+      picker.FileTypeChoices.Add("Theme JSON", [".json"]);
+      PickFileResult? file = await picker.PickSaveFileAsync();
+      if(file is null)
+      {
+         return false;
+      }
+      await File.WriteAllTextAsync(file.Path, theme.Json, new UTF8Encoding(encoderShouldEmitUTF8Identifier: false));
+      return true;
+   }
+
+
+
+   /// <summary>A separate native selector exposes every visible theme for export, including disabled choices.</summary>
+   public static async Task<ReaderTheme?> SelectExportAsync(XamlRoot root, AppSettings settings)
+   {
+      var choices = new ComboBox { Name = "ThemeExportChoice", Header = "Theme", MinWidth = 280 };
+      foreach(ReaderTheme theme in ThemeManagement.All(settings))
+      {
+         var item = new ComboBoxItem { Content = theme.Name, Tag = theme };
+         Microsoft.UI.Xaml.Automation.AutomationProperties.SetAutomationId(item, "ThemeExport:" + theme.Name);
+         choices.Items.Add(item);
+      }
+      choices.SelectedItem = choices.Items.OfType<ComboBoxItem>().FirstOrDefault(item => string.Equals(((ReaderTheme)item.Tag).Name, settings.DocumentTheme, StringComparison.Ordinal));
+      if(choices.SelectedItem is null && choices.Items.Count > 0)
+      {
+         choices.SelectedIndex = 0;
+      }
+      var dialog = new ContentDialog { XamlRoot = root, Title = "Export document theme", Content = choices, PrimaryButtonText = "Export theme", CloseButtonText = "Cancel", IsPrimaryButtonEnabled = choices.Items.Count > 0 };
+      ContentDialogResult result = await dialog.ShowAsync();
+      return result == ContentDialogResult.Primary && choices.SelectedItem is ComboBoxItem { Tag: ReaderTheme selected } ? selected : null;
+   }
+}
diff --git a/src/MarkdownViewr.Windows/packages.lock.json b/src/MarkdownViewr.Windows/packages.lock.json
index 8d720c6..b04eca2 100644
--- a/src/MarkdownViewr.Windows/packages.lock.json
+++ b/src/MarkdownViewr.Windows/packages.lock.json
@@ -54,6 +54,19 @@
           "Microsoft.WindowsAppSDK.WinUI": "2.3.9"
         }
       },
+      "AngleSharp": {
+        "type": "Transitive",
+        "resolved": "1.7.2",
+        "contentHash": "r1rb5Qo/0KPzmP0nbSiXPDVfh4Ctu0B+y1RyyUq73g4sgAmEW7q10RDyTq2ZsILwtO9O2LAvMrUles7eD4zz1g=="
+      },
+      "AngleSharp.Css": {
+        "type": "Transitive",
+        "resolved": "1.0.2",
+        "contentHash": "XeBxh0h/73+MWFsGfeMwiK7xbzAK3YeHFdUIrMH1P90amIrDFD/vUDIrPlF3CixqaMH5MRIUvT6Ux+2zvhJ3SA==",
+        "dependencies": {
+          "AngleSharp": "[1.5.0, 2.0.0)"
+        }
+      },
       "Microsoft.Web.WebView2": {
         "type": "Transitive",
         "resolved": "1.0.3719.77",
@@ -175,21 +188,32 @@
       "markdownviewr.windows.core": {
         "type": "Project",
         "dependencies": {
-          "CommunityToolkit.Mvvm": "[8.4.2, )",
-          "KofTwentyTwo.AppKit": "[0.1.0, )"
+          "HtmlSanitizer": "[9.2.1039, )",
+          "KofTwentyTwo.AppKit": "[0.1.0, )",
+          "Markdig": "[1.4.0, )"
         }
       },
-      "CommunityToolkit.Mvvm": {
+      "HtmlSanitizer": {
         "type": "CentralTransitive",
-        "requested": "[8.4.2, )",
-        "resolved": "8.4.2",
-        "contentHash": "WadCzGEc2U+3e20avRLng4qNtt4zoOGWrdUISqJWrHe3/FSnrYjuM5Sb4yQb09LhkBXrrI4Zt3dLKgRMbItsrg=="
+        "requested": "[9.2.1039, )",
+        "resolved": "9.2.1039",
+        "contentHash": "PKxy1hYknAij8YlHCC2a9GSqzUd4bh3IvY+abJBvOH1FKcZpbyafEHtdFcXQBt12Y7hNPkNEOP6Qa7uKNSs/yA==",
+        "dependencies": {
+          "AngleSharp": "1.7.2",
+          "AngleSharp.Css": "1.0.2"
+        }
       },
       "KofTwentyTwo.AppKit": {
         "type": "CentralTransitive",
         "requested": "[0.1.0, )",
         "resolved": "0.1.0",
         "contentHash": "+ymM8DxPel+C527Cp7lrhhdu0xnGHb6fl4/5vAlzsd0iiyW8u+UiOfQl1paNxA26iQZTbxQ8fMLQsUnaOA8GcQ=="
+      },
+      "Markdig": {
+        "type": "CentralTransitive",
+        "requested": "[1.4.0, )",
+        "resolved": "1.4.0",
+        "contentHash": "lLhaiI/mNDTNzgLqnmknhf4LjgTqOAyjx5+GNz0X3AxYMxUhmFppF2WVMdER+SDqwhE5wUF1pzs/cuLwFxs7xA=="
       }
     },
     "net10.0-windows10.0.19041/win-arm64": {
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/AboutComponentsTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/AboutComponentsTests.cs
new file mode 100644
index 0000000..af0be10
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/AboutComponentsTests.cs
@@ -0,0 +1,62 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>The actual restored package inventory and credit destinations must stay in sync when dependencies change.</summary>
+public sealed class AboutComponentsTests
+{
+   /// <summary>Every application/build/test package restored for this repository is acknowledged without omitted transitive libraries.</summary>
+   [Fact]
+   public void Catalog_RestoredAssets_CoversEveryPackage()
+   {
+      string root = FindRepository();
+      string[] paths = ["src/MarkdownViewr.Windows/obj/project.assets.json", "tests/MarkdownViewr.Windows.Core.Tests/obj/project.assets.json", "tests/MarkdownViewr.Windows.UiTests/obj/project.assets.json"];
+      var restored = new HashSet<string>(StringComparer.Ordinal);
+      foreach(string path in paths)
+      {
+         using var assets = JsonDocument.Parse(File.ReadAllText(Path.Combine(root, path)));
+         foreach(JsonProperty library in assets.RootElement.GetProperty("libraries").EnumerateObject())
+         {
+            if(string.Equals(library.Value.GetProperty("type").GetString(), "package", StringComparison.Ordinal))
+            {
+               restored.Add(library.Name);
+            }
+         }
+      }
+      AboutComponent[] credits = AboutComponents.Runtime.Concat(AboutComponents.Development).ToArray();
+      var credited = credits.Where(credit => !string.Equals(credit.Name, ".NET Runtime", StringComparison.Ordinal)).Select(credit => credit.Name + "/" + credit.Version).ToHashSet(StringComparer.Ordinal);
+      Assert.True(restored.SetEquals(credited), "About credits must match actual restored direct/transitive package versions. Missing: " + string.Join(", ", restored.Except(credited, StringComparer.Ordinal)) + "; stale: " + string.Join(", ", credited.Except(restored, StringComparer.Ordinal)));
+      Assert.Equal(credits.Length, credits.Select(credit => credit.Name).Distinct(StringComparer.Ordinal).Count());
+      foreach(AboutComponent credit in credits)
+      {
+         Assert.NotEmpty(credit.License);
+         Assert.Equal("https", new Uri(credit.ProjectUrl).Scheme);
+         Assert.Equal("https", new Uri(credit.LicenseUrl).Scheme);
+         Assert.DoesNotContain("deprecateLicenseUrl", credit.LicenseUrl, StringComparison.Ordinal);
+      }
+      Assert.Contains(AboutComponents.Runtime, credit => string.Equals(credit.Name, "Microsoft.Web.WebView2", StringComparison.Ordinal));
+      Assert.Contains(AboutComponents.Runtime, credit => string.Equals(credit.Name, "AngleSharp.Css", StringComparison.Ordinal));
+      Assert.Contains(AboutComponents.Development, credit => string.Equals(credit.Name, "FlaUI.Core", StringComparison.Ordinal));
+   }
+
+
+
+   /// <summary>Build-produced assets are independent evidence of what the repository currently uses, not a duplicated fixture list.</summary>
+   private static string FindRepository()
+   {
+      for(DirectoryInfo? directory = new(AppContext.BaseDirectory); directory is not null; directory = directory.Parent)
+      {
+         if(File.Exists(Path.Combine(directory.FullName, "MarkdownViewr.Windows.slnx")))
+         {
+            return directory.FullName;
+         }
+      }
+      throw new DirectoryNotFoundException("Restore/build this repository before checking its actual dependency credits.");
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/AppIdentityTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/AppIdentityTests.cs
index 5101bd4..fe5ba41 100644
--- a/tests/MarkdownViewr.Windows.Core.Tests/AppIdentityTests.cs
+++ b/tests/MarkdownViewr.Windows.Core.Tests/AppIdentityTests.cs
@@ -20,6 +20,31 @@ public class AppIdentityTests
       Assert.EndsWith("_DATA_DIR", AppIdentity.Info.DataDirectoryVariable, StringComparison.Ordinal);
       Assert.NotNull(AppIdentity.Info.RepositoryUrl);
       Assert.NotEmpty(AppIdentity.Info.Attributions);
+      Assert.DoesNotContain("Darin", AppIdentity.Info.Description, StringComparison.Ordinal);
+      Assert.Equal("https://github.com/darinkelkhoff/markdownViewr", AppIdentity.OriginalRepositoryUrl.AbsoluteUri);
+      Assert.Equal("https://kelkhoff.com/", AppIdentity.OriginalAuthorWebsite.AbsoluteUri);
+      Assert.DoesNotContain(AppIdentity.Info.Attributions, credit => credit.Name.Contains("Darin Kelkhoff", StringComparison.Ordinal));
+      Assert.Equal(AppIdentity.Info.RepositoryUrl!.AbsoluteUri.TrimEnd('/') + "/issues/new/choose", AppIdentity.IssuesUrl.AbsoluteUri);
+      Assert.Equal(AppIdentity.Info.RepositoryUrl.AbsoluteUri.TrimEnd('/') + "/discussions", AppIdentity.SupportUrl.AbsoluteUri);
+   }
+
+
+
+   /// <summary>Development channel metadata cannot reuse stable titles, settings variables or service identities.</summary>
+   [Theory]
+   [InlineData(null, "markdownviewr-windows", "MarkdownViewr")]
+   [InlineData("stable", "markdownviewr-windows", "MarkdownViewr")]
+   [InlineData("dev", "markdownviewr-windows-dev", "MarkdownViewr (dev)")]
+   [InlineData("unknown", "markdownviewr-windows", "MarkdownViewr")]
+   public void ForChannel_InstalledEdition_SelectsIsolatedIdentity(string? channel, string id, string displayName)
+   {
+      KofTwentyTwo.AppKit.AppInfo info = AppIdentity.ForChannel(channel);
+      Assert.Equal(id, info.Id);
+      Assert.Equal(displayName, info.DisplayName);
+      Assert.Equal(id.ToUpperInvariant().Replace('-', '_') + "_DATA_DIR", info.DataDirectoryVariable);
+      Assert.Equal(AppIdentity.Info.RepositoryUrl, info.RepositoryUrl);
+      Assert.NotEqual(AppIdentity.ForChannel("stable").DataDirectoryVariable, AppIdentity.ForChannel("dev").DataDirectoryVariable, StringComparer.Ordinal);
+      Assert.Equal("markdownviewr-windows", AppIdentity.Info.Id);
    }
 
 
@@ -49,25 +74,27 @@ public class AppIdentityTests
 /// <summary>Tests of the app's settings.</summary>
 public class AppSettingsTests
 {
-   /// <summary>Sanitize: a null name from JSON becomes empty, and the shell settings are repaired too.</summary>
+   /// <summary>Sanitize: invalid shell preferences fall back to their supported defaults.</summary>
    [Fact]
-   public void Sanitize_RepairsNullsAndShellSettings()
+   public void Sanitize_RepairsShellSettings()
    {
-      var settings = new AppSettings { LastName = null!, Theme = "Purple" };
+      var settings = new AppSettings { Theme = "Purple" };
       settings.Sanitize();
-      Assert.Equal("", settings.LastName);
       Assert.Equal("System", settings.Theme);
    }
 
 
 
-   /// <summary>Round trip: the name survives a save and a load.</summary>
+   /// <summary>Round trip: the shell theme survives a save and a load.</summary>
    [Fact]
-   public void SaveAndLoad_KeepTheName()
+   public void SaveAndLoad_KeepsTheTheme()
    {
       using var temp = new TempDirectory();
       var store = new KofTwentyTwo.AppKit.Settings.SettingsStore<AppSettings>(temp.File("settings.json"), AppSettingsContext.Default.AppSettings);
-      Assert.True(store.Save(new AppSettings { LastName = "Ada" }));
-      Assert.Equal("Ada", store.Load().LastName);
+      Assert.True(store.Save(new AppSettings { Theme = "Dark", DocumentTheme = "GitHub Light", Frontmatter = "Metadata", UserThemes = [Themes.ThemeCatalog.Find("GitHub Light").Json] }));
+      Assert.Equal("Dark", store.Load().Theme);
+      Assert.Equal("GitHub Light", store.Load().DocumentTheme);
+      Assert.Equal(Documents.FrontmatterMode.Metadata, store.Load().FrontmatterKind);
+      Assert.Equal(Themes.ThemeCatalog.Find("GitHub Light").Json, Assert.Single(store.Load().UserThemes));
    }
 }
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentFindTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentFindTests.cs
new file mode 100644
index 0000000..66913b3
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentFindTests.cs
@@ -0,0 +1,135 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves paired counts, literal positions and navigation for the real two-surface find controls.</summary>
+public sealed class DocumentFindTests
+{
+   /// <summary>Formatting and case differences retain offsets in the original source rather than rendered text.</summary>
+   [Fact]
+   public void Create_MixedCaseSource_ReturnsLiteralPositions()
+   {
+      var find = new DocumentFind("**Alpha**\nALPHA alpha", "alpha");
+      Assert.Equal("alpha", find.Query);
+      Assert.Equal(new[] { 2, 10, 16 }, find.SourceMatches);
+      Assert.Equal(3, find.Total);
+      Assert.Equal(1, find.Current);
+      Assert.Equal((2, 5), find.SourceSelection);
+      find.SetRenderedCount(3);
+      Assert.Equal(3, find.Total);
+   }
+
+
+
+   /// <summary>Markup/script/regex punctuation is ordinary search text and cannot become executable input.</summary>
+   [Theory]
+   [InlineData("before a.*[x] after", "a.*[x]", 7)]
+   [InlineData("before <script>alert('x')</script> after", "<script>alert('x')</script>", 7)]
+   [InlineData("🙂 CAFÉ then café", "café", 3)]
+   [InlineData("banana", "ana", 1)]
+   public void Create_LiteralQuery_FindsNonoverlappingRanges(string source, string query, int offset)
+   {
+      var find = new DocumentFind(source, query);
+      Assert.Equal(offset, find.SourceMatches[0]);
+      Assert.Equal((offset, query.Length), find.SourceSelection);
+      if(string.Equals(query, "ana", StringComparison.Ordinal))
+      {
+         Assert.Single(find.SourceMatches);
+      }
+   }
+
+
+
+   /// <summary>Empty/absent/longer-than-source queries leave navigation inert.</summary>
+   [Theory]
+   [InlineData("text", "")]
+   [InlineData("text", "missing")]
+   [InlineData("", "query")]
+   [InlineData("longer source", "absent")]
+   public void Create_NoMatch_LeavesZeroCount(string source, string query)
+   {
+      var find = new DocumentFind(source, query);
+      find.Next();
+      find.Previous();
+      find.SetRenderedCount(-1);
+      Assert.Empty(find.SourceMatches);
+      Assert.Equal(0, find.Total);
+      Assert.Equal(0, find.Current);
+      Assert.Null(find.SourceSelection);
+   }
+
+
+
+   /// <summary>The larger surface count wins, with wraparound and no false range for a rendered-only occurrence.</summary>
+   [Fact]
+   public void Navigate_DifferentSurfaceCounts_WrapsPairedOccurrences()
+   {
+      var find = new DocumentFind("one", "one");
+      find.SetRenderedCount(3);
+      Assert.Equal(3, find.Total);
+      find.Previous();
+      Assert.Equal(3, find.Current);
+      Assert.Null(find.SourceSelection);
+      find.Next();
+      Assert.Equal(1, find.Current);
+      Assert.Equal((0, 3), find.SourceSelection);
+      find.Next();
+      Assert.Equal(2, find.Current);
+      find.Previous();
+      Assert.Equal(1, find.Current);
+      find.Previous();
+      find.SetRenderedCount(0);
+      Assert.Equal(1, find.Current);
+      Assert.Equal(1, find.Total);
+   }
+
+
+
+   /// <summary>A rendered-only query acquires its first occurrence when the native browser reports matches.</summary>
+   [Fact]
+   public void SetCount_RenderedOnlyMatch_InitializesAndClearsCurrent()
+   {
+      var find = new DocumentFind("![caption](image.png)", "visible");
+      find.SetRenderedCount(2);
+      Assert.Equal(1, find.Current);
+      Assert.Null(find.SourceSelection);
+      find.Next();
+      Assert.Equal(2, find.Current);
+      find.SetRenderedCount(-1);
+      Assert.Equal(0, find.Current);
+   }
+
+
+
+   /// <summary>Empty terms ignore late counts; native integer limits cannot overflow wraparound arithmetic.</summary>
+   [Fact]
+   public void Navigate_EmptyAndMaximumCounts_StaysInRange()
+   {
+      var empty = new DocumentFind("source", "");
+      empty.SetRenderedCount(9);
+      Assert.Equal(0, empty.Total);
+      var maximum = new DocumentFind("source", "missing");
+      maximum.SetRenderedCount(int.MaxValue);
+      maximum.Previous();
+      Assert.Equal(int.MaxValue, maximum.Current);
+      maximum.Next();
+      Assert.Equal(1, maximum.Current);
+   }
+
+
+   /// <summary>Programmatic callers cannot bypass the same document/query limits used by native controls.</summary>
+   [Fact]
+   public void Create_InvalidInput_RejectsBeforeSearch()
+   {
+      Assert.Throws<ArgumentNullException>(() => new DocumentFind(null!, "query"));
+      Assert.Throws<ArgumentNullException>(() => new DocumentFind("source", null!));
+      Assert.Throws<ArgumentException>(() => new DocumentFind(new string('x', MarkdownRenderer.MaximumCharacters + 1), "query"));
+      Assert.Throws<ArgumentException>(() => new DocumentFind("source", new string('x', DocumentFind.MaximumQueryCharacters + 1)));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentFrontmatterTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentFrontmatterTests.cs
new file mode 100644
index 0000000..a1eb572
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentFrontmatterTests.cs
@@ -0,0 +1,133 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using AngleSharp.Html.Dom;
+using AngleSharp.Html.Parser;
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Checks delimiter fidelity, escaped metadata and all three reference display modes.</summary>
+public sealed class DocumentFrontmatterTests
+{
+   /// <summary>Missing/unterminated delimiters preserve the complete original input.</summary>
+   [Theory]
+   [InlineData("")]
+   [InlineData("---")]
+   [InlineData("---\nunterminated")]
+   [InlineData("before\n---\nkey: value\n---")]
+   [InlineData("\n---\nkey: value\n---")]
+   [InlineData("----\nkey: value\n---")]
+   public void Split_NoCompleteLeadingBlock_PreservesDocument(string markdown)
+   {
+      (string? metadata, string body) = DocumentFrontmatter.Split(markdown);
+      Assert.Null(metadata);
+      Assert.Equal(markdown, body);
+   }
+
+
+
+   /// <summary>Windows newlines, whitespace delimiters, empty blocks and empty bodies are retained correctly.</summary>
+   [Theory]
+   [InlineData("---\nkey: value\n---\n# Body", "key: value", "# Body")]
+   [InlineData("---\r\nkey: value\r\n---\r\n# Body\r\n", "key: value\r", "# Body\r\n")]
+   [InlineData(" --- \nkey: value\n \t--- \nbody", "key: value", "body")]
+   [InlineData("---\n---", "", "")]
+   [InlineData("---\nkey: value\n---", "key: value", "")]
+   [InlineData("---\n\n---\nbody", "", "body")]
+   public void Split_CompleteBlock_PreservesMetadataAndBody(string markdown, string expectedMetadata, string expectedBody)
+   {
+      (string? metadata, string body) = DocumentFrontmatter.Split(markdown);
+      Assert.Equal(expectedMetadata, metadata);
+      Assert.Equal(expectedBody, body);
+   }
+
+
+
+   /// <summary>All modes retain the body; hide is the default and metadata never becomes active HTML.</summary>
+   [Fact]
+   public void Render_AllModes_PreservesBodyWithSafeMetadata()
+   {
+      const string Markdown = "---\ntitle: **Visible value**\nurl: https://example.com/a:b\n<script>bad()</script>\n\n---\n# Body heading";
+      var renderer = new MarkdownRenderer();
+      string hidden = renderer.Render(Markdown);
+      Assert.Contains("<h1>Body heading</h1>", hidden, StringComparison.Ordinal);
+      Assert.DoesNotContain("Visible value", hidden, StringComparison.Ordinal);
+      string metadata = renderer.Render(Markdown, FrontmatterMode.Metadata);
+      using IHtmlDocument parsed = new HtmlParser().ParseDocument(metadata);
+      Assert.Equal("title", parsed.QuerySelector(".frontmatter .fm-key")!.TextContent);
+      Assert.Equal("Visible value", parsed.QuerySelector(".frontmatter .fm-value")!.TextContent);
+      Assert.Contains("https://example.com/a:b", metadata, StringComparison.Ordinal);
+      Assert.Contains("&lt;script&gt;bad()&lt;/script&gt;", metadata, StringComparison.Ordinal);
+      Assert.DoesNotContain("<script", metadata, StringComparison.Ordinal);
+      Assert.Contains("<h1>Body heading</h1>", metadata, StringComparison.Ordinal);
+      string rendered = renderer.Render(Markdown, FrontmatterMode.Markdown);
+      Assert.DoesNotContain("<table", rendered, StringComparison.Ordinal);
+      Assert.Contains("<strong>Visible value</strong>", rendered, StringComparison.Ordinal);
+      Assert.DoesNotContain("<script", rendered, StringComparison.Ordinal);
+      Assert.Contains("<h1>Body heading</h1>", rendered, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Empty frontmatter emits no prefix; unknown enum values cannot change rendering policy.</summary>
+   [Fact]
+   public void Render_EmptyBlockAndInvalidMode_EnforcesContract()
+   {
+      var renderer = new MarkdownRenderer();
+      Assert.Equal("<p>Body</p>\n", renderer.Render("---\n---\nBody", FrontmatterMode.Metadata));
+      Assert.Throws<ArgumentOutOfRangeException>(() => renderer.Render("Body", (FrontmatterMode)99));
+   }
+
+
+
+   /// <summary>Metadata formatting follows the reference and never strips punctuation from inside words.</summary>
+   [Theory]
+   [InlineData("***Bold***", "Bold")]
+   [InlineData("__Bold__", "Bold")]
+   [InlineData("~~Removed~~", "Removed")]
+   [InlineData("*Italic*", "Italic")]
+   [InlineData("_Italic_", "Italic")]
+   [InlineData("`code`", "code")]
+   [InlineData("*", "")]
+   [InlineData("a_b", "a_b")]
+   [InlineData("O'Reilly", "O'Reilly")]
+   public void RenderMetadata_FormattingMarkers_ProducesPlainText(string value, string expected)
+   {
+      using IHtmlDocument parsed = new HtmlParser().ParseDocument(DocumentFrontmatter.RenderMetadata("key: " + value));
+      Assert.Equal("key", parsed.QuerySelector(".frontmatter .fm-key")!.TextContent);
+      Assert.Equal(expected, parsed.QuerySelector(".frontmatter .fm-value")!.TextContent);
+   }
+
+
+
+   /// <summary>Blank rows disappear and colon-free values span both columns.</summary>
+   [Fact]
+   public void RenderMetadata_UnstructuredRows_EscapesText()
+   {
+      using IHtmlDocument parsed = new HtmlParser().ParseDocument(DocumentFrontmatter.RenderMetadata(" \nA & B\n\t"));
+      Assert.Equal("A & B", parsed.QuerySelector(".frontmatter .fm-value")!.TextContent);
+      Assert.Equal("2", parsed.QuerySelector("td")!.GetAttribute("colspan"));
+   }
+
+
+
+   /// <summary>Saved mode values are normalized, while corrupt preferences return to hiding metadata.</summary>
+   [Theory]
+   [InlineData("Hide", FrontmatterMode.Hide)]
+   [InlineData("Metadata", FrontmatterMode.Metadata)]
+   [InlineData("Markdown", FrontmatterMode.Markdown)]
+   [InlineData("invalid", FrontmatterMode.Hide)]
+   [InlineData("99", FrontmatterMode.Hide)]
+   [InlineData(null, FrontmatterMode.Hide)]
+   public void Sanitize_SavedMode_UsesSupportedChoice(string? name, FrontmatterMode expected)
+   {
+      var settings = new AppSettings { Frontmatter = name! };
+      settings.Sanitize();
+      Assert.Equal(expected, settings.FrontmatterKind);
+      Assert.Equal(expected.ToString(), settings.Frontmatter);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentLoadSchedulerTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentLoadSchedulerTests.cs
new file mode 100644
index 0000000..551dc1d
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentLoadSchedulerTests.cs
@@ -0,0 +1,116 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Covers picker/save races without filesystem timing or a desktop.</summary>
+public sealed class DocumentLoadSchedulerTests
+{
+   /// <summary>An idle document request starts immediately and leaves no queued work.</summary>
+   [Fact]
+   public void TryBegin_Idle_StartsImmediately()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("first.md", reload: false));
+      Assert.Null(queue.Complete("first.md"));
+   }
+
+
+
+   /// <summary>A file selected while a save reload is active is preserved for the next load.</summary>
+   [Fact]
+   public void TryBegin_PickerDuringReload_QueuesTheSelection()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("old.md", reload: true));
+      Assert.False(queue.TryBegin("new.md", reload: false));
+      Assert.Equal(("new.md", false), queue.Complete("old.md"));
+   }
+
+
+
+   /// <summary>Repeated save events consume one pending refresh rather than an unbounded queue.</summary>
+   [Fact]
+   public void TryBegin_RepeatedReloads_Coalesces()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("document.md", reload: true));
+      Assert.False(queue.TryBegin("document.md", reload: true));
+      Assert.False(queue.TryBegin("document.md", reload: true));
+      Assert.Equal(("document.md", true), queue.Complete("document.md"));
+      Assert.True(queue.TryBegin("document.md", reload: true));
+      Assert.Null(queue.Complete("document.md"));
+   }
+
+
+
+   /// <summary>An explicit picker selection takes priority over notifications from the previous document.</summary>
+   [Fact]
+   public void Complete_OpenAndReloadPending_PrioritizesOpen()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("old.md", reload: true));
+      Assert.False(queue.TryBegin("new.md", reload: false));
+      Assert.False(queue.TryBegin("old.md", reload: true));
+      Assert.Equal(("new.md", false), queue.Complete("old.md"));
+      Assert.True(queue.TryBegin("new.md", reload: false));
+      Assert.Null(queue.Complete("new.md"));
+   }
+
+
+
+   /// <summary>The user's most recent pending explicit selection wins.</summary>
+   [Fact]
+   public void Complete_MultipleSelections_UsesTheLatest()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("first.md", reload: false));
+      Assert.False(queue.TryBegin("second.md", reload: false));
+      Assert.False(queue.TryBegin("third.md", reload: false));
+      Assert.Equal(("third.md", false), queue.Complete("first.md"));
+   }
+
+
+
+   /// <summary>Reloading needs an established current document, even if the first open failed.</summary>
+   [Fact]
+   public void Complete_NoCurrentDocument_DiscardsPendingReload()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("missing.md", reload: false));
+      Assert.False(queue.TryBegin("missing.md", reload: true));
+      Assert.Null(queue.Complete(null));
+   }
+
+
+
+   /// <summary>If a selected file fails to open, a pending save of the retained document is still processed.</summary>
+   [Fact]
+   public void Complete_FailedSelection_RetainsThePreviousDocumentRefresh()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("old.md", reload: true));
+      Assert.False(queue.TryBegin("missing.md", reload: false));
+      Assert.False(queue.TryBegin("old.md", reload: true));
+      Assert.Equal(("missing.md", false), queue.Complete("old.md"));
+      Assert.True(queue.TryBegin("missing.md", reload: false));
+      Assert.Equal(("old.md", true), queue.Complete("old.md"));
+   }
+
+
+
+   /// <summary>The loader returns to idle after a failed or completed request.</summary>
+   [Fact]
+   public void Complete_AfterFailure_AllowsAnotherOpen()
+   {
+      var queue = new DocumentLoadScheduler();
+      Assert.True(queue.TryBegin("missing.md", reload: false));
+      Assert.Null(queue.Complete(null));
+      Assert.True(queue.TryBegin("existing.md", reload: false));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentOutlineTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentOutlineTests.cs
new file mode 100644
index 0000000..a2f64a3
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentOutlineTests.cs
@@ -0,0 +1,98 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using AngleSharp.Html.Parser;
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves section boundaries and labels without giving authored markup native identities.</summary>
+public sealed class DocumentOutlineTests
+{
+   /// <summary>Peer headings close their predecessor; ancestors close nested descendants.</summary>
+   [Fact]
+   public void Create_NestedAndDuplicateHeadings_GroupsCorrectContent()
+   {
+      var outline = new DocumentOutline("Intro\n\n# Parent\n\nBody one\n\n### Child\n\nNested body\n\n## Peer\n\nPeer body\n\n# Parent\n\nSecond parent");
+      Assert.Equal(new[] { new DocumentHeading(0, 1, "Parent"), new DocumentHeading(1, 3, "Child"), new DocumentHeading(2, 2, "Peer"), new DocumentHeading(3, 1, "Parent") }, outline.Headings);
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(outline.Html);
+      Assert.Contains("Intro", document.Body!.FirstElementChild!.TextContent, StringComparison.Ordinal);
+      Assert.Contains("Nested body", document.QuerySelector("[data-mv-body='0'] [data-mv-body='1']")!.TextContent, StringComparison.Ordinal);
+      Assert.NotNull(document.QuerySelector("[data-mv-body='0'] [data-mv-body='2']"));
+      Assert.DoesNotContain("Second parent", document.QuerySelector("[data-mv-body='0']")!.TextContent, StringComparison.Ordinal);
+      Assert.Contains("Second parent", document.QuerySelector("[data-mv-body='3']")!.TextContent, StringComparison.Ordinal);
+      Assert.Equal(4, document.QuerySelectorAll("[id^='mv-heading-']").Length);
+   }
+
+
+
+   /// <summary>All heading levels and nested raw containers retain semantic heading text.</summary>
+   [Fact]
+   public void Create_AuthoredContainers_UsesSanitizedHostIdentities()
+   {
+      var outline = new DocumentOutline("<div id='mv-heading-0'><h4 onclick='evil()'>A &amp; <em>B</em></h4><p data-mv-body='0'>Nested</p><h5>Five</h5><h6>Six</h6></div>\n\n<h2 id='native'>Two</h2>\n\n<script>evil()</script>");
+      Assert.Equal(new[] { 4, 5, 6, 2 }, outline.Headings.Select(heading => heading.Level));
+      Assert.Equal("A & B", outline.Headings[0].Title);
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(outline.Html);
+      Assert.Single(document.QuerySelectorAll("#mv-heading-0"));
+      Assert.Null(document.QuerySelector("script,[onclick],#native"));
+      Assert.Contains("Nested", document.QuerySelector("[data-mv-body='0']")!.TextContent, StringComparison.Ordinal);
+      Assert.Null(document.QuerySelector("p[data-mv-body]"));
+   }
+
+
+
+   /// <summary>Ordinary text, empty documents and hidden metadata do not manufacture headings.</summary>
+   [Theory]
+   [InlineData("")]
+   [InlineData("Text **only**")]
+   [InlineData("---\n# Metadata\n---\nBody")]
+   public void Create_NoHeadings_RetainsBody(string markdown)
+   {
+      var outline = new DocumentOutline(markdown);
+      Assert.Empty(outline.Headings);
+      Assert.DoesNotContain("data-mv-body", outline.Html, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Rendering frontmatter as Markdown participates in the same sanitized outline.</summary>
+   [Fact]
+   public void Create_MarkdownMetadata_IncludesVisibleHeadings()
+   {
+      var outline = new DocumentOutline("---\n# Metadata\n---\n# Body", FrontmatterMode.Markdown);
+      Assert.Equal(new[] { "Metadata", "Body" }, outline.Headings.Select(heading => heading.Title), StringComparer.Ordinal);
+   }
+
+
+
+   /// <summary>Corrupt saved sizes and depth cannot create an unusable native sidebar.</summary>
+   [Theory]
+   [InlineData(-1, double.NaN, 1, 220)]
+   [InlineData(99, double.PositiveInfinity, 6, 220)]
+   [InlineData(3, 0, 3, 140)]
+   [InlineData(4, 900, 4, 500)]
+   [InlineData(2, 240, 2, 240)]
+   public void Sanitize_OutlinePreferences_ClampsSupportedRange(int depth, double width, int expectedDepth, double expectedWidth)
+   {
+      var settings = new AppSettings { ShowOutline = true, OutlineDepth = depth, OutlineWidth = width };
+      settings.Sanitize();
+      Assert.True(settings.ShowOutline);
+      Assert.Equal(expectedDepth, settings.OutlineDepth);
+      Assert.Equal(expectedWidth, settings.OutlineWidth);
+   }
+
+
+
+   /// <summary>GFM fragments resolve duplicate and Unicode headings without retaining authored identifiers.</summary>
+   [Fact]
+   public void Create_FragmentLinks_ResolveGeneratedTargets()
+   {
+      var outline = new DocumentOutline("# Hello **world**!\n\n# Hello world!\n\n# Café\n\n[first](#hello-world) [duplicate](#hello-world-1) [unicode](#caf%C3%A9) [unknown](#unknown) [web](https://example.com)");
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(outline.Html);
+      Assert.Equal(new[] { "#mv-heading-0", "#mv-heading-1", "#mv-heading-2", "#unknown", "https://example.com" }, document.QuerySelectorAll("a").Select(link => link.GetAttribute("href")), StringComparer.Ordinal);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentResourcePolicyTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentResourcePolicyTests.cs
new file mode 100644
index 0000000..b749f36
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentResourcePolicyTests.cs
@@ -0,0 +1,196 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Verifies document image isolation and Windows path rejection before any native file access.</summary>
+public sealed class DocumentResourcePolicyTests
+{
+   /// <summary>Generated fragments address only bounded heading identities, never an arbitrary native command.</summary>
+   [Theory]
+   [InlineData("#mv-heading-0", 1, 0)]
+   [InlineData("#mv-heading-2", 3, 2)]
+   [InlineData("#mv-heading-3", 3, null)]
+   [InlineData("#mv-heading-0", 0, null)]
+   [InlineData("#mv-heading--1", 3, null)]
+   [InlineData("#mv-heading-+1", 3, null)]
+   [InlineData("#mv-heading-2147483648", 3, null)]
+   [InlineData("#mv-heading-", 3, null)]
+   [InlineData("#heading", 3, null)]
+   [InlineData("?command=edit#mv-heading-0", 3, null)]
+   public void GetHeadingIndex_Fragment_RequiresBoundedGeneratedIndex(string suffix, int count, int? expected)
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Equal(expected, policy.GetHeadingIndex(new Uri(policy.DocumentUri.AbsoluteUri + suffix), count));
+   }
+
+
+
+   /// <summary>Relative requests, another namespace/path/authority, and missing input cannot impersonate this document.</summary>
+   [Fact]
+   public void GetHeadingIndex_OtherDocumentOrAuthority_RejectsTarget()
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Null(policy.GetHeadingIndex(new Uri("#mv-heading-0", UriKind.Relative), 1));
+      Assert.Null(policy.GetHeadingIndex(new Uri(new DocumentResourcePolicy().DocumentUri.AbsoluteUri + "#mv-heading-0"), 1));
+      Assert.Null(policy.GetHeadingIndex(new Uri(policy.DocumentUri, "other.html#mv-heading-0"), 1));
+      var authority = new UriBuilder(policy.DocumentUri) { Host = "example.com", Fragment = "mv-heading-0" };
+      Assert.Null(policy.GetHeadingIndex(authority.Uri, 1));
+      authority.Host = policy.DocumentUri.Host;
+      authority.UserName = "attacker";
+      Assert.Null(policy.GetHeadingIndex(authority.Uri, 1));
+      Assert.Throws<ArgumentNullException>(() => policy.GetHeadingIndex(null!, 1));
+   }
+
+
+   /// <summary>Each opened document has a distinct, inert HTTPS namespace.</summary>
+   [Fact]
+   public void Constructor_DifferentDocuments_UsesDistinctNamespaces()
+   {
+      var first = new DocumentResourcePolicy();
+      var second = new DocumentResourcePolicy();
+      Assert.NotEqual(first.DocumentUri, second.DocumentUri);
+      Assert.Equal("https", first.DocumentUri.Scheme);
+      Assert.Equal("viewer.markdownviewr.invalid", first.DocumentUri.Host);
+      Assert.EndsWith("/index.html", first.DocumentUri.AbsolutePath, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Supported local images retain their relative spelling and are decoded only once.</summary>
+   [Theory]
+   [InlineData("images/photo.PNG", "images/photo.PNG")]
+   [InlineData("images/hello%20world.jpg", "images/hello world.jpg")]
+   [InlineData("images/%252e%252e.png", "images/%2e%2e.png")]
+   [InlineData("diagram.svg#view", "diagram.svg")]
+   [InlineData("image.webp?cache=1", "image.webp")]
+   public void GetImageRelativePath_AllowedImage_ReturnsOnceDecodedPath(string path, string expected)
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Equal(expected, policy.GetImageRelativePath(new Uri(policy.DocumentUri, path)));
+   }
+
+
+
+   /// <summary>Other origins, ports, credentials and document namespaces have no resource access.</summary>
+   [Theory]
+   [InlineData("http://viewer.markdownviewr.invalid/image.png")]
+   [InlineData("https://example.com/image.png")]
+   [InlineData("https://viewer.markdownviewr.invalid:444/image.png")]
+   [InlineData("https://user@viewer.markdownviewr.invalid/image.png")]
+   [InlineData("file:///C:/private.png")]
+   [InlineData("data:image/png;base64,AAAA")]
+   public void GetImageRelativePath_ForeignRequest_DeniesAccess(string url)
+   {
+      Assert.Null(new DocumentResourcePolicy().GetImageRelativePath(new Uri(url)));
+   }
+
+
+
+   /// <summary>Supported local document types retain once-decoded literal paths, without providing shell commands.</summary>
+   [Theory]
+   [InlineData("child.md", "child.md")]
+   [InlineData("docs/child.MARKDOWN", "docs/child.MARKDOWN")]
+   [InlineData("child.mdown", "child.mdown")]
+   [InlineData("child.mkd", "child.mkd")]
+   [InlineData("child.txt", "child.txt")]
+   [InlineData("docs/caf%C3%A9%20%26%20%24HOME.md", "docs/café & $HOME.md")]
+   [InlineData("docs/%252e%252e.md", "docs/%2e%2e.md")]
+   public void GetDocumentRelativePath_SupportedType_DecodesOnlyOnce(string path, string expected)
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Equal(expected, policy.GetDocumentRelativePath(new Uri(policy.DocumentUri, path)));
+   }
+
+
+
+   /// <summary>Documents reject queries, traversal, devices, alternate streams and executable/non-document targets before native access.</summary>
+   [Theory]
+   [InlineData("child.md?command=run")]
+   [InlineData("../private.md")]
+   [InlineData("docs/%2e%2e%2f%2e%2e%2fprivate.md")]
+   [InlineData("docs/CON.md")]
+   [InlineData("docs/child.md%3aprivate")]
+   [InlineData("docs/%5cprivate.md")]
+   [InlineData("docs/%00private.md")]
+   [InlineData("docs/folder./child.md")]
+   [InlineData("docs/folder%20/child.md")]
+   [InlineData("child.exe")]
+   [InlineData("child.lnk")]
+   [InlineData("child.png")]
+   public void GetDocumentRelativePath_UnsafeTarget_DeniesAccess(string path)
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Null(policy.GetDocumentRelativePath(new Uri(policy.DocumentUri, path)));
+   }
+
+
+
+   /// <summary>Other namespaces, origins, schemes and relative requests never gain document-open authority.</summary>
+   [Fact]
+   public void GetDocumentRelativePath_ForeignContext_DeniesAccess()
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Null(policy.GetDocumentRelativePath(new Uri("child.md", UriKind.Relative)));
+      Assert.Null(policy.GetDocumentRelativePath(new Uri(new DocumentResourcePolicy().DocumentUri, "child.md")));
+      Assert.Null(policy.GetDocumentRelativePath(new Uri("file:///C:/private.md")));
+      Assert.Null(policy.GetDocumentRelativePath(new Uri("https://example.com/child.md")));
+      Assert.Throws<ArgumentNullException>(() => policy.GetDocumentRelativePath(null!));
+   }
+
+
+
+   /// <summary>Requests cannot cross into another opened document.</summary>
+   [Fact]
+   public void GetImageRelativePath_OtherDocument_DeniesAccess()
+   {
+      var policy = new DocumentResourcePolicy();
+      var other = new DocumentResourcePolicy();
+      Assert.Null(policy.GetImageRelativePath(new Uri(other.DocumentUri, "image.png")));
+   }
+
+
+
+   /// <summary>Non-images, traversal, device names, encoded separators and filename aliases are refused.</summary>
+   [Theory]
+   [InlineData("index.html")]
+   [InlineData("script.js")]
+   [InlineData("../private.png")]
+   [InlineData("%2e%2e/private.png")]
+   [InlineData("images/%2e%2e%2f%2e%2e%2fprivate.png")]
+   [InlineData("images/%5cprivate.png")]
+   [InlineData("images/C%3a/private.png")]
+   [InlineData("images/%00private.png")]
+   [InlineData("images/%0aprivate.png")]
+   [InlineData("images/a%3f.png")]
+   [InlineData("images/a%2a.png")]
+   [InlineData("images/a%3c.png")]
+   [InlineData("images/a%7c.png")]
+   [InlineData("images//private.png")]
+   [InlineData("images/folder%20/private.png")]
+   [InlineData("images/folder./private.png")]
+   [InlineData("CON.png")]
+   [InlineData("images/LPT1.png")]
+   [InlineData("images/COM%C2%B9.png")]
+   public void GetImageRelativePath_UnsafePath_DeniesAccess(string path)
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Null(policy.GetImageRelativePath(new Uri(policy.DocumentUri, path)));
+   }
+
+
+
+   /// <summary>Relative request URIs and absent requests have explicit refusal behavior.</summary>
+   [Fact]
+   public void GetImageRelativePath_RelativeAndNull_RejectsInvalidRequests()
+   {
+      var policy = new DocumentResourcePolicy();
+      Assert.Null(policy.GetImageRelativePath(new Uri("image.png", UriKind.Relative)));
+      Assert.Throws<ArgumentNullException>(() => policy.GetImageRelativePath(null!));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentScrollStateTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentScrollStateTests.cs
new file mode 100644
index 0000000..4fc4fc9
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentScrollStateTests.cs
@@ -0,0 +1,106 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves bounded fixed-query geometry and paired heading interpolation without executing arbitrary data.</summary>
+public sealed class DocumentScrollStateTests
+{
+   /// <summary>Finite generated geometry is preserved and viewport overshoot is bounded.</summary>
+   [Fact]
+   public void FromBrowserResult_ValidFrame_PreservesGeneratedGeometry()
+   {
+      DocumentScrollState state = DocumentScrollState.FromBrowserResult("[120,100,[[0,12],[2,90]],[1,2]]", 3)!;
+      Assert.Equal(100, state.Position);
+      Assert.Equal(100, state.Maximum);
+      Assert.Equal(12, state.Headings[0]);
+      Assert.Equal(90, state.Headings[2]);
+      Assert.Equal(new[] { 1, 2 }, state.Collapsed);
+      Assert.Equal(0, DocumentScrollState.FromBrowserResult("[-5,100,[],[]]", 0)!.Position);
+      Assert.Equal(0, DocumentScrollState.FromBrowserResult("[0,0,[],[]]", 0)!.Maximum);
+   }
+
+
+
+   /// <summary>Untrusted shapes, identities, duplicate entries and nonfinite geometry cannot become scroll commands.</summary>
+   [Theory]
+   [InlineData(null)]
+   [InlineData("")]
+   [InlineData("null")]
+   [InlineData("{}")]
+   [InlineData("[0,100,[]]")]
+   [InlineData("[\"0\",100,[],[]]")]
+   [InlineData("[0,-1,[],[]]")]
+   [InlineData("[0,1e999,[],[]]")]
+   [InlineData("[0,100,{},[]]")]
+   [InlineData("[0,100,[],{}]")]
+   [InlineData("[0,100,[[0,1],[1,2],[2,3]],[]]")]
+   [InlineData("[0,100,[],[0,1,1]]")]
+   [InlineData("[0,100,[0],[]]")]
+   [InlineData("[0,100,[[0]],[]]")]
+   [InlineData("[0,100,[[\"0\",1]],[]]")]
+   [InlineData("[0,100,[[-1,1]],[]]")]
+   [InlineData("[0,100,[[2,1]],[]]")]
+   [InlineData("[0,100,[[0.5,1]],[]]")]
+   [InlineData("[0,100,[[0,\"one\"]],[]]")]
+   [InlineData("[0,100,[[0,1e999]],[]]")]
+   [InlineData("[0,100,[[0,1],[0,2]],[]]")]
+   [InlineData("[0,100,[],[0,0]]")]
+   [InlineData("[0,100,[],[\"0\"]]")]
+   [InlineData("[0,100,[],[2]]")]
+   public void FromBrowserResult_InvalidFrame_ReturnsNoGeometry(string? json)
+   {
+      Assert.Null(DocumentScrollState.FromBrowserResult(json, 2));
+   }
+
+
+
+   /// <summary>Query payload size scales only with the current generated heading count.</summary>
+   [Fact]
+   public void FromBrowserResult_OversizedOrInvalidCount_RejectsFrame()
+   {
+      Assert.Null(DocumentScrollState.FromBrowserResult(new string(' ', 513), 0));
+      Assert.Throws<ArgumentOutOfRangeException>(() => DocumentScrollState.FromBrowserResult("[]", -1));
+   }
+
+
+
+   /// <summary>Paired anchors retain viewport fractions between headings and reach exact document ends.</summary>
+   [Theory]
+   [InlineData(-1, 0)]
+   [InlineData(0, 0)]
+   [InlineData(12.5, 50)]
+   [InlineData(25, 100)]
+   [InlineData(50, 120)]
+   [InlineData(75, 140)]
+   [InlineData(87.5, 170)]
+   [InlineData(100, 200)]
+   [InlineData(110, 200)]
+   public void MapPosition_PairedHeadings_InterpolatesAndClamps(double position, double expected)
+   {
+      Assert.Equal(expected, DocumentScrollState.MapPosition(position, 100, 200, [(75, 140), (25, 100)]));
+   }
+
+
+
+   /// <summary>No headings use relative scroll; duplicate/nonfinite/off-range anchors cannot corrupt interpolation.</summary>
+   [Fact]
+   public void MapPosition_MissingOrUnusableAnchors_UsesBoundedGeometry()
+   {
+      Assert.Equal(200, DocumentScrollState.MapPosition(50, 100, 400, []));
+      Assert.Equal(120, DocumentScrollState.MapPosition(50, 100, 200, [(25, 100), (25, 110), (75, 140), (double.NaN, 1), (1, double.PositiveInfinity), (-1, 1), (100, 1)]));
+      Assert.Equal(100, DocumentScrollState.MapPosition(25, 100, 100, [(25, 200)]));
+      Assert.Equal(0, DocumentScrollState.MapPosition(25, 100, 100, [(25, -1)]));
+      Assert.Equal(0, DocumentScrollState.MapPosition(double.NaN, 100, 100, []));
+      Assert.Equal(0, DocumentScrollState.MapPosition(0, double.PositiveInfinity, 100, []));
+      Assert.Equal(0, DocumentScrollState.MapPosition(0, 100, double.NaN, []));
+      Assert.Equal(0, DocumentScrollState.MapPosition(0, 0, 100, []));
+      Assert.Equal(0, DocumentScrollState.MapPosition(0, 100, -1, []));
+      Assert.Throws<ArgumentNullException>(() => DocumentScrollState.MapPosition(0, 1, 1, null!));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentSourceHeadingTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentSourceHeadingTests.cs
new file mode 100644
index 0000000..2abbe6a
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentSourceHeadingTests.cs
@@ -0,0 +1,142 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using AngleSharp.Html.Parser;
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves original UTF-16 heading provenance through raw HTML, fences, frontmatter and passive sanitation.</summary>
+public sealed class DocumentSourceHeadingTests
+{
+   /// <summary>Parser spans distinguish real Setext/ATX/nested headings from fenced pseudo-headings and repeated labels.</summary>
+   [Theory]
+   [InlineData("\n")]
+   [InlineData("\r\n")]
+   public void Create_MarkdownHeadings_MapsOriginalSyntax(string newline)
+   {
+      string source = string.Join(newline, "😀 Intro", "", "# Same", "", "```md", "# Same", "Fake", "====", "```", "", "Same", "====", "", "> ## Quoted", "", "- ### Listed", "", "Last", "----");
+      var outline = new DocumentOutline(source);
+      Assert.Equal(new[] { "Same", "Same", "Quoted", "Listed", "Last" }, outline.Headings.Select(heading => heading.Title), StringComparer.Ordinal);
+      Assert.Equal(outline.Headings.Select(heading => heading.Index), outline.SourceHeadings.Select(heading => heading.Index));
+      Assert.Equal(new[] { "# Same", "Same" + newline + "====", "## Quoted", "### Listed", "Last" + newline + "----" }, outline.SourceHeadings.Select(heading => source[heading.Start..heading.End].TrimEnd('\r')), StringComparer.Ordinal);
+      Assert.DoesNotContain("data-mv-source-", outline.Html, StringComparison.OrdinalIgnoreCase);
+   }
+
+
+
+   /// <summary>HTML token locations account for Markdown quote/list prefixes and multiple tags on one source line.</summary>
+   [Theory]
+   [InlineData("<div><h2>Same</h2><h3>Same</h3></div>\n\n<H4\n title='name'>Four</H4>", 3)]
+   [InlineData("> <div><h2>Same</h2>\n> <h3>Same</h3></div>", 2)]
+   [InlineData("- <h2>Listed</h2>\n\n  <h3>Nested</h3>", 2)]
+   [InlineData("Text <h2>Inline</h2> followed by <h3/> end", 2)]
+   public void Create_RawHtmlHeadings_UsesExactOpeningOffsets(string source, int count)
+   {
+      var outline = new DocumentOutline(source);
+      Assert.Equal(count, outline.Headings.Count);
+      Assert.Equal(count, outline.SourceHeadings.Count);
+      foreach(DocumentSourceHeading heading in outline.SourceHeadings)
+      {
+         Assert.Equal("<h" + outline.Headings[heading.Index].Level, source.Substring(heading.Start, 3), ignoreCase: true);
+         Assert.InRange(heading.End, heading.Start + 3, source.Length);
+      }
+      Assert.Equal(outline.SourceHeadings.Count, outline.SourceHeadings.Select(heading => heading.Start).Distinct().Count());
+      Assert.DoesNotContain("data-mv-source-", outline.Html, StringComparison.OrdinalIgnoreCase);
+   }
+
+
+
+   /// <summary>An implicit closing heading stays distinct from the next raw inline heading on the same authored line.</summary>
+   [Fact]
+   public void Create_ImplicitInlineHeadingClose_PreservesDistinctSourcePositions()
+   {
+      const string Source = "Intro <h2>One<h3>Two</h3>";
+      var outline = new DocumentOutline(Source);
+      Assert.Equal(new[] { "One", "Two" }, outline.Headings.Select(heading => heading.Title), StringComparer.Ordinal);
+      Assert.Equal(new[] { Source.IndexOf("<h2>", StringComparison.Ordinal), Source.IndexOf("<h3>", StringComparison.Ordinal) }, outline.SourceHeadings.Select(heading => heading.Start));
+      Assert.All(outline.SourceHeadings, heading => Assert.Equal(Source.Length, heading.End));
+   }
+
+
+
+   /// <summary>Hidden/metadata frontmatter retains body offsets; Markdown mode also maps metadata with its original delimiter spacing.</summary>
+   [Theory]
+   [InlineData(FrontmatterMode.Hide, 1)]
+   [InlineData(FrontmatterMode.Metadata, 1)]
+   [InlineData(FrontmatterMode.Markdown, 2)]
+   public void Create_FrontmatterModes_MapsUnmodifiedSnapshot(FrontmatterMode mode, int count)
+   {
+      const string Source = "  --- \r\n# Metadata\r\n \t---  \r\n\r\n# Body\r\nContent";
+      var outline = new DocumentOutline(Source, mode);
+      Assert.Equal(count, outline.SourceHeadings.Count);
+      Assert.Equal(Source.IndexOf("# Body", StringComparison.Ordinal), outline.SourceHeadings[^1].Start);
+      Assert.Equal("# Body", Source[outline.SourceHeadings[^1].Start..outline.SourceHeadings[^1].End].TrimEnd('\r'));
+      if(mode == FrontmatterMode.Markdown)
+      {
+         Assert.Equal(Source.IndexOf("# Metadata", StringComparison.Ordinal), outline.SourceHeadings[0].Start);
+         Assert.Equal("# Metadata", Source[outline.SourceHeadings[0].Start..outline.SourceHeadings[0].End].TrimEnd('\r'));
+      }
+   }
+
+
+
+   /// <summary>Removed active containers and authored identity attributes cannot impersonate surviving heading provenance.</summary>
+   [Fact]
+   public void Create_MaliciousMarkup_RetainsOnlyTrustedSurvivingPositions()
+   {
+      const string Source = "<script><h2>Same</h2></script>\n\n<iframe><h2>Same</h2></iframe>\n\n<h2 data-mv-source-fixed='0' data-mv-body='99' id='mv-heading-99' onclick='evil()'>Same</h2>\n\n# Same\n\nText <span>inline</span><!-- <h3>comment</h3> -->";
+      var outline = new DocumentOutline(Source);
+      Assert.Equal(new[] { "Same", "Same" }, outline.Headings.Select(heading => heading.Title), StringComparer.Ordinal);
+      Assert.Equal(2, outline.SourceHeadings.Count);
+      Assert.Equal(Source.IndexOf("<h2 data", StringComparison.Ordinal), outline.SourceHeadings[0].Start);
+      Assert.Equal(Source.IndexOf("# Same", StringComparison.Ordinal), outline.SourceHeadings[1].Start);
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(outline.Html);
+      Assert.Null(document.QuerySelector("script,iframe,[onclick],[data-mv-source-fixed],#mv-heading-99"));
+      Assert.DoesNotContain("data-mv-source-", outline.Html, StringComparison.OrdinalIgnoreCase);
+   }
+
+
+
+   /// <summary>Empty input and no-heading HTML do not manufacture positions; invalid inputs keep the renderer's validation.</summary>
+   [Theory]
+   [InlineData("")]
+   [InlineData("<div>ordinary body</div>")]
+   [InlineData("Text <h22>ordinary</h22> &amp; <hr/> <!-- comment -->")]
+   [InlineData("---\n\n---\nBody")]
+   public void Create_NoHeadings_ReturnsEmptyPositions(string source)
+   {
+      Assert.Empty(new DocumentOutline(source).SourceHeadings);
+   }
+
+
+
+   /// <summary>Many raw headings on one line share one bounded line end without rescanning its entire remaining text per heading.</summary>
+   [Fact]
+   public void Create_ManyRawHeadingsOnOneLine_PreservesDistinctOffsets()
+   {
+      string source = string.Concat(Enumerable.Repeat("<h2>Same</h2>", 300));
+      var outline = new DocumentOutline(source);
+      Assert.Equal(300, outline.SourceHeadings.Count);
+      for(int index = 0; index < outline.SourceHeadings.Count; index++)
+      {
+         Assert.Equal(index * "<h2>Same</h2>".Length, outline.SourceHeadings[index].Start);
+         Assert.Equal(source.Length, outline.SourceHeadings[index].End);
+      }
+      Assert.DoesNotContain("data-mv-source-", outline.Html, StringComparison.OrdinalIgnoreCase);
+   }
+
+
+
+   /// <summary>A mapped render still rejects null, oversized content and corrupt frontmatter modes before use.</summary>
+   [Fact]
+   public void Create_InvalidInput_PreservesRenderingLimits()
+   {
+      Assert.Throws<ArgumentNullException>(() => new DocumentOutline(null!));
+      Assert.Throws<ArgumentException>(() => new DocumentOutline(new string('x', MarkdownRenderer.MaximumCharacters + 1)));
+      Assert.Throws<ArgumentOutOfRangeException>(() => new DocumentOutline("# Body", (FrontmatterMode)99));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentSourceTextTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentSourceTextTests.cs
new file mode 100644
index 0000000..9e373de
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentSourceTextTests.cs
@@ -0,0 +1,221 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves literal nested folding and original-to-native selection offsets without mutating document data.</summary>
+public sealed class DocumentSourceTextTests
+{
+   /// <summary>Setext and fenced pseudo-headings retain correct independent body boundaries across native line endings.</summary>
+   [Theory]
+   [InlineData("\n")]
+   [InlineData("\r\n")]
+   [InlineData("\r")]
+   public void SetCollapsed_NestedSections_PreservesLiteralSyntaxAndChoices(string newline)
+   {
+      string original = string.Join(newline, "😀 Intro", "", "Parent", "======", "Parent body", "", "## Child", "Child body", "```md", "# Fake", "```", "", "> ## Peer", "> Peer body", "", "# Last", "Tail");
+      var source = new DocumentSourceText(original, new DocumentOutline(original));
+      Assert.Equal(original.ReplaceLineEndings("\r"), source.Text);
+      Assert.Equal(4, source.Headings.Count);
+      Assert.True(source.SetCollapsed([1]));
+      Assert.Contains("Parent body", source.Text, StringComparison.Ordinal);
+      Assert.Contains("## Child\r⋯\r> ## Peer", source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("# Fake", source.Text, StringComparison.Ordinal);
+      Assert.Null(source.GetDisplayRange(original.IndexOf("Child body", StringComparison.Ordinal), 5));
+      Assert.True(source.SetCollapsed([0, 1]));
+      Assert.Contains("Parent\r======\r⋯\r# Last", source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("Child", source.Text, StringComparison.Ordinal);
+      Assert.Equal(new[] { 0, 3 }, source.Headings.Select(heading => heading.Index));
+      Assert.True(source.SetCollapsed([1]));
+      Assert.Contains("> ## Peer", source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("Child body", source.Text, StringComparison.Ordinal);
+      Assert.False(source.SetCollapsed([1, 1]));
+      Assert.True(source.SetCollapsed([]));
+      Assert.Equal(original.ReplaceLineEndings("\r"), source.Text);
+   }
+
+
+
+   /// <summary>Selections and heading anchors remain exact after omitted bodies and UTF-16/native newline conversion.</summary>
+   [Fact]
+   public void GetDisplayRange_MixedNewlinesAndFold_MapsLiteralOccurrence()
+   {
+      const string Original = "😀 Intro\r\n# One\nHidden\n# Two\rVisible\r\n# Three";
+      var source = new DocumentSourceText(Original, new DocumentOutline(Original));
+      source.SetCollapsed([0]);
+      int start = Original.IndexOf("Visible", StringComparison.Ordinal);
+      (int Start, int Length) range = source.GetDisplayRange(start, "Visible".Length)!.Value;
+      Assert.Equal("Visible", source.Text.Substring(range.Start, range.Length));
+      Assert.Equal(source.Text.IndexOf("# Two", StringComparison.Ordinal), source.Headings.Single(heading => heading.Index == 1).Start);
+      Assert.Equal("# Two", source.Text[source.Headings[1].Start..source.Headings[1].End]);
+      Assert.Null(source.GetDisplayRange(Original.IndexOf("Hidden", StringComparison.Ordinal) - 1, 8));
+      Assert.Equal((source.Text.Length, 0), source.GetDisplayRange(Original.Length, 0));
+      Assert.Equal((0, 2), source.GetDisplayRange(0, 2));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetDisplayRange(-1, 0));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetDisplayRange(0, -1));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetDisplayRange(Original.Length + 1, 0));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetDisplayRange(0, Original.Length + 1));
+   }
+
+
+
+   /// <summary>Empty bodies, ordinary content and invalid collapse indices cannot hide another section or manufacture headings.</summary>
+   [Theory]
+   [InlineData("")]
+   [InlineData("ordinary literal <script> text")]
+   [InlineData("# Empty\n# Next")]
+   public void SetCollapsed_NoBodyOrInvalidIndices_RetainsText(string original)
+   {
+      var source = new DocumentSourceText(original, new DocumentOutline(original));
+      source.SetCollapsed([-1, 0, 99]);
+      Assert.Equal(original.ReplaceLineEndings("\r"), source.Text);
+      Assert.Throws<ArgumentNullException>(() => source.SetCollapsed(null!));
+   }
+
+
+
+   /// <summary>Raw tags on one line are retained literally; same-line peer headings cannot produce reversed body ranges.</summary>
+   [Fact]
+   public void SetCollapsed_RawSameLinePeers_RetainsHeadingLine()
+   {
+      const string Original = "<h2>One</h2><h2>Two</h2>\nBody\n\n# Last\nTail";
+      var source = new DocumentSourceText(Original, new DocumentOutline(Original));
+      source.SetCollapsed([0, 1]);
+      Assert.Contains("<h2>One</h2><h2>Two</h2>", source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("Body", source.Text, StringComparison.Ordinal);
+      Assert.Contains("# Last\rTail", source.Text, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>A folded multiline HTML heading retains all authored attributes, nested title markup and closing syntax.</summary>
+   [Theory]
+   [InlineData("\n")]
+   [InlineData("\r\n")]
+   [InlineData("\r")]
+   public void SetCollapsed_RawMultilineHeading_PreservesCompleteHeader(string newline)
+   {
+      string header = string.Join(newline, "<H2", " title='quoted > value'>", "Raw <em>child</em>", "<!-- </h2> is a comment -->", "</H2>");
+      string original = "# Root" + newline
+         + header + newline + "Hidden body" + newline + "<h3>First peer</h3><h3>Second peer</h3>" + newline + "Peer body" + newline + newline + "# Last" + newline + "Tail";
+      var source = new DocumentSourceText(original, new DocumentOutline(original));
+      Assert.True(source.SetCollapsed([1]));
+      Assert.Contains(header.ReplaceLineEndings("\r"), source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("Hidden body", source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("First peer", source.Text, StringComparison.Ordinal);
+      Assert.Contains("# Last\rTail", source.Text, StringComparison.Ordinal);
+      Assert.Equal(new[] { 0, 1, 4 }, source.Headings.Select(heading => heading.Index));
+      Assert.True(source.SetCollapsed([]));
+      Assert.Equal(original, source.GetCopyText(0, source.Text.Length));
+   }
+
+
+
+   /// <summary>Inline raw headings may span Markdown lines; folding preserves their complete authored title and closing tag.</summary>
+   [Theory]
+   [InlineData("<h2 title='inline'>Raw <em>inline</em>\nheading</h2>")]
+   [InlineData("<H2\n title='metadata'>Raw child\n</H2>")]
+   [InlineData("<H2\r\n title='metadata'>Raw child\r\n</H2>")]
+   [InlineData("<H2\n title='metadata'>Raw child\n<!-- fake </h2> -->\n</H2\n>")]
+   [InlineData("<h2>Raw `</h2><h3>fake</h3>`<!-- </h2> -->\nheading</h2>")]
+   public void SetCollapsed_RawInlineMultilineHeading_PreservesCompleteHeader(string header)
+   {
+      string original = "# Root\n\nIntro " + header + "\n\nHidden body\n\n# Last\nTail";
+      var source = new DocumentSourceText(original, new DocumentOutline(original));
+      Assert.Equal(3, source.Headings.Count);
+      Assert.True(source.SetCollapsed([1]));
+      Assert.Contains(header.ReplaceLineEndings("\r"), source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("Hidden body", source.Text, StringComparison.Ordinal);
+      Assert.Contains("# Last\rTail", source.Text, StringComparison.Ordinal);
+      Assert.True(source.SetCollapsed([]));
+      Assert.Equal(original, source.GetCopyText(0, source.Text.Length));
+   }
+
+
+
+   /// <summary>A following HTML block that starts a new heading or only contains comments cannot supply a false closing range.</summary>
+   [Theory]
+   [InlineData("<div><h3>Child</h3></div>", 4)]
+   [InlineData("<!-- fake </h2> -->", 3)]
+   public void SetCollapsed_RawInlineHeadingFollowedByBlock_DoesNotBorrowClosingTag(string block, int headings)
+   {
+      string original = "# Root\n\nIntro <h2>Header\n\n" + block + "\n\nHidden body\n\n# Last\nTail";
+      var source = new DocumentSourceText(original, new DocumentOutline(original));
+      Assert.Equal(headings, source.Headings.Count);
+      Assert.True(source.SetCollapsed([1]));
+      Assert.Contains("Intro <h2>Header\r", source.Text, StringComparison.Ordinal);
+      Assert.DoesNotContain("Hidden body", source.Text, StringComparison.Ordinal);
+      Assert.Contains("# Last\rTail", source.Text, StringComparison.Ordinal);
+      Assert.True(source.SetCollapsed([]));
+      Assert.Equal(original, source.GetCopyText(0, source.Text.Length));
+   }
+
+
+
+   /// <summary>Folding accepts only bounded canonical snapshots with matching source anchors.</summary>
+   [Fact]
+   public void Create_InvalidSnapshot_RejectsInput()
+   {
+      var outline = new DocumentOutline("# Heading");
+      Assert.Throws<ArgumentNullException>(() => new DocumentSourceText(null!, outline));
+      Assert.Throws<ArgumentNullException>(() => new DocumentSourceText("", null!));
+      Assert.Throws<ArgumentException>(() => new DocumentSourceText(new string('x', MarkdownRenderer.MaximumCharacters + 1), outline));
+      Assert.Throws<ArgumentException>(() => new DocumentSourceText("", outline));
+   }
+
+
+   /// <summary>Native CR display does not change copied LF/CRLF/lone CR, Unicode or literal authored markup.</summary>
+   [Theory]
+   [InlineData("")]
+   [InlineData("😀  text\t\n<script>literal</script>\n")]
+   [InlineData("# H\r\n**text**\r\n")]
+   [InlineData("One\rTwo\nThree\r\n終 😀\r")]
+   public void GetCopyText_OriginalLineEndings_RetainsExactSource(string original)
+   {
+      var source = new DocumentSourceText(original, new DocumentOutline(original));
+      Assert.Equal(original, source.GetCopyText(0, source.Text.Length));
+      Assert.Equal("", source.GetCopyText(source.Text.Length, 0));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetCopyText(-1, 0));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetCopyText(0, -1));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetCopyText(source.Text.Length + 1, 0));
+      Assert.Throws<ArgumentOutOfRangeException>(() => source.GetCopyText(0, source.Text.Length + 1));
+   }
+
+
+
+   /// <summary>Selection boundaries include the LF only when the native CR is selected, preserving exact substrings.</summary>
+   [Fact]
+   public void GetCopyText_PartialNewlineAndUnicode_MapsActualSelection()
+   {
+      const string Original = "😀 A\r\nB\nC\rD\r\n終";
+      var source = new DocumentSourceText(Original, new DocumentOutline(Original));
+      Assert.Equal("😀", source.GetCopyText(0, 2));
+      Assert.Equal("\r\n", source.GetCopyText(4, 1));
+      Assert.Equal("B\nC\rD\r\n", source.GetCopyText(5, 6));
+      Assert.Equal("終", source.GetCopyText(source.Text.Length - 1, 1));
+      Assert.Equal("", source.GetCopyText(5, 0));
+   }
+
+
+
+   /// <summary>Folds copy only visible original chunks and a literal ellipsis; reopening restores the exact original.</summary>
+   [Fact]
+   public void GetCopyText_MergedAndIndependentFolds_OmitsHiddenBodies()
+   {
+      const string Original = "# First\r\nHidden\r\n## Nested\nMore\n# Second\nKeep 😀\r\n# Last\rTail";
+      var source = new DocumentSourceText(Original, new DocumentOutline(Original));
+      source.SetCollapsed([0, 1]);
+      Assert.Equal("# First\r\n⋯\r# Second\nKeep 😀\r\n# Last\rTail", source.GetCopyText(0, source.Text.Length));
+      int visible = source.Text.IndexOf("Keep", StringComparison.Ordinal);
+      Assert.Equal("Keep 😀\r\n", source.GetCopyText(visible, 8));
+      source.SetCollapsed([1, 2]);
+      Assert.Equal("# First\r\nHidden\r\n## Nested\n⋯\r# Second\n⋯\r# Last\rTail", source.GetCopyText(0, source.Text.Length));
+      source.SetCollapsed([]);
+      Assert.Equal(Original, source.GetCopyText(0, source.Text.Length));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentStylesTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentStylesTests.cs
new file mode 100644
index 0000000..035d187
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentStylesTests.cs
@@ -0,0 +1,185 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using AngleSharp.Css.Dom;
+using AngleSharp.Css.Parser;
+using AngleSharp.Html.Dom;
+using AngleSharp.Html.Parser;
+using MarkdownViewr.Windows.Core.Documents;
+using MarkdownViewr.Windows.Core.Printing;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Checks the pinned Mac document CSS/DOM contract independently of native layout and preserves passive markup/print isolation.</summary>
+public sealed class DocumentStylesTests
+{
+   /// <summary>Original CSS variable names remain available in every original palette while earlier Windows aliases stay compatible.</summary>
+   [Fact]
+   public void ReadingStyles_AllPalettes_ExportsOriginalCssContract()
+   {
+      var aliases = new Dictionary<string, string>(StringComparer.Ordinal)
+      {
+         ["bg"] = "background",
+         ["h1"] = "heading1",
+         ["h2"] = "heading2",
+         ["h3"] = "heading3",
+         ["h4"] = "heading4",
+         ["h5"] = "heading5",
+         ["h6"] = "heading6",
+         ["code-bg"] = "codeBackground",
+         ["code-text"] = "codeText",
+         ["blockquote-bg"] = "blockquoteBackground",
+         ["blockquote-border"] = "blockquoteBorder",
+         ["highlight-bg"] = "highlightBackground",
+         ["highlight-text"] = "highlightText",
+         ["body-font"] = "bodyFont",
+         ["heading-font"] = "headingFont",
+         ["code-font"] = "codeFont",
+         ["base-font-size"] = "baseFontSize",
+         ["h1-size"] = "h1Size",
+         ["h2-size"] = "h2Size",
+         ["h3-size"] = "h3Size",
+         ["h4-size"] = "h4Size",
+         ["h5-size"] = "h5Size",
+         ["h6-size"] = "h6Size",
+         ["code-font-size"] = "codeFontSize",
+         ["line-height"] = "lineHeight",
+      };
+      Assert.Equal(20, ThemeCatalog.BuiltIn.Count);
+      foreach(ReaderTheme theme in ThemeCatalog.BuiltIn)
+      {
+         ICssStyleDeclaration root = Rules(theme.GetReadingStyles(new ReadingAppearance(), 1.5)).Single(rule => string.Equals(rule.SelectorText, ":root", StringComparison.Ordinal)).Style;
+         foreach((string name, string target) in aliases)
+         {
+            Assert.Equal("var(--" + target + ")", root.GetPropertyValue("--" + name));
+            Assert.NotEmpty(root.GetPropertyValue("--" + target));
+         }
+         Assert.Equal("1.5", root.GetPropertyValue("--zoom"));
+         Assert.NotEmpty(root.GetPropertyValue("--text"));
+         Assert.NotEmpty(root.GetPropertyValue("--link"));
+      }
+   }
+
+
+
+   /// <summary>Reference spacing for the inner body, code, lists, nested quotes and tables is parsed as actual CSS declarations.</summary>
+   [Fact]
+   public void ReadingStyles_DocumentRules_MatchPinnedReference()
+   {
+      ICssStyleRule[] rules = Rules(ThemeCatalog.Find(null).GetReadingStyles(new ReadingAppearance(), 1));
+      Assert.Equal("32px 48px", Property(rules, "#content-inner", "padding"));
+      Assert.Equal("auto", Property(rules, "#content", "overflow-y"));
+      Assert.Equal("100vh", Property(rules, "#content", "height"));
+      Assert.Equal("8px", Property(rules, "pre", "border-radius"));
+      Assert.Equal("0.9em", Property(rules, "code", "font-size"));
+      Assert.Equal("var(--code-font-size)", Property(rules, "pre code", "font-size"));
+      Assert.Equal("24px", Property(rules, "ul, ol", "padding-left"));
+      Assert.Equal("4px", Property(rules, "li", "margin-bottom"));
+      Assert.Equal("100%", Property(rules, "table", "width"));
+      Assert.Equal("8px 12px", Property(rules, "th, td", "padding"));
+      Assert.Equal("0.6", Property(rules, "del", "opacity"));
+      Assert.Equal("var(--blockquote-bg)", Property(rules, "blockquote blockquote blockquote", "background"));
+      Assert.Equal("none", Property(rules, "li.task-list-item", "list-style"));
+      Assert.Equal("12px", Property(rules, "::-webkit-scrollbar", "width"));
+   }
+
+
+
+   /// <summary>A document has one private scroll host and original inner selector; metadata, GFM and generated collapse bodies survive.</summary>
+   [Fact]
+   public void Page_RenderedDocument_PreservesPrivateContainersAndSafeContent()
+   {
+      const string Markdown = "---\ntitle: Example\n---\n# Heading\n\n- [x] Complete\n\n```csharp\nvar x = 1;\n```\n\n<div id='content' class='unknown' onclick='evil()'>Literal</div>";
+      var outline = new DocumentOutline(Markdown, FrontmatterMode.Metadata);
+      string page = DocumentPage.Build(outline.Html, "<title> & café </title><script>evil()</script>", ThemeCatalog.Find(null), new ReadingAppearance(), 1);
+      using IHtmlDocument document = new HtmlParser().ParseDocument(page);
+      Assert.Equal("<title> & café </title><script>evil()</script>", document.Title);
+      Assert.Single(document.QuerySelectorAll("#content"));
+      Assert.Single(document.QuerySelectorAll("#content-inner"));
+      Assert.NotNull(document.QuerySelector("body > #content > #content-inner"));
+      Assert.Equal("Heading", document.QuerySelector("#content-inner #mv-heading-0")!.TextContent);
+      Assert.NotNull(document.QuerySelector("#content-inner [data-mv-body='0']"));
+      Assert.Equal("title", document.QuerySelector("#content-inner .frontmatter .fm-key")!.TextContent);
+      Assert.Equal("Example", document.QuerySelector("#content-inner .frontmatter .fm-value")!.TextContent);
+      Assert.Equal("var x = 1;\n", document.QuerySelector("pre code.language-csharp")!.TextContent);
+      Assert.NotNull(document.QuerySelector("input[disabled][checked]"));
+      Assert.Empty(document.QuerySelectorAll("script, [onclick], .unknown, #toc, #raw-source"));
+      Assert.Equal("screen", document.QuerySelector("style")!.GetAttribute("media"));
+   }
+
+
+
+   /// <summary>Custom CSS may use the original variables/selectors without closing the screen style or adding native/browser capabilities.</summary>
+   [Fact]
+   public void Page_HostileThemeCss_PreservesStyleAndTitleBoundaries()
+   {
+      var appearance = new ReadingAppearance(GlobalCss: "#content-inner { padding: calc(2px * var(--zoom)); } </style><script>evil()</script>");
+      string page = DocumentPage.Build("<p>Safe</p>", "</title><script>evil()</script>", ThemeCatalog.Find(null), appearance, 1.5);
+      using IHtmlDocument document = new HtmlParser().ParseDocument(page);
+      Assert.Single(document.QuerySelectorAll("style"));
+      Assert.Empty(document.QuerySelectorAll("script"));
+      Assert.Equal("Safe", document.QuerySelector("#content-inner p")!.TextContent);
+      Assert.Contains("var(--zoom)", document.QuerySelector("style")!.TextContent, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Missing required native state never yields a partially configured document page.</summary>
+   [Theory]
+   [InlineData(0)]
+   [InlineData(1)]
+   [InlineData(2)]
+   [InlineData(3)]
+   public void Page_MissingRequiredState_RejectsInput(int missing)
+   {
+      Assert.Throws<ArgumentNullException>(() => DocumentPage.Build(missing == 0 ? null! : "<p>Safe</p>", missing == 1 ? null! : "Title", missing == 2 ? null! : ThemeCatalog.Find(null), missing == 3 ? null! : new ReadingAppearance(), 1));
+   }
+
+
+
+   /// <summary>Native default/limited print layouts release the reader scroll host and avoid applying inner padding a second time.</summary>
+   [Fact]
+   public void PrintStyles_OriginalContainers_ExpandAndApplyPaddingOnce()
+   {
+      ReaderTheme theme = ThemeCatalog.Find(null);
+      string full = PrintStyles.Build(new PrintOptions(PaddingPixels: 16), theme, ThemeCatalog.BuiltIn, 1);
+      string limited = PrintStyles.Build(new PrintOptions(FullPage: false, PaddingPixels: 16), theme, ThemeCatalog.BuiltIn, 1);
+      Assert.Contains("html,body,#content{height:auto!important;overflow:visible!important;display:block!important;}", full, StringComparison.Ordinal);
+      Assert.Contains("#content-inner{padding:0!important;}", full, StringComparison.Ordinal);
+      Assert.Contains("body{padding:16px!important;}", full, StringComparison.Ordinal);
+      Assert.Contains("#content-inner{width:auto!important;max-width:none!important;margin:0!important;}", full, StringComparison.Ordinal);
+      Assert.DoesNotContain("#content-inner{max-width:none!important", limited, StringComparison.Ordinal);
+      Assert.Contains("#content-inner{max-width:900px;margin:0 auto;}", limited, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Only fixed passive reference classes or a bounded code language survive, without IDs, styles, event handlers or host attributes.</summary>
+   [Fact]
+   public void Render_StylingClasses_AllowOnlyPassiveReferenceNames()
+   {
+      const string Markdown = "<div class='frontmatter unknown fm-key fm-value frontmatter' id='content' style='display:none' data-mv-body='0' onclick='evil()'>Metadata</div>\n\n<code class='language-csharp language-c++ language-c# language-a_b language- language-é arbitrary'>Code</code>\n\n<p class='unknown'>Literal</p>\n\n<ul class='task-list'><li class='task-list-item'><input type='checkbox'></li></ul>";
+      using IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(Markdown));
+      Assert.Equal("frontmatter fm-key fm-value", document.QuerySelector("div")!.GetAttribute("class"));
+      Assert.Equal("language-csharp language-c++ language-c# language-a_b", document.QuerySelector("code")!.GetAttribute("class"));
+      Assert.Null(document.QuerySelector("p")!.GetAttribute("class"));
+      Assert.NotNull(document.QuerySelector(".task-list .task-list-item input[disabled]"));
+      Assert.Empty(document.QuerySelectorAll("[id], [style], [onclick], [data-mv-body]"));
+      using IHtmlDocument oversized = new HtmlParser().ParseDocument(new MarkdownRenderer().Render("<code class='language-" + new string('x', 81) + "'>Code</code>"));
+      Assert.Null(oversized.QuerySelector("code")!.GetAttribute("class"));
+   }
+
+
+
+   /// <summary>Parses CSS using the dependency already present for sanitization; modern variables and WebView vendor pseudo-elements remain inspectable.</summary>
+   private static ICssStyleRule[] Rules(string css) => new CssParser(new CssParserOptions { IsIncludingUnknownDeclarations = true, IsToleratingInvalidSelectors = true }).ParseStyleSheet(css).Rules.OfType<ICssStyleRule>().ToArray();
+
+
+
+   /// <summary>Each declaration cascades independently; later rules that omit a property do not erase its earlier value.</summary>
+   private static string Property(IEnumerable<ICssStyleRule> rules, string selector, string name) => rules.Reverse().Where(rule => string.Equals(rule.SelectorText, selector, StringComparison.Ordinal)).Select(rule => rule.Style.GetPropertyValue(name)).First(value => value.Length > 0);
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/DocumentViewportTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/DocumentViewportTests.cs
new file mode 100644
index 0000000..4d3bf59
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/DocumentViewportTests.cs
@@ -0,0 +1,57 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves browser data cannot inject script or invalid offsets during reload.</summary>
+public sealed class DocumentViewportTests
+{
+   /// <summary>Valid fractions retain their precision; out-of-range positions clamp to the document limits.</summary>
+   [Theory]
+   [InlineData("[0.125,0.75]", 0.125, 0.75)]
+   [InlineData("[-4, -0.5]", 0, 0)]
+   [InlineData("[0,2.5e3]", 0, 1)]
+   public void FromBrowserResult_NumericOffsets_PreservesValidPosition(string json, double x, double y)
+   {
+      var viewport = DocumentViewport.FromBrowserResult(json);
+      Assert.Equal(x, viewport.HorizontalFraction);
+      Assert.Equal(y, viewport.VerticalFraction);
+   }
+
+
+
+   /// <summary>Malformed, wrong-shaped, nonnumeric or nonfinite results never become JavaScript arguments.</summary>
+   [Theory]
+   [InlineData(null)]
+   [InlineData("")]
+   [InlineData("null")]
+   [InlineData("{}")]
+   [InlineData("[]")]
+   [InlineData("[1]")]
+   [InlineData("[1,2,3]")]
+   [InlineData("[\"0); alert(1);//\",2]")]
+   [InlineData("[1,\"2\"]")]
+   [InlineData("[true,2]")]
+   [InlineData("[1,{}]")]
+   [InlineData("[1e400,2]")]
+   [InlineData("[1,1e400]")]
+   [InlineData("undefined")]
+   public void FromBrowserResult_InvalidResult_ReturnsTop(string? json)
+   {
+      Assert.Equal(default, DocumentViewport.FromBrowserResult(json));
+   }
+
+
+
+   /// <summary>Oversized browser results are refused before JSON parsing.</summary>
+   [Fact]
+   public void FromBrowserResult_OverLengthLimit_ReturnsTop()
+   {
+      Assert.Equal(default, DocumentViewport.FromBrowserResult(new string(' ', 129)));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/EditorConfigurationTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/EditorConfigurationTests.cs
new file mode 100644
index 0000000..0319464
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/EditorConfigurationTests.cs
@@ -0,0 +1,121 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Editors;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves bounded named editor settings, stable migration/order and one literal parent-folder argument.</summary>
+public sealed class EditorConfigurationTests
+{
+   /// <summary>Corrupt labels, paths and identities cannot become a native launch choice.</summary>
+   [Theory]
+   [InlineData("")]
+   [InlineData("   ")]
+   [InlineData("bad\nname")]
+   public void Sanitize_InvalidNames_RejectsChoice(string name)
+   {
+      var editor = new EditorConfiguration(Guid.NewGuid(), name, @"C:\Editor\editor.exe");
+      Assert.False(EditorConfiguration.IsValid(editor));
+      Assert.Empty(EditorConfiguration.Sanitize([editor]));
+   }
+
+
+
+   /// <summary>Valid order and folder modes survive sanitation; duplicate/empty identities and invalid choices are discarded.</summary>
+   [Fact]
+   public void Sanitize_StableIdentityAndOrder_PreservesValidChoices()
+   {
+      var first = new EditorConfiguration(Guid.NewGuid(), " File editor ", @"C:\Editor\editor.exe");
+      var second = new EditorConfiguration(Guid.NewGuid(), "Folder editor", @"C:\Editor\other.exe", true);
+      EditorConfiguration[] choices = EditorConfiguration.Sanitize([null, first, first, second,
+         first with { Id = Guid.Empty }, first with { Id = Guid.NewGuid(), Name = new string('x', 81) },
+         first with { Id = Guid.NewGuid(), Executable = "editor.cmd" }, first with { Id = Guid.NewGuid(), Name = null! }]);
+      Assert.Equal(new[] { first.Id, second.Id }, choices.Select(editor => editor.Id));
+      Assert.Equal("File editor", choices[0].Name);
+      Assert.True(choices[1].OpensFolder);
+      Assert.Empty(EditorConfiguration.Sanitize(null));
+      Assert.False(EditorConfiguration.IsValid(null));
+   }
+
+
+
+   /// <summary>Large saved lists are bounded before being exposed as native commands.</summary>
+   [Fact]
+   public void Sanitize_TooManyEditors_BoundsList()
+   {
+      EditorConfiguration[] choices = EditorConfiguration.Sanitize(Enumerable.Range(0, 40).Select(index => new EditorConfiguration(Guid.NewGuid(), "Editor " + index, @"C:\Editor\editor.exe")));
+      Assert.Equal(EditorConfiguration.MaximumEditors, choices.Length);
+      Assert.Equal("Editor 31", choices[^1].Name);
+   }
+
+
+
+   /// <summary>Existing single-path settings migrate once; repeated sanitation preserves IDs and deletion does not resurrect a choice.</summary>
+   [Fact]
+   public void Sanitize_LegacyPath_MigratesStableChoiceAndAllowsRemoval()
+   {
+      var settings = new AppSettings { ExternalEditor = @"C:\Editor\editor.exe", ConfiguredEditors = null! };
+      settings.Sanitize();
+      EditorConfiguration choice = Assert.Single(settings.ConfiguredEditors);
+      Assert.NotEqual(Guid.Empty, choice.Id);
+      Assert.Equal("Editor", choice.Name);
+      Assert.False(choice.OpensFolder);
+      Assert.Equal(settings.ExternalEditor, choice.Executable);
+      settings.Sanitize();
+      Assert.Equal(choice.Id, Assert.Single(settings.ConfiguredEditors).Id);
+      settings.ConfiguredEditors = [];
+      settings.ExternalEditor = "";
+      settings.Sanitize();
+      Assert.Empty(settings.ConfiguredEditors);
+      Assert.Empty(settings.ExternalEditor);
+   }
+
+
+
+   /// <summary>Atomic AppKit persistence retains named IDs, order and folder mode using the trimmed serializer.</summary>
+   [Fact]
+   public void SaveAndLoad_EditorList_PreservesIdentityOrderAndMode()
+   {
+      using var temporary = new TempDirectory();
+      var store = new KofTwentyTwo.AppKit.Settings.SettingsStore<AppSettings>(temporary.File("settings.json"), AppSettingsContext.Default.AppSettings);
+      var first = new EditorConfiguration(Guid.NewGuid(), "Folder editor", @"C:\Editor\folder.exe", true);
+      var second = new EditorConfiguration(Guid.NewGuid(), "File editor", @"C:\Editor\file.exe");
+      Assert.True(store.Save(new AppSettings { ConfiguredEditors = [first, second], ExternalEditor = @"C:\Other\old.exe" }));
+      AppSettings loaded = store.Load();
+      Assert.Equal(new[] { first, second }, loaded.ConfiguredEditors);
+      Assert.Equal(first.Executable, loaded.ExternalEditor);
+      loaded.ConfiguredEditors = [];
+      loaded.ExternalEditor = "";
+      Assert.True(store.Save(loaded));
+      Assert.Empty(store.Load().ConfiguredEditors);
+   }
+
+
+
+   /// <summary>Folder mode supplies one literal parent directory, preserving punctuation and Unicode without shell execution.</summary>
+   [Theory]
+   [InlineData(@"C:\日本語 & $HOME\notes.md", @"C:\日本語 & $HOME")]
+   [InlineData(@"C:\notes.md", @"C:\")]
+   [InlineData(@"\\server\share\notes.md", @"\\server\share")]
+   public void Create_FolderMode_PassesOneLiteralParent(string document, string parent)
+   {
+      System.Diagnostics.ProcessStartInfo start = EditorLaunch.Create(@"C:\Editor\editor.exe", document, opensFolder: true);
+      Assert.Equal(parent, Assert.Single(start.ArgumentList));
+      Assert.Equal(parent, start.WorkingDirectory);
+      Assert.False(start.UseShellExecute);
+      Assert.Empty(start.Arguments);
+   }
+
+
+
+   /// <summary>A root directory cannot masquerade as a file when deriving its parent.</summary>
+   [Theory]
+   [InlineData(@"C:\")]
+   [InlineData(@"\\server\share\")]
+   public void Create_DirectoryRoot_RejectsDocument(string document)
+      => Assert.Throws<ArgumentException>(() => EditorLaunch.Create(@"C:\Editor\editor.exe", document, opensFolder: true));
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/EditorLaunchTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/EditorLaunchTests.cs
new file mode 100644
index 0000000..7c0ba2c
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/EditorLaunchTests.cs
@@ -0,0 +1,83 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Editors;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Proves chosen executable boundaries and literal document arguments without launching an external application.</summary>
+public sealed class EditorLaunchTests
+{
+   /// <summary>Whitespace, command punctuation and Unicode remain one process argument rather than shell syntax.</summary>
+   [Theory]
+   [InlineData(@"C:\Documents\my notes.md")]
+   [InlineData(@"C:\Documents\日本語 café.md")]
+   [InlineData(@"C:\Documents\x & calc; $HOME `whoami`.md")]
+   [InlineData(@"C:\Documents\--reuse-window.md")]
+   public void Create_LiteralDocument_PreservesSingleArgument(string document)
+   {
+      System.Diagnostics.ProcessStartInfo start = EditorLaunch.Create(@"C:\Program Files\Editor\Editor.EXE", document);
+      Assert.Equal(@"C:\Program Files\Editor\Editor.EXE", start.FileName);
+      Assert.False(start.UseShellExecute);
+      Assert.Equal(@"C:\Documents", start.WorkingDirectory);
+      Assert.Equal(document, Assert.Single(start.ArgumentList));
+      Assert.Empty(start.Arguments);
+   }
+
+
+
+   /// <summary>Relative commands, scripts, malformed saved settings and oversized paths cannot select the editor.</summary>
+   [Theory]
+   [InlineData(null)]
+   [InlineData("")]
+   [InlineData("editor.exe")]
+   [InlineData(@"C:editor.exe")]
+   [InlineData(@"C:\editor.cmd")]
+   [InlineData("C:\\editor\n.exe")]
+   public void Create_InvalidExecutable_RejectsChoice(string? executable)
+   {
+      Assert.False(EditorLaunch.IsExecutablePath(executable));
+      Assert.Throws<ArgumentException>(() => EditorLaunch.Create(executable!, @"C:\Documents\test.md"));
+      var settings = new AppSettings { ExternalEditor = executable! };
+      settings.Sanitize();
+      Assert.Empty(settings.ExternalEditor);
+   }
+
+
+
+   /// <summary>Saved paths are bounded independently of filesystem existence.</summary>
+   [Fact]
+   public void Sanitize_ExecutableLength_RepairsOversizedChoiceAndRetainsValidChoice()
+   {
+      string oversized = "C:\\" + new string('a', 32767) + ".exe";
+      Assert.False(EditorLaunch.IsExecutablePath(oversized));
+      Assert.Throws<ArgumentException>(() => EditorLaunch.Create(oversized, @"C:\Documents\test.md"));
+      var settings = new AppSettings { ExternalEditor = oversized };
+      settings.Sanitize();
+      Assert.Empty(settings.ExternalEditor);
+      settings.ExternalEditor = @"C:\Editor\editor.exe";
+      settings.Sanitize();
+      Assert.Equal(@"C:\Editor\editor.exe", settings.ExternalEditor);
+   }
+
+
+
+   /// <summary>An incomplete or corrupt document path cannot be passed to an editor.</summary>
+   [Theory]
+   [InlineData(null)]
+   [InlineData("")]
+   [InlineData("relative.md")]
+   [InlineData("C:\\Documents\\bad\nname.md")]
+   public void Create_InvalidDocument_RejectsArgument(string? document)
+      => Assert.Throws<ArgumentException>(() => EditorLaunch.Create(@"C:\Editor\editor.exe", document!));
+
+
+
+   /// <summary>Oversized document paths are rejected before process construction.</summary>
+   [Fact]
+   public void Create_OversizedDocument_RejectsArgument()
+      => Assert.Throws<ArgumentException>(() => EditorLaunch.Create(@"C:\Editor\editor.exe", "C:\\" + new string('x', 32767)));
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/Fakes.cs b/tests/MarkdownViewr.Windows.Core.Tests/Fakes.cs
index 7358ff1..a427b26 100644
--- a/tests/MarkdownViewr.Windows.Core.Tests/Fakes.cs
+++ b/tests/MarkdownViewr.Windows.Core.Tests/Fakes.cs
@@ -3,59 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
-using KofTwentyTwo.AppKit.Logging;
-
 
 namespace MarkdownViewr.Windows.Core.Tests;
 
-/// <summary>A clock fixed at one local time, in a UTC zone so local time equals the given time.</summary>
-internal sealed class FixedTimeProvider(int hour) : TimeProvider
-{
-   /// <summary>Today at the given hour.</summary>
-   public override DateTimeOffset GetUtcNow() => new(2026, 3, 15, hour, 30, 0, TimeSpan.Zero);
-
-
-
-   /// <summary>UTC, so GetLocalNow returns GetUtcNow unchanged.</summary>
-   public override TimeZoneInfo LocalTimeZone => TimeZoneInfo.Utc;
-}
-
-
-
-/// <summary>An activity log that records entries in memory.</summary>
-internal sealed class RecordingLog : IActivityLog
-{
-   /// <summary>Entries as "LEVEL message".</summary>
-   public List<string> Entries { get; } = [];
-
-
-
-   /// <inheritdoc/>
-   public string LogDirectory => "";
-
-
-
-   /// <inheritdoc/>
-   public string CurrentLogFilePath => "";
-
-
-
-   /// <inheritdoc/>
-   public void Info(string message) => Entries.Add("INFO " + message);
-
-
-
-   /// <inheritdoc/>
-   public void Warning(string message) => Entries.Add("WARN " + message);
-
-
-
-   /// <inheritdoc/>
-   public void Error(string message, Exception? exception = null) => Entries.Add("ERROR " + message);
-}
-
-
-
 /// <summary>A per-test temporary directory, deleted on dispose.</summary>
 internal sealed class TempDirectory : IDisposable
 {
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/GreetingTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/GreetingTests.cs
deleted file mode 100644
index a95e93c..0000000
--- a/tests/MarkdownViewr.Windows.Core.Tests/GreetingTests.cs
+++ /dev/null
@@ -1,148 +0,0 @@
-/*
- * Copyright (c) 2026 James Maes
- * SPDX-License-Identifier: MIT
- */
-
-using KofTwentyTwo.AppKit.Settings;
-
-
-namespace MarkdownViewr.Windows.Core.Tests;
-
-/// <summary>Tests of the example greeting feature's logic.</summary>
-public class GreetingServiceTests
-{
-   /// <summary>Greet: the part of the day follows the local hour, including the boundaries.</summary>
-   [Theory]
-   [InlineData(0, "Good morning, Ada!")]
-   [InlineData(11, "Good morning, Ada!")]
-   [InlineData(12, "Good afternoon, Ada!")]
-   [InlineData(17, "Good afternoon, Ada!")]
-   [InlineData(18, "Good evening, Ada!")]
-   [InlineData(23, "Good evening, Ada!")]
-   public void Greet_FollowsTheTimeOfDay(int hour, string expected)
-   {
-      Assert.Equal(expected, new GreetingService(new FixedTimeProvider(hour)).Greet("Ada"));
-   }
-
-
-
-   /// <summary>Greet: a blank or missing name greets "there"; surrounding spaces are trimmed.</summary>
-   [Theory]
-   [InlineData(null, "Good morning, there!")]
-   [InlineData("   ", "Good morning, there!")]
-   [InlineData("  Ada  ", "Good morning, Ada!")]
-   public void Greet_HandlesBlankAndPaddedNames(string? name, string expected)
-   {
-      Assert.Equal(expected, new GreetingService(new FixedTimeProvider(9)).Greet(name));
-   }
-
-
-
-   /// <summary>Greet: a name longer than the limit is rejected.</summary>
-   [Fact]
-   public void Greet_RejectsOverlongNames()
-   {
-      ArgumentException ex = Assert.Throws<ArgumentException>(() => new GreetingService().Greet(new string('x', GreetingService.MaxNameLength + 1)));
-      Assert.Equal("name", ex.ParamName);
-   }
-}
-
-
-
-/// <summary>Tests of the greeting screen's view model.</summary>
-public sealed class GreetingViewModelTests : IDisposable
-{
-   private readonly TempDirectory _temp = new();
-   private readonly RecordingLog _log = new();
-
-
-
-   /// <summary>Deletes the temporary settings folder.</summary>
-   public void Dispose() => _temp.Dispose();
-
-
-
-   /// <summary>A view model over a settings store in the temporary folder.</summary>
-   private GreetingViewModel Create(AppSettings settings, string? settingsPath = null)
-   {
-      var store = new SettingsStore<AppSettings>(settingsPath ?? _temp.File("settings.json"), AppSettingsContext.Default.AppSettings);
-      return new GreetingViewModel(new GreetingService(new FixedTimeProvider(20)), settings, store, _log);
-   }
-
-
-
-   /// <summary>Construction: starts from the name saved last time.</summary>
-   [Fact]
-   public void StartsWithTheSavedName()
-   {
-      Assert.Equal("Grace", Create(new AppSettings { LastName = "Grace" }).Name);
-   }
-
-
-
-   /// <summary>Greet: shows the greeting, saves the trimmed name, and logs it.</summary>
-   [Fact]
-   public void Greet_ShowsSavesAndLogs()
-   {
-      var settings = new AppSettings();
-      GreetingViewModel model = Create(settings);
-      var changed = new List<string?>();
-      model.PropertyChanged += (_, e) => changed.Add(e.PropertyName);
-
-      model.Name = " Ada ";
-      model.GreetCommand.Execute(null);
-
-      Assert.Equal("Good evening, Ada!", model.Message);
-      Assert.Equal("Ada", settings.LastName);
-      Assert.Contains(changed, name => string.Equals(name, nameof(GreetingViewModel.Message), StringComparison.Ordinal));
-      Assert.Equal("Ada", new SettingsStore<AppSettings>(_temp.File("settings.json"), AppSettingsContext.Default.AppSettings).Load().LastName);
-      Assert.Equal(["INFO Greeted the user."], _log.Entries);
-   }
-
-
-
-   /// <summary>Greet: an overlong name shows the reason, warns, and saves nothing.</summary>
-   [Fact]
-   public void Greet_RejectsAndWarns()
-   {
-      var settings = new AppSettings { LastName = "Kept" };
-      GreetingViewModel model = Create(settings);
-      model.Name = new string('x', GreetingService.MaxNameLength + 1);
-      model.GreetCommand.Execute(null);
-
-      Assert.StartsWith("A name can be at most", model.Message, StringComparison.Ordinal);
-      Assert.Equal("Kept", settings.LastName);
-      Assert.StartsWith("WARN Greeting rejected", Assert.Single(_log.Entries), StringComparison.Ordinal);
-   }
-
-
-
-   /// <summary>Greet: a failed settings save is logged, and the greeting still shows.</summary>
-   [Fact]
-   public void Greet_LogsAFailedSave()
-   {
-      string notADirectory = _temp.File("file");
-      File.WriteAllText(notADirectory, "");
-      GreetingViewModel model = Create(new AppSettings(), Path.Combine(notADirectory, "settings.json"));
-      model.Name = "Ada";
-      model.GreetCommand.Execute(null);
-
-      Assert.Equal("Good evening, Ada!", model.Message);
-      Assert.Equal(["WARN Could not save the last greeted name.", "INFO Greeted the user."], _log.Entries);
-   }
-
-
-
-   /// <summary>Construction: every dependency is required.</summary>
-   [Fact]
-   public void Constructor_ValidatesArguments()
-   {
-      var store = new SettingsStore<AppSettings>(_temp.File("settings.json"), AppSettingsContext.Default.AppSettings);
-      var service = new GreetingService();
-      var settings = new AppSettings();
-      Assert.Throws<ArgumentNullException>(() => new GreetingViewModel(null!, settings, store, _log));
-      Assert.Throws<ArgumentNullException>(() => new GreetingViewModel(service, null!, store, _log));
-      Assert.Throws<ArgumentNullException>(() => new GreetingViewModel(service, settings, null!, _log));
-      Assert.Throws<ArgumentNullException>(() => new GreetingViewModel(service, settings, store, null!));
-   }
-}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/MarkdownExtensionsTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/MarkdownExtensionsTests.cs
new file mode 100644
index 0000000..bf97921
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/MarkdownExtensionsTests.cs
@@ -0,0 +1,337 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+using AngleSharp.Html.Parser;
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Verifies independent reference syntax, passive content, original offsets and saved window preferences.</summary>
+public sealed class MarkdownExtensionsTests
+{
+   /// <summary>Every preference combination preserves GFM and renders only the explicitly enabled extension tags.</summary>
+   [Theory]
+   [InlineData(0)]
+   [InlineData(1)]
+   [InlineData(2)]
+   [InlineData(3)]
+   [InlineData(4)]
+   [InlineData(5)]
+   [InlineData(6)]
+   [InlineData(7)]
+   [InlineData(8)]
+   [InlineData(9)]
+   [InlineData(10)]
+   [InlineData(11)]
+   [InlineData(12)]
+   [InlineData(13)]
+   [InlineData(14)]
+   [InlineData(15)]
+   public void Render_IndependentOptions_RetainsOnlyEnabledSyntax(int mask)
+   {
+      var options = new MarkdownExtensions((mask & 1) != 0, (mask & 2) != 0, (mask & 4) != 0, (mask & 8) != 0);
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer(options).Render("==Highlighted text== x^Power^ H~2~O ++Underlined text++ ~~Removed text~~"));
+      foreach((bool enabled, string tag, string value, string literal) in new[]
+      {
+         (options.Highlight, "mark", "Highlighted text", "==Highlighted text=="),
+         (options.Superscript, "sup", "Power", "^Power^"),
+         (options.Subscript, "sub", "2", "~2~"),
+         (options.Underline, "ins", "Underlined text", "++Underlined text++"),
+      })
+      {
+         if(enabled)
+         {
+            Assert.Equal(value, Assert.Single(document.QuerySelectorAll(tag)).TextContent);
+            Assert.DoesNotContain(literal, document.Body!.TextContent, StringComparison.Ordinal);
+         }
+         else
+         {
+            Assert.Empty(document.QuerySelectorAll(tag));
+            Assert.Contains(literal, document.Body!.TextContent, StringComparison.Ordinal);
+         }
+      }
+      Assert.Equal("Removed text", Assert.Single(document.QuerySelectorAll("del")).TextContent);
+   }
+
+
+
+   /// <summary>Raw block text follows the reference options while attributes and authored code remain unchanged.</summary>
+   [Theory]
+   [InlineData(0)]
+   [InlineData(1)]
+   [InlineData(2)]
+   [InlineData(3)]
+   [InlineData(4)]
+   [InlineData(5)]
+   [InlineData(6)]
+   [InlineData(7)]
+   [InlineData(8)]
+   [InlineData(9)]
+   [InlineData(10)]
+   [InlineData(11)]
+   [InlineData(12)]
+   [InlineData(13)]
+   [InlineData(14)]
+   [InlineData(15)]
+   public void Render_RawHtmlBlockOptions_PreservesAttributesAndCode(int mask)
+   {
+      const string Syntax = "==Highlight== ^Power^ H~2~O ++Underline++";
+      const string Markdown = "<div title='==attribute== ^attribute^ ~attribute~ ++attribute++'>\n" + Syntax + "\n<code>" + Syntax + "</code>\n<pre>" + Syntax + "</pre>\n</div>";
+      var options = new MarkdownExtensions((mask & 1) != 0, (mask & 2) != 0, (mask & 4) != 0, (mask & 8) != 0);
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer(options).Render(Markdown));
+      Assert.Equal("==attribute== ^attribute^ ~attribute~ ++attribute++", document.QuerySelector("div")!.GetAttribute("title"));
+      Assert.Equal(Syntax, document.QuerySelector("code")!.TextContent);
+      Assert.Equal(Syntax, document.QuerySelector("pre")!.TextContent);
+      Assert.Equal(options.Highlight ? 1 : 0, document.QuerySelectorAll("mark").Length);
+      Assert.Equal(options.Superscript ? 1 : 0, document.QuerySelectorAll("sup").Length);
+      Assert.Equal(options.Subscript ? 1 : 0, document.QuerySelectorAll("sub").Length);
+      Assert.Equal(options.Underline ? 1 : 0, document.QuerySelectorAll("ins").Length);
+   }
+
+
+
+   /// <summary>Reference metadata receives post-render extensions but keeps the body-only subscript preprocessing boundary.</summary>
+   [Theory]
+   [InlineData(0)]
+   [InlineData(1)]
+   [InlineData(2)]
+   [InlineData(3)]
+   [InlineData(4)]
+   [InlineData(5)]
+   [InlineData(6)]
+   [InlineData(7)]
+   [InlineData(8)]
+   [InlineData(9)]
+   [InlineData(10)]
+   [InlineData(11)]
+   [InlineData(12)]
+   [InlineData(13)]
+   [InlineData(14)]
+   [InlineData(15)]
+   public void Render_MetadataExtensions_PreservesReferencePreprocessingBoundary(int mask)
+   {
+      var options = new MarkdownExtensions((mask & 1) != 0, (mask & 2) != 0, (mask & 4) != 0, (mask & 8) != 0);
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer(options).Render("---\ntitle: ==Highlight== ^Power^ H~2~O ++Underline++\n---\n\nBody", FrontmatterMode.Metadata));
+      Assert.Equal(options.Highlight ? 1 : 0, document.QuerySelectorAll("mark").Length);
+      Assert.Equal(options.Superscript ? 1 : 0, document.QuerySelectorAll("sup").Length);
+      Assert.Equal(options.Underline ? 1 : 0, document.QuerySelectorAll("ins").Length);
+      Assert.Empty(document.QuerySelectorAll("sub"));
+      Assert.Contains("H~2~O", document.QuerySelector(".fm-value")!.TextContent, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Inline, fenced and indented code remain literal even though all four extensions are enabled.</summary>
+   [Fact]
+   public void Render_CodeAndEscapes_PreservesLiteralSyntax()
+   {
+      const string Syntax = "==Highlight== ^Power^ ~Sub~ ++Underline++";
+      string markdown = "`" + Syntax + "`\n\n```md\n" + Syntax + "\n```\n\n    " + Syntax + "\n\n\\==escaped== \\^escaped^ \\~escaped~ \\+\\+escaped++";
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(markdown));
+      Assert.Empty(document.QuerySelectorAll("mark,sup,sub,ins"));
+      Assert.Equal(3, document.QuerySelectorAll("code").Length);
+      Assert.All(document.QuerySelectorAll("code"), code => Assert.Equal(Syntax, code.TextContent.TrimEnd('\n')));
+      Assert.Contains("==escaped== ^escaped^ ~escaped~ ++escaped++", document.Body!.TextContent, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Authored HTML code and delimiters spanning it remain literal, like protected inline/fenced code.</summary>
+   [Theory]
+   [InlineData("Before <code>==Highlight== x^Power^ H~2~O ++Underline++</code> after.")]
+   [InlineData("Before <CODE class='language-md'>==Highlight== x^Power^ H~2~O ++Underline++</CODE> after.")]
+   [InlineData("==<code>Highlight</code>==")]
+   [InlineData("++<code>Underline</code>++")]
+   public void Render_AuthoredCode_PreservesLiteralExtensionBoundaries(string markdown)
+   {
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(markdown));
+      Assert.Empty(document.QuerySelectorAll("mark,sup,sub,ins"));
+      Assert.NotNull(document.QuerySelector("code"));
+      using AngleSharp.Html.Dom.IHtmlDocument literal = new HtmlParser().ParseDocument(markdown);
+      Assert.Equal(literal.Body!.TextContent, document.Body!.TextContent.TrimEnd('\n'));
+   }
+
+
+
+   /// <summary>Actual closing tags across HTML blocks restore formatting without granting code-like tag names protection.</summary>
+   [Theory]
+   [InlineData("Before <code>==Literal==\n\n==Protected==\n</code>\n\n==Outside==")]
+   [InlineData("<pre>==Literal==</pre>\n\n==Outside==")]
+   [InlineData("Before </code> ==Outside==")]
+   [InlineData("Before <code-other>==Ignored==</code-other> ==Outside==")]
+   [InlineData("Before <a title='<code>'>==Outside==</a>")]
+   [InlineData("Before <!--<code>-->==Outside==")]
+   public void Render_AuthoredCodeClosingAndLookalikes_RestoresOutsideExtensions(string markdown)
+   {
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(markdown));
+      Assert.Equal("Outside", Assert.Single(document.QuerySelectorAll("mark")).TextContent);
+      Assert.Empty(document.QuerySelectorAll("code mark,pre mark"));
+   }
+
+
+
+   /// <summary>Reference superscripts/subscripts contain no whitespace; ordinary caret/tilde prose stays literal.</summary>
+   [Fact]
+   public void Render_WhitespaceSuperscriptAndSubscript_RemainsLiteral()
+   {
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render("^two words^ ~two words~ ^line\nbreak^ ~line\nbreak~"));
+      Assert.Empty(document.QuerySelectorAll("sup,sub"));
+      Assert.Contains("^two words^ ~two words~", document.Body!.TextContent, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Delimiters outside a code span or across a newline stay literal without changing the protected code.</summary>
+   [Theory]
+   [InlineData("==`code`==")]
+   [InlineData("++`code`++")]
+   [InlineData("^`code`^")]
+   [InlineData("~`code`~")]
+   [InlineData("==line\nbreak==")]
+   [InlineData("++line\nbreak++")]
+   public void Render_CodeOrNewlineBoundary_RetainsDelimiters(string markdown)
+   {
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(markdown));
+      Assert.Empty(document.QuerySelectorAll("mark,sup,sub,ins"));
+      Assert.Equal(markdown.Replace("`", "", StringComparison.Ordinal), document.Body!.TextContent.TrimEnd('\n'));
+   }
+
+
+
+   /// <summary>Formatting composes with emphasis/links without changing destinations, attributes or passive code.</summary>
+   [Fact]
+   public void Render_NestedFormattingAndAttributes_PreservesPassiveBoundary()
+   {
+      const string Markdown = "==**Highlighted strong**== ++*Underlined emphasis*++ [==Label==](https://example.com/==literal==)\n\n<mark id='host' style='color:red' onclick='evil()'>Raw mark</mark><ins cite='javascript:evil()' onmouseover='evil()'>Raw insert</ins>";
+      using AngleSharp.Html.Dom.IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(Markdown));
+      Assert.Equal("Highlighted strong", document.QuerySelector("mark strong")!.TextContent);
+      Assert.Equal("Underlined emphasis", document.QuerySelector("ins em")!.TextContent);
+      Assert.Equal("Label", document.QuerySelector("a mark")!.TextContent);
+      Assert.Equal("https://example.com/==literal==", document.QuerySelector("a")!.GetAttribute("href"));
+      Assert.All(document.QuerySelectorAll("mark,ins"), element => Assert.Empty(element.Attributes));
+   }
+
+
+
+   /// <summary>Extensions change heading presentation while all source ranges still point at the original UTF-16 snapshot.</summary>
+   [Theory]
+   [InlineData(FrontmatterMode.Hide)]
+   [InlineData(FrontmatterMode.Metadata)]
+   [InlineData(FrontmatterMode.Markdown)]
+   public void Create_ExtensionHeadings_PreservesOriginalOffsets(FrontmatterMode mode)
+   {
+      const string Source = "---\r\n# ==Metadata==\r\n---\r\n\r\n# ==Highlighted== H~2~O\r\n\r\n++Underlined++ ^Power^\r\n---\r\n";
+      var outline = new DocumentOutline(Source, mode);
+      Assert.Equal(mode == FrontmatterMode.Markdown ? 3 : 2, outline.Headings.Count);
+      Assert.Equal("Highlighted H2O", outline.Headings[^2].Title);
+      Assert.Equal("Underlined Power", outline.Headings[^1].Title);
+      foreach(DocumentSourceHeading heading in outline.SourceHeadings)
+      {
+         Assert.Contains(heading.Index == outline.Headings.Count - 1 ? "++Underlined++ ^Power^" : "==", Source[heading.Start..heading.End], StringComparison.Ordinal);
+      }
+      Assert.DoesNotContain("data-mv-source-", outline.Html, StringComparison.Ordinal);
+      var disabled = new DocumentOutline(Source, mode, new MarkdownExtensions(false, false, false, false));
+      Assert.Equal("==Highlighted== H~2~O", disabled.Headings[^2].Title);
+      Assert.Equal("++Underlined++ ^Power^", disabled.Headings[^1].Title);
+      Assert.Equal(outline.SourceHeadings, disabled.SourceHeadings);
+   }
+
+
+
+   /// <summary>Protecting authored heading code does not rewrite the original source identities or ranges.</summary>
+   [Fact]
+   public void Create_AuthoredCodeHeading_PreservesOriginalOffsets()
+   {
+      const string Source = "# Root\n\nprefix <h2>Child <code>==Literal== ^Power^</code> ==Marked==</h2>\n\nBody.";
+      var outline = new DocumentOutline(Source);
+      Assert.Equal("Child ==Literal== ^Power^ Marked", outline.Headings[1].Title);
+      DocumentSourceHeading heading = outline.SourceHeadings[1];
+      Assert.Equal("<h2>Child <code>==Literal== ^Power^</code> ==Marked==</h2>", Source[heading.Start..heading.End]);
+      var disabled = new DocumentOutline(Source, extensions: new MarkdownExtensions(false, false, false, false));
+      Assert.Equal("Child ==Literal== ^Power^ ==Marked==", disabled.Headings[1].Title);
+      Assert.Equal(outline.SourceHeadings, disabled.SourceHeadings);
+   }
+
+
+
+   /// <summary>Formatting raw headings changes visible labels while preserving exact CRLF/Unicode source spans and code text.</summary>
+   [Fact]
+   public void Create_RawBlockExtensionHeading_PreservesOriginalOffsetsAndEntities()
+   {
+      const string Source = "# Root\r\n\r\n<h2 title='==attribute=='>==Raw &amp; café 😀== <code>++Literal++</code></h2>\r\n\r\nBody.";
+      var outline = new DocumentOutline(Source);
+      Assert.Equal("Raw & café 😀 ++Literal++", outline.Headings[1].Title);
+      DocumentSourceHeading heading = outline.SourceHeadings[1];
+      Assert.Equal("<h2 title='==attribute=='>==Raw &amp; café 😀== <code>++Literal++</code></h2>", Source[heading.Start..heading.End]);
+      var disabled = new DocumentOutline(Source, extensions: new MarkdownExtensions(false, false, false, false));
+      Assert.Equal("==Raw & café 😀== ++Literal++", disabled.Headings[1].Title);
+      Assert.Equal(outline.SourceHeadings, disabled.SourceHeadings);
+   }
+
+
+
+   /// <summary>Old JSON loads all four reference defaults; false choices survive source-generated persistence.</summary>
+   [Fact]
+   public void Copy_DefaultAndDisabledOptions_PreservesPreferences()
+   {
+      var settings = new AppSettings();
+      Assert.Equal(new MarkdownExtensions(), SettingsChanges.Copy(settings).MarkdownExtensions);
+      settings.RenderHighlight = false;
+      settings.RenderSuperscript = false;
+      settings.RenderSubscript = false;
+      settings.RenderUnderline = false;
+      Assert.Equal(new MarkdownExtensions(false, false, false, false), SettingsChanges.Copy(settings).MarkdownExtensions);
+   }
+
+
+
+   /// <summary>Existing settings omit these new fields; deserialization retains all four defaults while explicit false remains false.</summary>
+   [Fact]
+   public void Deserialize_OldAndSavedSettings_RetainsReferenceDefaults()
+   {
+      AppSettings original = JsonSerializer.Deserialize("{ \"ShowSplashScreen\": false }", AppSettingsContext.Default.AppSettings)!;
+      Assert.Equal(new MarkdownExtensions(), original.MarkdownExtensions);
+      original.RenderHighlight = false;
+      original.RenderSuperscript = false;
+      original.RenderSubscript = false;
+      original.RenderUnderline = false;
+      string json = JsonSerializer.Serialize(original, AppSettingsContext.Default.AppSettings);
+      Assert.DoesNotContain("MarkdownExtensions", json, StringComparison.Ordinal);
+      Assert.Equal(original.MarkdownExtensions, JsonSerializer.Deserialize(json, AppSettingsContext.Default.AppSettings)!.MarkdownExtensions);
+   }
+
+
+
+   /// <summary>Marked/inserted content uses the validated selected palette and underline style, including print theme generation.</summary>
+   [Fact]
+   public void GetStyles_ExtensionFormatting_UsesThemeColors()
+   {
+      foreach(Themes.ReaderTheme theme in Themes.ThemeCatalog.BuiltIn)
+      {
+         Assert.Contains("background-color: var(--highlight-bg);", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("color: var(--highlight-text);", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("--highlight-bg:var(--highlightBackground);", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("--highlight-text:var(--highlightText);", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("ins { text-decoration: underline; }", theme.GetStyles(1.1), StringComparison.Ordinal);
+      }
+   }
+
+
+
+   /// <summary>Separate native toggles merge individually; a stale window cannot overwrite a sibling's other extension choice.</summary>
+   [Fact]
+   public void Merge_IndependentExtensionChanges_PreservesSiblingChoice()
+   {
+      var before = new AppSettings();
+      AppSettings edited = SettingsChanges.Copy(before);
+      edited.RenderHighlight = false;
+      var current = new AppSettings { RenderSuperscript = false, RenderSubscript = false, RenderUnderline = false };
+      AppSettings result = SettingsChanges.Merge(current, before, edited);
+      Assert.Equal(new MarkdownExtensions(false, false, false, false), result.MarkdownExtensions);
+      Assert.True(current.RenderHighlight);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/MarkdownRendererTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/MarkdownRendererTests.cs
new file mode 100644
index 0000000..47f03b5
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/MarkdownRendererTests.cs
@@ -0,0 +1,140 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using AngleSharp.Dom;
+using AngleSharp.Html.Dom;
+using AngleSharp.Html.Parser;
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Verifies useful document output and hostile-markup boundaries before browser integration.</summary>
+public sealed class MarkdownRendererTests
+{
+   /// <summary>GFM content retains headings, tables, task markers, strikethrough and fenced code.</summary>
+   [Fact]
+   public void Render_GfmDocument_PreservesRequiredFormatting()
+   {
+      const string Markdown = "# Heading\n\n| Name | Value |\n| --- | --- |\n| A | B |\n\n- [x] Done\n- [ ] Pending\n\n~~Old~~\n\n```csharp\nvar x = 1;\n```\n\nhttps://example.com\n";
+      IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(Markdown));
+      Assert.Equal("Heading", document.QuerySelector("h1")!.TextContent);
+      Assert.Equal("B", document.QuerySelectorAll("td")[1].TextContent);
+      Assert.Equal("Old", document.QuerySelector("del")!.TextContent);
+      Assert.Contains("var x = 1;", document.QuerySelector("pre code")!.TextContent, StringComparison.Ordinal);
+      Assert.Equal("https://example.com", document.QuerySelector("a")!.GetAttribute("href"));
+      IElement[] inputs = document.QuerySelectorAll("input").ToArray();
+      Assert.Equal(2, inputs.Length);
+      Assert.All(inputs, input => Assert.True(Assert.IsAssignableFrom<IHtmlInputElement>(input).IsDisabled));
+      Assert.True(Assert.IsAssignableFrom<IHtmlInputElement>(inputs[0]).IsChecked);
+      Assert.False(Assert.IsAssignableFrom<IHtmlInputElement>(inputs[1]).IsChecked);
+   }
+
+
+
+   /// <summary>Useful authored HTML and relative resources survive without active styling or identity attributes.</summary>
+   [Fact]
+   public void Render_SafeHtml_PreservesContentAndRelativeResources()
+   {
+      const string Markdown = "<details><summary>More</summary><p id='native-host' class='shell' style='color:red'>Content</p></details>\n\n![Image](images/example.png)\n\n[Section](#heading)";
+      IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(Markdown));
+      Assert.Equal("More", document.QuerySelector("summary")!.TextContent);
+      IElement paragraph = document.QuerySelector("details p")!;
+      Assert.Equal("Content", paragraph.TextContent);
+      Assert.Empty(paragraph.Attributes);
+      Assert.Equal("images/example.png", document.QuerySelector("img")!.GetAttribute("src"));
+      Assert.Equal("#heading", document.QuerySelector("a")!.GetAttribute("href"));
+   }
+
+
+
+   /// <summary>Malformed and active markup cannot introduce executable nodes or host-facing attributes.</summary>
+   [Theory]
+   [InlineData("<script>window.chrome.webview.postMessage('run');</script><p onclick='evil()'>Safe</p>")]
+   [InlineData("<svg><script>alert(1)</script><a xlink:href='javascript:evil()'>Bad</a></svg>")]
+   [InlineData("<iframe srcdoc='<script>evil()</script>'></iframe><object data='file:///C:/private'></object>")]
+   [InlineData("<form action='https://example.com'><button>Send</button><input type='password' oninput='evil()'></form>")]
+   [InlineData("<meta http-equiv='refresh' content='0;url=file:///C:/private'><base href='file:///C:/private'>")]
+   [InlineData("<style>@import url(https://example.com);</style><img src='image.png' onerror='evil()' srcset='https://example.com 2x'>")]
+   public void Render_ActiveMarkup_RemovesExecutableElementsAndAttributes(string markdown)
+   {
+      IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(markdown));
+      Assert.Empty(document.QuerySelectorAll("script,svg,iframe,object,embed,form,button,style,base,meta[http-equiv]"));
+      foreach(IElement element in document.Body!.QuerySelectorAll("*"))
+      {
+         Assert.DoesNotContain(element.Attributes, attribute => attribute.Name.StartsWith("on", StringComparison.OrdinalIgnoreCase));
+         Assert.False(element.HasAttribute("srcdoc"));
+         Assert.False(element.HasAttribute("srcset"));
+      }
+   }
+
+
+
+   /// <summary>Unsafe URI schemes are rejected after HTML entity/control-character decoding.</summary>
+   [Theory]
+   [InlineData("<a href='javascript:alert(1)'>Click</a>")]
+   [InlineData("<a href='JaVaScRiPt:alert(1)'>Click</a>")]
+   [InlineData("<a href='java&#x09;script:alert(1)'>Click</a>")]
+   [InlineData("<a href='vbscript:evil()'>Click</a>")]
+   [InlineData("<a href='file:///C:/private'>Click</a>")]
+   [InlineData("<img src='data:image/svg+xml,%3Csvg%20onload=evil()%3E'>")]
+   public void Render_UnsafeUrls_RemovesResourceCapabilities(string markdown)
+   {
+      IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(markdown));
+      Assert.All(document.QuerySelectorAll("a,img"), element =>
+      {
+         Assert.False(element.HasAttribute("href"));
+         Assert.False(element.HasAttribute("src"));
+      });
+   }
+
+
+
+   /// <summary>Document-authored input types are normalized to passive checkbox markers.</summary>
+   [Fact]
+   public void Render_AuthoredInput_ForcesDisabledCheckbox()
+   {
+      IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render("<input type='text' checked>"));
+      IHtmlInputElement input = Assert.IsAssignableFrom<IHtmlInputElement>(document.QuerySelector("input"));
+      Assert.Equal("checkbox", input.Type);
+      Assert.True(input.IsDisabled);
+      Assert.True(input.IsChecked);
+   }
+
+
+
+   /// <summary>Missing documents fail explicitly; empty documents render as empty content.</summary>
+   [Fact]
+   public void Render_NullAndEmpty_UsesExplicitContract()
+   {
+      var renderer = new MarkdownRenderer();
+      Assert.Throws<ArgumentNullException>(() => renderer.Render(null!));
+      Assert.Equal("", renderer.Render(""));
+   }
+
+
+
+   /// <summary>The size guard rejects over-limit input before parsing it.</summary>
+   [Fact]
+   public void Render_OverLimit_RejectsBeforeParsing()
+   {
+      Assert.Throws<ArgumentException>(() => new MarkdownRenderer().Render(new string('a', MarkdownRenderer.MaximumCharacters + 1)));
+   }
+
+
+
+   /// <summary>A shared renderer handles concurrent documents without cross-document state.</summary>
+   [Fact]
+   public async Task Render_ConcurrentDocuments_DoesNotLeakState()
+   {
+      var renderer = new MarkdownRenderer();
+      Task<string>[] tasks = Enumerable.Range(0, 24).Select(index => Task.Run(() => renderer.Render($"# Document {index}"))).ToArray();
+      string[] output = await Task.WhenAll(tasks);
+      for(int index = 0; index < output.Length; index++)
+      {
+         Assert.Equal($"<h1>Document {index}</h1>\n", output[index]);
+      }
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/MarkdownViewr.Windows.Core.Tests.csproj b/tests/MarkdownViewr.Windows.Core.Tests/MarkdownViewr.Windows.Core.Tests.csproj
index 26d6d33..b3c4197 100644
--- a/tests/MarkdownViewr.Windows.Core.Tests/MarkdownViewr.Windows.Core.Tests.csproj
+++ b/tests/MarkdownViewr.Windows.Core.Tests/MarkdownViewr.Windows.Core.Tests.csproj
@@ -22,7 +22,6 @@
    <ItemGroup>
       <!-- The app's own namespaces are global usings: their sort position against other
            usings depends on the app's name, which the template replaces. -->
-      <Using Include="MarkdownViewr.Windows.Core.Greetings" />
    </ItemGroup>
 
 </Project>
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/PrintStylesTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/PrintStylesTests.cs
new file mode 100644
index 0000000..fb2ef5e
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/PrintStylesTests.cs
@@ -0,0 +1,198 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using MarkdownViewr.Windows.Core.Printing;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Locks reference print defaults, bounded saved choices and independent reading/print theme generation.</summary>
+public sealed class PrintStylesTests
+{
+   /// <summary>Default output saves ink, retains images and uses the reference's clean fonts without screen zoom.</summary>
+   [Fact]
+   public void Build_DefaultPrint_UsesCleanPaletteAndReferenceSizes()
+   {
+      var options = new PrintOptions();
+      ReaderTheme active = ThemeCatalog.Find("Catppuccin Mocha");
+      string before = active.Json;
+      string css = PrintStyles.Build(options, active, ThemeCatalog.BuiltIn, 5);
+      Assert.Contains("--background:#ffffff;", css, StringComparison.Ordinal);
+      Assert.Contains("--h1Size:28px;", css, StringComparison.Ordinal);
+      Assert.Contains("--codeFontSize:13px;", css, StringComparison.Ordinal);
+      Assert.Contains("body{padding:0px!important;}", css, StringComparison.Ordinal);
+      Assert.Contains("max-width:none!important", css, StringComparison.Ordinal);
+      Assert.Contains("color:#000000!important", css, StringComparison.Ordinal);
+      Assert.Contains("[data-mv-body][hidden]{display:block!important;}", css, StringComparison.Ordinal);
+      Assert.DoesNotContain("img{display:none", css, StringComparison.Ordinal);
+      Assert.DoesNotContain("pre,blockquote,code,details{border:", css, StringComparison.Ordinal);
+      Assert.Equal(before, active.Json);
+      Assert.Equal(new PrintOptions(), options);
+   }
+
+
+
+   /// <summary>Active/named themes use their validated colors and fonts; absent choices use the clean fallback.</summary>
+   [Theory]
+   [InlineData("Active Theme", "#1e1e2e")]
+   [InlineData("Catppuccin Mocha", "#1e1e2e")]
+   [InlineData("Missing saved theme", "#ffffff")]
+   [InlineData("Clean Printing", "#ffffff")]
+   public void Build_SelectedTheme_UsesExpectedPrintPalette(string choice, string background)
+   {
+      ReaderTheme active = ThemeCatalog.Find("Catppuccin Mocha");
+      string css = PrintStyles.Build(new PrintOptions(Theme: choice, Backgrounds: true, MatchScreenZoom: true, FullPage: false, Images: false, Borders: true, PaddingPixels: 16.5), active, ThemeCatalog.BuiltIn, 1.1);
+      Assert.Contains("--background:" + background + ";", css, StringComparison.Ordinal);
+      Assert.DoesNotContain("#content-inner{max-width:none!important", css, StringComparison.Ordinal);
+      Assert.Contains("#content-inner{max-width:900px;margin:0 auto;}", css, StringComparison.Ordinal);
+      Assert.DoesNotContain("background:#ffffff!important", css, StringComparison.Ordinal);
+      Assert.Contains("img{display:none!important;}", css, StringComparison.Ordinal);
+      Assert.Contains("pre,blockquote,code,details{border:1px solid currentColor!important;}", css, StringComparison.Ordinal);
+      Assert.Contains("body{padding:16.5px!important;}", css, StringComparison.Ordinal);
+      Assert.Contains("--h1Size:", css, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Plain HTML cannot inherit reading-theme/custom CSS and culture never produces a CSS decimal comma.</summary>
+   [Fact]
+   public void Build_PlainHtml_DoesNotUseReadingTheme()
+   {
+      CultureInfo previous = CultureInfo.CurrentCulture;
+      try
+      {
+         CultureInfo.CurrentCulture = CultureInfo.GetCultureInfo("fr-FR");
+         string css = PrintStyles.Build(new PrintOptions(Theme: "Plain HTML", PaddingPixels: 8.5), ThemeCatalog.Find(null), [], 0.3);
+         Assert.DoesNotContain("--baseFontSize", css, StringComparison.Ordinal);
+         Assert.Contains("padding:8.5px!important", css, StringComparison.Ordinal);
+      }
+      finally
+      {
+         CultureInfo.CurrentCulture = previous;
+      }
+   }
+
+
+
+   /// <summary>Matching screen zoom scales print fonts while the original reading theme and its data remain unchanged.</summary>
+   [Fact]
+   public void Build_CustomThemeAndMatchingZoom_RetainsImmutableTheme()
+   {
+      ReaderTheme original = ThemeCatalog.Find("Catppuccin Mocha");
+      var custom = ReaderTheme.Parse(original.Json.Replace("Catppuccin Mocha", "Print custom", StringComparison.Ordinal));
+      string expected = custom.GetStyles(1.1);
+      string css = PrintStyles.Build(new PrintOptions(Theme: "Print custom", MatchScreenZoom: true), original, [custom], 1.1);
+      Assert.Contains(expected, css, StringComparison.Ordinal);
+      Assert.True(css.IndexOf("#content-inner{max-width:900px;", StringComparison.Ordinal) < css.IndexOf(expected, StringComparison.Ordinal));
+      Assert.Equal(original.GetStyles(1), original.Styles);
+      Assert.Equal(ReaderTheme.Parse(custom.Json).Styles, custom.Styles);
+   }
+
+
+
+   /// <summary>Blank, control-containing and oversized theme names cannot become persisted selector/CSS inputs.</summary>
+   [Theory]
+   [InlineData(null)]
+   [InlineData("")]
+   [InlineData(" ")]
+   [InlineData("Bad\nname")]
+   public void Sanitize_InvalidThemeName_UsesCleanDefault(string? name)
+   {
+      Assert.Equal("Clean Printing", new PrintOptions(Theme: name!).Sanitize().Theme);
+      Assert.Equal("Clean Printing", new PrintOptions(Theme: new string('x', 81)).Sanitize().Theme);
+   }
+
+
+
+   /// <summary>Untrusted saved page padding stays finite and within the native UI's supported 0–96 pixel range.</summary>
+   [Theory]
+   [InlineData(double.NaN, 0)]
+   [InlineData(double.PositiveInfinity, 0)]
+   [InlineData(double.NegativeInfinity, 0)]
+   [InlineData(-1, 0)]
+   [InlineData(0, 0)]
+   [InlineData(24, 24)]
+   [InlineData(97, 96)]
+   public void Sanitize_SavedPadding_ClampsOrRepairs(double value, double expected)
+   {
+      Assert.Equal(expected, new PrintOptions(PaddingPixels: value).Sanitize().PaddingPixels);
+   }
+
+
+
+   /// <summary>Invalid host zoom values cannot enter print CSS, even for plain/unscaled printing.</summary>
+   [Theory]
+   [InlineData(double.NaN)]
+   [InlineData(double.PositiveInfinity)]
+   [InlineData(double.NegativeInfinity)]
+   [InlineData(0.29)]
+   [InlineData(5.01)]
+   public void Build_InvalidReadingZoom_RejectsValue(double value)
+   {
+      Assert.Throws<ArgumentOutOfRangeException>(() => PrintStyles.Build(new PrintOptions(Theme: "Plain HTML"), ThemeCatalog.Find(null), [], value));
+   }
+
+
+
+   /// <summary>Missing host dependencies fail directly instead of silently omitting print validation.</summary>
+   [Fact]
+   public void Build_NullInputs_RejectsMissingData()
+   {
+      Assert.Throws<ArgumentNullException>(() => PrintStyles.Build(null!, ThemeCatalog.Find(null), [], 1));
+      Assert.Throws<ArgumentNullException>(() => PrintStyles.Build(new PrintOptions(), null!, [], 1));
+      Assert.Throws<ArgumentNullException>(() => PrintStyles.Build(new PrintOptions(), ThemeCatalog.Find(null), null!, 1));
+   }
+
+
+
+   /// <summary>Ctrl+P belongs to ready reading surfaces; text entry and other modifiers retain normal native behavior.</summary>
+   [Theory]
+   [InlineData('p', true, false, false, true)]
+   [InlineData('P', true, false, false, true)]
+   [InlineData('p', false, false, false, false)]
+   [InlineData('p', true, true, false, false)]
+   [InlineData('p', true, false, true, false)]
+   public void Resolve_PrintShortcut_RespectsFocusAndModifiers(char character, bool reading, bool shift, bool alt, bool expected)
+   {
+      var keyboard = new Navigation.ReaderKeyboard();
+      Navigation.ReaderCommand command = keyboard.Resolve(new Navigation.ReaderKey(character, Control: true, Shift: shift, Alt: alt), reading, 1);
+      Assert.Equal(expected ? Navigation.ReaderCommand.Print : Navigation.ReaderCommand.None, command);
+   }
+
+
+
+   /// <summary>Older/missing nested settings retain the reference's true image/full-page defaults.</summary>
+   [Theory]
+   [InlineData("{}")]
+   [InlineData("{\"Print\":{}}")]
+   [InlineData("{\"Print\":null}")]
+   public void Deserialize_OlderPrintSettings_RetainsReferenceDefaults(string json)
+   {
+      AppSettings settings = JsonSerializer.Deserialize(json, AppSettingsContext.Default.AppSettings)!;
+      settings.Sanitize();
+      Assert.Equal(new PrintOptions(), settings.Print);
+   }
+
+
+
+   /// <summary>AppKit's generated settings JSON preserves every print choice and null input cannot block startup.</summary>
+   [Fact]
+   public void Sanitize_PrintPreferences_RoundTripsWithoutChangingReadingPreferences()
+   {
+      var settings = new AppSettings { DocumentTheme = "GitHub Light", ShowSource = true, Print = new PrintOptions("Active Theme", true, false, true, false, true, 24) };
+      string json = JsonSerializer.Serialize(settings, AppSettingsContext.Default.AppSettings);
+      AppSettings loaded = JsonSerializer.Deserialize(json, AppSettingsContext.Default.AppSettings)!;
+      loaded.Sanitize();
+      Assert.Equal(settings.Print, loaded.Print);
+      Assert.Equal("GitHub Light", loaded.DocumentTheme);
+      Assert.True(loaded.ShowSource);
+      loaded.Print = null!;
+      loaded.Sanitize();
+      Assert.Equal(new PrintOptions(), loaded.Print);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/ReaderKeyboardTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/ReaderKeyboardTests.cs
new file mode 100644
index 0000000..9391528
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/ReaderKeyboardTests.cs
@@ -0,0 +1,127 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Navigation;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Verifies all reading commands, focus/modifier guards and deterministic sequence timing.</summary>
+public sealed class ReaderKeyboardTests
+{
+   /// <summary>Single keys retain the pinned reading, find and dismissal semantics.</summary>
+   [Theory]
+   [InlineData('j', ReaderCommand.LineDown)]
+   [InlineData('k', ReaderCommand.LineUp)]
+   [InlineData('G', ReaderCommand.Bottom)]
+   [InlineData('n', ReaderCommand.NextMatch)]
+   [InlineData('N', ReaderCommand.PreviousMatch)]
+   [InlineData('/', ReaderCommand.FocusFind)]
+   [InlineData('\u001B', ReaderCommand.CloseFind)]
+   [InlineData('J', ReaderCommand.None)]
+   [InlineData('x', ReaderCommand.None)]
+   public void Resolve_SingleReadingKey_ReturnsCommand(char key, ReaderCommand expected)
+      => Assert.Equal(expected, new ReaderKeyboard().Resolve(new ReaderKey(key), readingFocused: true, 100));
+
+
+
+   /// <summary>Windows Ctrl+F owns native find, while half-page and reverse-page commands apply only to reading.</summary>
+   [Theory]
+   [InlineData('d', ReaderCommand.HalfPageDown)]
+   [InlineData('u', ReaderCommand.HalfPageUp)]
+   [InlineData('b', ReaderCommand.PageUp)]
+   [InlineData('f', ReaderCommand.FocusFind)]
+   [InlineData('F', ReaderCommand.FocusFind)]
+   [InlineData('x', ReaderCommand.None)]
+   [InlineData('D', ReaderCommand.HalfPageDown)]
+   [InlineData('U', ReaderCommand.HalfPageUp)]
+   [InlineData('B', ReaderCommand.PageUp)]
+   public void Resolve_ControlKey_PreservesNativeCommand(char key, ReaderCommand expected)
+      => Assert.Equal(expected, new ReaderKeyboard().Resolve(new ReaderKey(key, Control: true), readingFocused: true, 0));
+
+
+
+   /// <summary>Two separate matching key presses complete each prefix before the 500 ms deadline.</summary>
+   [Theory]
+   [InlineData('g', ReaderCommand.Top)]
+   [InlineData(']', ReaderCommand.NextHeading)]
+   [InlineData('[', ReaderCommand.PreviousHeading)]
+   public void Resolve_TwoKeys_CompletesBoundedSequence(char key, ReaderCommand expected)
+   {
+      var keyboard = new ReaderKeyboard();
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey(key), true, 100));
+      Assert.Equal(expected, keyboard.Resolve(new ReaderKey(key), true, 599));
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey(key), true, 600));
+   }
+
+
+
+   /// <summary>Late keys, a backward clock and repeated keydown events start a new prefix without jumping.</summary>
+   [Theory]
+   [InlineData(600L, false)]
+   [InlineData(99L, false)]
+   [InlineData(200L, true)]
+   public void Resolve_ExpiredOrRepeatedPrefix_DoesNotJump(long next, bool repeated)
+   {
+      var keyboard = new ReaderKeyboard();
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g'), true, 100));
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g', Repeat: repeated), true, next));
+      Assert.Equal(ReaderCommand.Top, keyboard.Resolve(new ReaderKey('g'), true, next + 1));
+   }
+
+
+
+   /// <summary>Different prefixes and ordinary keys replace or clear the pending sequence.</summary>
+   [Fact]
+   public void Resolve_DifferentKeyOrExplicitReset_ClearsPreviousPrefix()
+   {
+      var keyboard = new ReaderKeyboard();
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g'), true, 1));
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey(']'), true, 2));
+      Assert.Equal(ReaderCommand.NextHeading, keyboard.Resolve(new ReaderKey(']'), true, 3));
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g'), true, 4));
+      Assert.Equal(ReaderCommand.LineDown, keyboard.Resolve(new ReaderKey('j'), true, 5));
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g'), true, 6));
+      keyboard.Reset();
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g'), true, 7));
+   }
+
+
+
+   /// <summary>Text-entry focus, Alt/Windows and unrelated modified commands never become vim actions.</summary>
+   [Theory]
+   [InlineData(false, false, false)]
+   [InlineData(true, true, false)]
+   [InlineData(true, false, true)]
+   public void Resolve_NonReadingOrSystemModifier_LeavesInputAlone(bool focused, bool alt, bool windows)
+   {
+      var keyboard = new ReaderKeyboard();
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g'), true, 0));
+      Assert.Equal(ReaderCommand.None, keyboard.Resolve(new ReaderKey('g', Alt: alt, Windows: windows), focused, 1));
+      Assert.Equal(ReaderCommand.Prefix, keyboard.Resolve(new ReaderKey('g'), true, 2));
+      Assert.Equal(ReaderCommand.None, keyboard.Resolve(new ReaderKey('d', Control: true, Alt: alt, Windows: windows), false, 3));
+   }
+
+
+
+   /// <summary>Shift-modified Ctrl commands are rejected even if a keyboard layout reports a lowercase character.</summary>
+   [Theory]
+   [InlineData('d')]
+   [InlineData('u')]
+   [InlineData('b')]
+   [InlineData('f')]
+   public void Resolve_ShiftControlKey_LeavesInputAlone(char key)
+      => Assert.Equal(ReaderCommand.None, new ReaderKeyboard().Resolve(new ReaderKey(key, Control: true, Shift: true), true, 0));
+
+
+   /// <summary>Ctrl+F still works from native text controls; Ctrl+Shift+F remains available to those controls.</summary>
+   [Fact]
+   public void Resolve_TextControlFind_RequiresExactNativeModifiers()
+   {
+      var keyboard = new ReaderKeyboard();
+      Assert.Equal(ReaderCommand.FocusFind, keyboard.Resolve(new ReaderKey('f', Control: true), false, 0));
+      Assert.Equal(ReaderCommand.None, keyboard.Resolve(new ReaderKey('f', Control: true, Shift: true), false, 1));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/ReaderThemeTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/ReaderThemeTests.cs
new file mode 100644
index 0000000..7b31b34
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/ReaderThemeTests.cs
@@ -0,0 +1,210 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Exercises the original themes, schema errors and CSS/HTML boundary with hostile theme input.</summary>
+public sealed class ReaderThemeTests
+{
+   /// <summary>The complete bundled collection is usable and retains Darin's default.</summary>
+   [Fact]
+   public void BuiltIn_OriginalResources_LoadsTwentyThemes()
+   {
+      Assert.Equal(20, ThemeCatalog.BuiltIn.Count);
+      Assert.Equal("Catppuccin Mocha", ThemeCatalog.Find(null).Name);
+      Assert.Equal("Catppuccin Mocha", ThemeCatalog.Find("removed theme").Name);
+      Assert.Equal("GitHub Light", ThemeCatalog.Find("GitHub Light").Name);
+      Assert.Equal(ThemeCatalog.BuiltIn.Select(theme => theme.Name).Order(StringComparer.Ordinal), ThemeCatalog.BuiltIn.Select(theme => theme.Name), StringComparer.Ordinal);
+      Assert.All(ThemeCatalog.BuiltIn, theme => Assert.Contains("var(--background)", theme.Styles, StringComparison.Ordinal));
+   }
+
+
+
+   /// <summary>User edits replace bundled names without duplicates; new themes are sorted and retained.</summary>
+   [Fact]
+   public void Combine_UserOverridesAndNewTheme_PreservesEdits()
+   {
+      string original = OriginalJson();
+      var edited = ReaderTheme.Parse(original.Replace("#1e1e2e", "#123456", StringComparison.Ordinal));
+      var custom = ReaderTheme.Parse(original.Replace("Catppuccin Mocha", "A Custom Theme", StringComparison.Ordinal));
+      IReadOnlyList<ReaderTheme> combined = ThemeCatalog.Combine([edited, custom]);
+      Assert.Equal(21, combined.Count);
+      Assert.Same(custom, combined[0]);
+      Assert.Same(edited, combined.Single(theme => string.Equals(theme.Name, edited.Name, StringComparison.Ordinal)));
+      Assert.Contains("--background:#123456;", edited.Styles, StringComparison.Ordinal);
+      Assert.Equal(original.Replace("#1e1e2e", "#123456", StringComparison.Ordinal), edited.Json);
+      Assert.Equal(20, ThemeCatalog.Combine([]).Count);
+      Assert.Throws<ArgumentNullException>(() => ThemeCatalog.Combine(null!));
+   }
+
+
+
+   /// <summary>Preferences discard corrupt custom themes while retaining valid edits and repairing invalid selection names.</summary>
+   [Fact]
+   public void Sanitize_CorruptSavedThemes_KeepsValidThemes()
+   {
+      string json = OriginalJson();
+      var settings = new AppSettings { DocumentTheme = "\n", UserThemes = [null!, "", "{", json] };
+      settings.Sanitize();
+      Assert.Equal("Catppuccin Mocha", settings.DocumentTheme);
+      Assert.Equal([json], settings.UserThemes, StringComparer.Ordinal);
+      settings.UserThemes = null!;
+      settings.DocumentTheme = new string('x', 81);
+      settings.Sanitize();
+      Assert.Empty(settings.UserThemes);
+      Assert.Equal("Catppuccin Mocha", settings.DocumentTheme);
+   }
+
+
+   /// <summary>Color, font and size values become CSS variables using invariant numbers.</summary>
+   [Fact]
+   public void Parse_OriginalTheme_PreservesPaletteAndMapsFonts()
+   {
+      CultureInfo previous = CultureInfo.CurrentCulture;
+      try
+      {
+         CultureInfo.CurrentCulture = CultureInfo.GetCultureInfo("fr-FR");
+         var theme = ReaderTheme.Parse(OriginalJson());
+         Assert.Equal("Catppuccin Mocha", theme.Name);
+         Assert.Contains("--background:#1e1e2e;", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("--bodyFont:system-ui, sans-serif;", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("--codeFont:Consolas, 'Cascadia Code', monospace;", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("--baseFontSize:14px;", theme.Styles, StringComparison.Ordinal);
+         Assert.Contains("--lineHeight:1.7;", theme.Styles, StringComparison.Ordinal);
+      }
+      finally
+      {
+         CultureInfo.CurrentCulture = previous;
+      }
+   }
+
+
+
+   /// <summary>Custom font and CSS values cannot escape the containing style element or inject font declarations.</summary>
+   [Fact]
+   public void Parse_CustomStrings_EscapesHtmlAndFontDelimiters()
+   {
+      JsonNode root = JsonNode.Parse(OriginalJson())!;
+      root["schemaVersion"] = 1;
+      root["fonts"]!["body"] = "A';} <script>";
+      root["customCSS"] = "body { color: red; } </style><script>alert(1)</script>";
+      string styles = ReaderTheme.Parse(root.ToJsonString()).Styles;
+      Assert.DoesNotContain("<", styles, StringComparison.Ordinal);
+      Assert.Contains("--bodyFont:'\\41 \\27 \\3B \\7D \\20 \\3C \\73 \\63 \\72 \\69 \\70 \\74 \\3E ';", styles, StringComparison.Ordinal);
+      Assert.Contains("\\3c /style>", styles, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Optional custom CSS is not required by older theme files.</summary>
+   [Fact]
+   public void Parse_NoCustomCss_LoadsTheme()
+   {
+      JsonNode root = JsonNode.Parse(OriginalJson())!;
+      root.AsObject().Remove("customCSS");
+      Assert.Equal("Catppuccin Mocha", ReaderTheme.Parse(root.ToJsonString()).Name);
+   }
+
+
+
+   /// <summary>Malformed JSON, oversized files and non-object roots fail before generating CSS.</summary>
+   [Theory]
+   [InlineData("null")]
+   [InlineData("[]")]
+   [InlineData("{")]
+   public void Parse_InvalidRoot_RejectsInput(string json) => Assert.ThrowsAny<JsonException>(() => ReaderTheme.Parse(json));
+
+
+
+   /// <summary>Null and oversized input are rejected before parser work.</summary>
+   [Fact]
+   public void Parse_OutsideSizeContract_RejectsInput()
+   {
+      Assert.Throws<ArgumentNullException>(() => ReaderTheme.Parse(null!));
+      Assert.Throws<JsonException>(() => ReaderTheme.Parse(new string(' ', 128 * 1024 + 1)));
+   }
+
+
+
+   /// <summary>Required objects, strings, version, numeric bounds and colors cannot carry invalid schema values.</summary>
+   [Theory]
+   [InlineData("schemaVersion", "2")]
+   [InlineData("schemaVersion", "1.5")]
+   [InlineData("schemaVersion", "\"1\"")]
+   [InlineData("name", "\"\"")]
+   [InlineData("name", "\"\\n\"")]
+   [InlineData("name", "null")]
+   [InlineData("colors", "null")]
+   [InlineData("colors.background", "\"red\"")]
+   [InlineData("colors.background", "\"#zzzzzz\"")]
+   [InlineData("colors.background", "\";color:red\"")]
+   [InlineData("fonts.body", "\"\"")]
+   [InlineData("fonts.code", "\"\\n\"")]
+   [InlineData("sizes.baseFontSize", "5")]
+   [InlineData("sizes.h1Size", "97")]
+   [InlineData("sizes.h2Size", "1e400")]
+   [InlineData("sizes.h3Size", "\"20\"")]
+   [InlineData("sizes.lineHeight", "0.4")]
+   [InlineData("sizes.lineHeight", "4.1")]
+   [InlineData("customCSS", "false")]
+   public void Parse_InvalidProperty_RejectsInput(string path, string json)
+   {
+      JsonNode root = JsonNode.Parse(OriginalJson())!;
+      string[] parts = path.Split('.');
+      JsonNode parent = parts.Length == 1 ? root : root[parts[0]]!;
+      parent[parts[^1]] = JsonNode.Parse(json);
+      Assert.Throws<JsonException>(() => ReaderTheme.Parse(root.ToJsonString()));
+   }
+
+
+
+   /// <summary>Missing fields never reach unchecked JSON property access.</summary>
+   [Theory]
+   [InlineData("name")]
+   [InlineData("colors")]
+   [InlineData("fonts")]
+   [InlineData("sizes")]
+   [InlineData("colors.text")]
+   [InlineData("sizes.h4Size")]
+   public void Parse_MissingProperty_RejectsInput(string path)
+   {
+      JsonNode root = JsonNode.Parse(OriginalJson())!;
+      string[] parts = path.Split('.');
+      JsonNode parent = parts.Length == 1 ? root : root[parts[0]]!;
+      parent.AsObject().Remove(parts[^1]);
+      Assert.Throws<JsonException>(() => ReaderTheme.Parse(root.ToJsonString()));
+   }
+
+
+
+   /// <summary>Names and font families cannot produce unbounded CSS or inaccessible labels.</summary>
+   [Theory]
+   [InlineData("name")]
+   [InlineData("fonts.body")]
+   public void Parse_OverlongLabel_RejectsInput(string path)
+   {
+      JsonNode root = JsonNode.Parse(OriginalJson())!;
+      string[] parts = path.Split('.');
+      JsonNode parent = parts.Length == 1 ? root : root[parts[0]]!;
+      parent[parts[^1]] = new string('A', 81);
+      Assert.Throws<JsonException>(() => ReaderTheme.Parse(root.ToJsonString()));
+   }
+
+
+
+   /// <summary>Loads the exact bundled reference instead of maintaining a duplicate test schema.</summary>
+   private static string OriginalJson()
+   {
+      using Stream stream = typeof(ReaderTheme).Assembly.GetManifestResourceStream("MarkdownViewr.Windows.Core.Themes.BuiltIn.catppuccin-mocha.json")!;
+      using var reader = new StreamReader(stream);
+      return reader.ReadToEnd();
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/ReaderZoomTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/ReaderZoomTests.cs
new file mode 100644
index 0000000..d801081
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/ReaderZoomTests.cs
@@ -0,0 +1,113 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using MarkdownViewr.Windows.Core.Navigation;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Verifies window-local bounded state and real bundled theme font scaling without changing persisted source themes.</summary>
+public sealed class ReaderZoomTests
+{
+   /// <summary>Repeated commands stay bounded, actual size resets, and another window retains its independent state.</summary>
+   [Fact]
+   public void Apply_RepeatedAndIndependentCommands_RetainsBoundsAndActualSize()
+   {
+      var zoom = new ReaderZoom();
+      var other = new ReaderZoom();
+      Assert.Equal(1, zoom.Scale);
+      zoom.Apply(ReaderCommand.None);
+      Assert.Equal(1, zoom.Scale);
+      zoom.Apply(ReaderCommand.ZoomIn);
+      Assert.Equal(1.1, zoom.Scale);
+      zoom.Apply(ReaderCommand.ZoomOut);
+      Assert.Equal(1, zoom.Scale, precision: 12);
+      for(int index = 0; index < 100; index++)
+      {
+         zoom.Apply(ReaderCommand.ZoomIn);
+      }
+      Assert.Equal(5, zoom.Scale);
+      for(int index = 0; index < 100; index++)
+      {
+         zoom.Apply(ReaderCommand.ZoomOut);
+      }
+      Assert.Equal(0.3, zoom.Scale);
+      zoom.Apply(ReaderCommand.ZoomReset);
+      Assert.Equal(1, zoom.Scale);
+      Assert.Equal(1, other.Scale);
+   }
+
+
+
+   /// <summary>Every bundled theme scales all eight font sizes but retains line height, original JSON and actual-size CSS.</summary>
+   [Theory]
+   [InlineData(0.3)]
+   [InlineData(1.1)]
+   [InlineData(5)]
+   public void GetStyles_BundledThemes_ScalesFontsWithInvariantNumbers(double scale)
+   {
+      CultureInfo previous = CultureInfo.CurrentCulture;
+      try
+      {
+         CultureInfo.CurrentCulture = CultureInfo.GetCultureInfo("fr-FR");
+         foreach(ReaderTheme theme in ThemeCatalog.BuiltIn)
+         {
+            string original = theme.Json;
+            using var json = JsonDocument.Parse(original);
+            JsonElement sizes = json.RootElement.GetProperty("sizes");
+            string styles = theme.GetStyles(scale);
+            foreach(string field in new[] { "baseFontSize", "h1Size", "h2Size", "h3Size", "h4Size", "h5Size", "h6Size", "codeFontSize" })
+            {
+               string number = (sizes.GetProperty(field).GetDouble() * scale).ToString("R", CultureInfo.InvariantCulture);
+               Assert.Contains("--" + field + ":" + number + "px;", styles, StringComparison.Ordinal);
+            }
+            Assert.Contains("--lineHeight:" + sizes.GetProperty("lineHeight").GetDouble().ToString("R", CultureInfo.InvariantCulture) + ";", styles, StringComparison.Ordinal);
+            Assert.Equal(theme.Styles, theme.GetStyles(1));
+            Assert.Equal(original, theme.Json);
+         }
+      }
+      finally
+      {
+         CultureInfo.CurrentCulture = previous;
+      }
+   }
+
+
+
+   /// <summary>Nonfinite and out-of-range scales cannot become generated browser CSS.</summary>
+   [Theory]
+   [InlineData(double.NaN)]
+   [InlineData(double.PositiveInfinity)]
+   [InlineData(double.NegativeInfinity)]
+   [InlineData(0)]
+   [InlineData(0.299)]
+   [InlineData(5.001)]
+   public void GetStyles_InvalidScale_RejectsInput(double scale)
+      => Assert.Throws<ArgumentOutOfRangeException>(() => ThemeCatalog.Find(null).GetStyles(scale));
+
+
+
+   /// <summary>Ctrl zoom commands own only reading focus and their allowed shift combinations.</summary>
+   [Theory]
+   [InlineData('+', false, ReaderCommand.ZoomIn)]
+   [InlineData('+', true, ReaderCommand.ZoomIn)]
+   [InlineData('=', false, ReaderCommand.ZoomIn)]
+   [InlineData('=', true, ReaderCommand.None)]
+   [InlineData('-', false, ReaderCommand.ZoomOut)]
+   [InlineData('-', true, ReaderCommand.None)]
+   [InlineData('0', false, ReaderCommand.ZoomReset)]
+   [InlineData('0', true, ReaderCommand.None)]
+   public void Resolve_ZoomModifiersAndFocus_PreservesNativeTextInput(char character, bool shift, ReaderCommand expected)
+   {
+      var key = new ReaderKey(character, Control: true, Shift: shift);
+      Assert.Equal(expected, new ReaderKeyboard().Resolve(key, readingFocused: true, 0));
+      Assert.Equal(ReaderCommand.None, new ReaderKeyboard().Resolve(key, readingFocused: false, 0));
+      Assert.Equal(ReaderCommand.None, new ReaderKeyboard().Resolve(key with { Alt = true }, readingFocused: true, 0));
+      Assert.Equal(ReaderCommand.None, new ReaderKeyboard().Resolve(key with { Windows = true }, readingFocused: true, 0));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/ReadingAppearanceTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/ReadingAppearanceTests.cs
new file mode 100644
index 0000000..3b82397
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/ReadingAppearanceTests.cs
@@ -0,0 +1,174 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using MarkdownViewr.Windows.Core.Printing;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Reading layout/CSS preserve reference precedence, bounds, HTML safety and print independence.</summary>
+public sealed class ReadingAppearanceTests
+{
+   /// <summary>The reference default is enabled1000px; corrupt saved widths are bounded without losing the enable flag.</summary>
+   [Theory]
+   [InlineData(double.NaN, 1000)]
+   [InlineData(double.PositiveInfinity, 1000)]
+   [InlineData(double.NegativeInfinity, 1000)]
+   [InlineData(-1, 1000)]
+   [InlineData(0, 1000)]
+   [InlineData(199, 200)]
+   [InlineData(320, 320)]
+   [InlineData(4001, 4000)]
+   public void Sanitize_SavedWidths_RepairsCorruption(double width, double expected)
+   {
+      var settings = new AppSettings { ContentWidthEnabled = false, ContentWidthPx = width };
+      settings.Sanitize();
+      Assert.Equal(new ReadingAppearance(false, expected), settings.ReadingAppearance);
+      Assert.Equal(new ReadingAppearance(), new AppSettings().ReadingAppearance);
+   }
+
+
+
+   /// <summary>Oversized/null saved CSS is discarded; invalid live drafts are rejected rather than repaired silently.</summary>
+   [Fact]
+   public void Sanitize_InvalidCss_RepairsOnlySavedInput()
+   {
+      foreach(string? css in new[] { null, new string('x', ReadingAppearance.MaximumCssCharacters + 1) })
+      {
+         var options = new ReadingAppearance(GlobalCss: css!);
+         Assert.Equal("", options.Sanitize().GlobalCss);
+         Assert.Throws<InvalidOperationException>(options.Validate);
+         var settings = new AppSettings { GlobalCss = css! };
+         settings.Sanitize();
+         Assert.Equal("", settings.GlobalCss);
+      }
+      var valid = new ReadingAppearance(GlobalCss: new string(' ', ReadingAppearance.MaximumCssCharacters));
+      valid.Validate();
+      Assert.Equal(valid, valid.Sanitize());
+   }
+
+
+
+   /// <summary>Nonfinite/out-of-range native drafts fail before generating CSS or saving preferences.</summary>
+   [Theory]
+   [InlineData(double.NaN)]
+   [InlineData(double.PositiveInfinity)]
+   [InlineData(199)]
+   [InlineData(4001)]
+   public void Validate_InvalidNativeWidth_RejectsDraft(double width)
+   {
+      var options = new ReadingAppearance(WidthPixels: width);
+      Assert.Throws<InvalidOperationException>(options.Validate);
+      Assert.Throws<InvalidOperationException>(() => ThemeCatalog.Find(null).GetReadingStyles(options, 1));
+   }
+
+
+
+   /// <summary>Global CSS comes before per-theme CSS, then enabled width applies last and scales with reading fonts.</summary>
+   [Fact]
+   public void GetReadingStyles_ReferenceCascade_PreservesThemeAndWidthPriority()
+   {
+      JsonNode root = JsonNode.Parse(ThemeCatalog.Find(null).Json)!;
+      root["customCSS"] = "body { background: #222222; }";
+      var theme = ReaderTheme.Parse(root.ToJsonString());
+      string original = theme.Json;
+      string css = theme.GetReadingStyles(new ReadingAppearance(WidthPixels: 320, GlobalCss: "body { background: #111111; }"), 1.5);
+      int baseRules = css.IndexOf("#content-inner {", StringComparison.Ordinal);
+      int global = css.IndexOf("body { background: #111111; }", StringComparison.Ordinal);
+      int perTheme = css.IndexOf("body { background: #222222; }", StringComparison.Ordinal);
+      int width = css.IndexOf("#content-inner{max-width:calc(320px * var(--zoom));margin:auto;}", StringComparison.Ordinal);
+      Assert.True(baseRules >= 0 && global > baseRules && perTheme > global && width > perTheme);
+      Assert.Equal(original, theme.Json);
+      string unbounded = theme.GetReadingStyles(new ReadingAppearance(false, 320, "body { max-width: 450px; }"), 1.5);
+      Assert.DoesNotContain("#content-inner{max-width:calc(", unbounded, StringComparison.Ordinal);
+      Assert.Contains("body { max-width: 450px; }", unbounded, StringComparison.Ordinal);
+      Assert.DoesNotContain("#content-inner{max-width:calc(320px", unbounded, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Zoom width uses invariant finite numbers; custom CSS cannot close the containing screen style element.</summary>
+   [Fact]
+   public void GetReadingStyles_HostileCssAndCulture_PreservesHtmlBoundary()
+   {
+      CultureInfo previous = CultureInfo.CurrentCulture;
+      try
+      {
+         CultureInfo.CurrentCulture = CultureInfo.GetCultureInfo("fr-FR");
+         string css = ThemeCatalog.Find(null).GetReadingStyles(new ReadingAppearance(WidthPixels: 321.5, GlobalCss: "} @media print {body{color:red}} </style><script>evil()</script>"), 1.5);
+         Assert.Contains("--zoom:1.5;", css, StringComparison.Ordinal);
+         Assert.Contains("max-width:calc(321.5px * var(--zoom));", css, StringComparison.Ordinal);
+         Assert.DoesNotContain("<", css, StringComparison.Ordinal);
+         Assert.Contains("\\3c /style>", css, StringComparison.Ordinal);
+      }
+      finally
+      {
+         CultureInfo.CurrentCulture = previous;
+      }
+   }
+
+
+
+   /// <summary>Reading overrides never alter PrintStyles or the saved print theme/layout.</summary>
+   [Fact]
+   public void GetReadingStyles_GlobalOverrides_LeavesPrintIndependent()
+   {
+      ReaderTheme theme = ThemeCatalog.Find(null);
+      var print = new PrintOptions("Active Theme", Backgrounds: true, FullPage: false);
+      string before = PrintStyles.Build(print, theme, ThemeCatalog.BuiltIn, 1);
+      string reading = theme.GetReadingStyles(new ReadingAppearance(WidthPixels: 320, GlobalCss: "html { background: #112233; }"), 1);
+      Assert.Contains("#112233", reading, StringComparison.Ordinal);
+      Assert.DoesNotContain("#112233", before, StringComparison.Ordinal);
+      Assert.DoesNotContain("max-width:320px", before, StringComparison.Ordinal);
+      Assert.Equal(before, PrintStyles.Build(print, theme, ThemeCatalog.BuiltIn, 1));
+   }
+
+
+
+   /// <summary>Old JSON retains the reference defaults; new disabled width/global CSS preferences survive source-generated persistence.</summary>
+   [Fact]
+   public void Serialize_AppearancePreferences_PreservesOldDefaultsAndNewChoices()
+   {
+      AppSettings old = JsonSerializer.Deserialize("{}", AppSettingsContext.Default.AppSettings)!;
+      Assert.Equal(new ReadingAppearance(), old.ReadingAppearance);
+      var settings = new AppSettings { ContentWidthEnabled = false, ContentWidthPx = 320, GlobalCss = "p { color: #123456; }" };
+      string json = JsonSerializer.Serialize(settings, AppSettingsContext.Default.AppSettings);
+      Assert.DoesNotContain("ReadingAppearance", json, StringComparison.Ordinal);
+      Assert.Equal(settings.ReadingAppearance, JsonSerializer.Deserialize(json, AppSettingsContext.Default.AppSettings)!.ReadingAppearance);
+   }
+
+
+
+   /// <summary>A width edit in one reader preserves newer global CSS in another reader's saved preferences.</summary>
+   [Fact]
+   public void Merge_IndependentAppearanceFields_PreservesSiblingCss()
+   {
+      var before = new AppSettings();
+      AppSettings edited = SettingsChanges.Copy(before);
+      edited.ContentWidthPx = 320;
+      var current = new AppSettings { GlobalCss = "body { color: #abcdef; }", ContentWidthEnabled = false };
+      Assert.Equal(new ReadingAppearance(false, 320, current.GlobalCss), SettingsChanges.Merge(current, before, edited).ReadingAppearance);
+      Assert.Equal(1000, current.ContentWidthPx);
+   }
+
+
+
+   /// <summary>Missing appearance or invalid zoom reports an explicit contract failure before producing style output.</summary>
+   [Theory]
+   [InlineData(double.NaN)]
+   [InlineData(double.PositiveInfinity)]
+   [InlineData(0.29)]
+   [InlineData(5.01)]
+   public void GetReadingStyles_InvalidArguments_RejectsInput(double zoom)
+   {
+      ReaderTheme theme = ThemeCatalog.Find(null);
+      Assert.Throws<ArgumentOutOfRangeException>(() => theme.GetReadingStyles(new ReadingAppearance(), zoom));
+      Assert.Throws<ArgumentNullException>(() => theme.GetReadingStyles(null!, 1));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/RecentDocumentsTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/RecentDocumentsTests.cs
new file mode 100644
index 0000000..f759375
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/RecentDocumentsTests.cs
@@ -0,0 +1,67 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>History is private, bounded and tolerant of corrupt settings without probing the filesystem.</summary>
+public sealed class RecentDocumentsTests
+{
+   /// <summary>Invalid persisted entries cannot become relative file activations or unbounded menu text.</summary>
+   [Theory]
+   [InlineData(null)]
+   [InlineData("")]
+   [InlineData("  ")]
+   [InlineData("notes.md")]
+   [InlineData("https://example.com/notes.md")]
+   [InlineData("C:\\notes\u0000.md")]
+   [InlineData("C:\\notes\n.md")]
+   public void Sanitize_InvalidPath_RemovesEntry(string? path)
+      => Assert.Empty(RecentDocuments.Sanitize([path]));
+
+
+
+   /// <summary>The history retains Windows path order, drops duplicate casing and imposes the fixed limit.</summary>
+   [Fact]
+   public void Sanitize_MixedHistory_PreservesUniqueBoundedPaths()
+   {
+      string first = Path.Combine(Path.GetTempPath(), "notes & café.md");
+      string[] paths = [first, first.ToUpperInvariant(), .. Enumerable.Range(0, 25).Select(index => Path.Combine(Path.GetTempPath(), index + ".md"))];
+      string[] history = RecentDocuments.Sanitize(paths);
+      Assert.Equal(20, history.Length);
+      Assert.Equal(first, history[0]);
+      Assert.EndsWith("18.md", history[^1], StringComparison.Ordinal);
+      Assert.Empty(RecentDocuments.Sanitize([Path.GetTempPath() + new string('x', 32768)]));
+   }
+
+
+
+   /// <summary>Recording a successful open promotes a duplicate and accepts a fresh history without touching files.</summary>
+   [Fact]
+   public void Record_SuccessfulPath_PromotesOnlyThatEntry()
+   {
+      string first = Path.Combine(Path.GetTempPath(), "one.md");
+      string second = Path.Combine(Path.GetTempPath(), "two.md");
+      Assert.Equal([second, first], RecentDocuments.Record([first, second], second));
+      Assert.Equal([first], RecentDocuments.Record(null, first));
+      Assert.Empty(RecentDocuments.Sanitize(null));
+   }
+
+
+
+   /// <summary>Old or malformed settings load an empty repaired history and use the same bounds as the menu.</summary>
+   [Fact]
+   public void Sanitize_Settings_RepairsHistory()
+   {
+      var settings = new AppSettings { RecentFiles = null! };
+      settings.Sanitize();
+      Assert.Empty(settings.RecentFiles);
+      settings.RecentFiles = ["relative.md", Path.Combine(Path.GetTempPath(), "existing.md")];
+      settings.Sanitize();
+      Assert.Single(settings.RecentFiles);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/SecurityFuzzTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/SecurityFuzzTests.cs
new file mode 100644
index 0000000..9be1570
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/SecurityFuzzTests.cs
@@ -0,0 +1,297 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using AngleSharp.Dom;
+using AngleSharp.Html.Dom;
+using AngleSharp.Html.Parser;
+using MarkdownViewr.Windows.Core.Documents;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Seeded mutation campaigns assert independent security properties without executing authored content or touching profiles.</summary>
+[Trait("Category", "Fuzz")]
+public sealed class SecurityFuzzTests
+{
+   private static readonly Url s_browserBase = new("https://viewer.markdownviewr.invalid/documents/fuzz/index.html");
+   private static readonly string[] s_fragments =
+   [
+      "# Heading\n", "\r\n## Child\r\n", "Title\n=====\n", "---\ntitle: '==metadata=='\n---\n",
+      "**strong** *emphasis* ~~deleted~~ ==marked== ^sup^ ~sub~ ++inserted++\n",
+      "<script>window.chrome.webview.postMessage('execute')</script>",
+      "<img src='x.png' onerror='execute()' srcset='https://outside.invalid/x.png 2x'>",
+      "<iframe srcdoc='<script>execute()</script>'></iframe>", "<svg><a xlink:href='javascript:execute()'>x</a></svg>",
+      "<h2 id='mv-heading-999' data-mv-body='999' onclick='execute()'>Raw heading</h2>\n",
+      "<pre><code>==literal== ^literal^ ++literal++</code></pre>\n", "`<script>literal()</script>`\n",
+      "```html\n<script>literal()</script>\n```\n", "<style>@import 'https://outside.invalid';</style>",
+      "<form><input type='password' oninput='execute()'><button>submit</button></form>",
+      "<a href='java&#x09;script:execute()'>x</a>", "<a href='file:///C:/synthetic/private'>x</a>",
+      "[section](#heading) ![image](images/hello%20world.png)\n", "| A | B |\n|---|---|\n| x | y |\n",
+      "- [x] Task\n> Quote\n", "😀 café\0\t\r\n", "<!-- <code> -->", "</code></pre></div>",
+      "</style><script>execute()</script>", "&lt;script&gt;literal&lt;/script&gt;", "\"'<>:=[]()\\/!?%",
+   ];
+
+
+
+   /// <summary>Malformed HTML, Markdown, frontmatter and extension combinations never recover executable DOM or authored host attributes.</summary>
+   [Theory]
+   [InlineData(22023)]
+   [InlineData(99173)]
+   public void Markdown_MutatedDocuments_RemainPassive(int seed)
+      => Campaign(seed, "markdown", GenerateMarkdown, (input, random) =>
+      {
+         var extensions = new MarkdownExtensions(random.Next(2) == 1, random.Next(2) == 1, random.Next(2) == 1, random.Next(2) == 1);
+         string html = new MarkdownRenderer(extensions).Render(input, (FrontmatterMode)random.Next(3));
+         using IHtmlDocument document = new HtmlParser().ParseDocument(html);
+         AssertPassive(document);
+         Assert.All(document.QuerySelectorAll("*"), element => Assert.DoesNotContain(element.Attributes, attribute => attribute.Name.StartsWith("data-mv", StringComparison.OrdinalIgnoreCase)));
+      });
+
+
+
+   /// <summary>Generated headings/folds preserve the exact literal source and keep every selection within its committed snapshot.</summary>
+   [Theory]
+   [InlineData(22023)]
+   [InlineData(99173)]
+   public void Source_MutatedDocumentsAndFolds_KeepLiteralSnapshot(int seed)
+      => Campaign(seed, "source", GenerateMarkdown, (input, random) =>
+      {
+         var outline = new DocumentOutline(input, (FrontmatterMode)random.Next(3));
+         var source = new DocumentSourceText(input, outline);
+         Assert.Equal(input.ReplaceLineEndings("\r"), source.Text);
+         Assert.Equal(input, source.GetCopyText(0, source.Text.Length));
+         Assert.All(outline.SourceHeadings, heading =>
+         {
+            Assert.InRange(heading.Start, 0, input.Length);
+            Assert.InRange(heading.End, heading.Start, input.Length);
+            Assert.InRange(heading.Index, 0, outline.Headings.Count - 1);
+         });
+         source.SetCollapsed(outline.Headings.Where(_ => random.Next(2) == 1).Select(heading => heading.Index));
+         int start = random.Next(input.Length + 1);
+         int length = random.Next(input.Length - start + 1);
+         if(source.GetDisplayRange(start, length) is { } range)
+         {
+            Assert.InRange(range.Start, 0, source.Text.Length);
+            Assert.InRange(range.Length, 0, source.Text.Length - range.Start);
+         }
+         source.SetCollapsed([]);
+         Assert.Equal(input.ReplaceLineEndings("\r"), source.Text);
+         Assert.Equal(input, source.GetCopyText(0, source.Text.Length));
+         using IHtmlDocument document = new HtmlParser().ParseDocument(outline.Html);
+         AssertPassive(document);
+         Assert.Equal(outline.Headings.Count, document.QuerySelectorAll("h1,h2,h3,h4,h5,h6").Select(element => element.Id).Distinct(StringComparer.Ordinal).Count());
+      });
+
+
+
+   /// <summary>Once-decoded accepted requests stay under a synthetic Windows folder; foreign namespaces and queries cannot become document commands.</summary>
+   [Theory]
+   [InlineData(22023)]
+   [InlineData(99173)]
+   public void Resources_MutatedRequests_KeepNamespaceAndPathBounds(int seed)
+      => Campaign(seed, "resources", random =>
+      {
+         string[] segments = ["images", "nested", "hello%20world", "..", "%2e%2e", "%252e%252e", "%2f", "%5c", "C%3a", "file%3astream", "COM¹", "NUL", "end.", "end%20", "café", "%00", "<script>"];
+         string[] endings = [".md", ".txt", ".PNG", ".svg", ".exe", ".html", ".md%3aexe", ".mkd"];
+         return string.Join('/', Enumerable.Range(0, random.Next(1, 6)).Select(_ => segments[random.Next(segments.Length)])) + endings[random.Next(endings.Length)];
+      }, (input, random) =>
+      {
+         var policy = new DocumentResourcePolicy();
+         Uri request = new(policy.DocumentUri, input);
+         AssertAcceptedPath(policy.GetDocumentRelativePath(request));
+         AssertAcceptedPath(policy.GetImageRelativePath(request));
+         var outside = new UriBuilder(request) { Host = "outside.invalid" };
+         Assert.Null(policy.GetDocumentRelativePath(outside.Uri));
+         Assert.Null(policy.GetImageRelativePath(outside.Uri));
+         var query = new UriBuilder(request) { Query = "command=execute" };
+         Assert.Null(policy.GetDocumentRelativePath(query.Uri));
+         Assert.NotNull(policy.GetDocumentRelativePath(new Uri(policy.DocumentUri, "safe.md")));
+         int count = random.Next(1, 12);
+         int index = random.Next(-3, 16);
+         Uri heading = new(policy.DocumentUri.AbsoluteUri + "#mv-heading-" + index.ToString(CultureInfo.InvariantCulture));
+         int? result = policy.GetHeadingIndex(heading, count);
+         if(result is { } accepted)
+         {
+            Assert.InRange(accepted, 0, count - 1);
+         }
+         Assert.Null(policy.GetHeadingIndex(new UriBuilder(heading) { Host = "outside.invalid" }.Uri, count));
+      });
+
+
+
+   /// <summary>Accepted imported JSON and hostile titles/CSS cannot escape the document's title/style containers.</summary>
+   [Theory]
+   [InlineData(22023)]
+   [InlineData(99173)]
+   public void Themes_MutatedJson_KeepPassivePageBoundaries(int seed)
+      => Campaign(seed, "themes", GenerateTheme, (input, random) =>
+      {
+         ReaderTheme theme;
+         try
+         {
+            theme = ReaderTheme.ParseCompatible(input);
+         }
+         catch(JsonException)
+         {
+            return; // Invalid imports are expected to be rejected, not silently sanitized into stored themes.
+         }
+         string title = s_fragments[random.Next(s_fragments.Length)];
+         string css = s_fragments[random.Next(s_fragments.Length)];
+         string html = DocumentPage.Build("<p>trusted-marker</p>", title, theme, new ReadingAppearance(true, 700, css), 1);
+         using IHtmlDocument document = new HtmlParser().ParseDocument(html);
+         Assert.Equal(title.ReplaceLineEndings("\n").Replace('\0', '\uFFFD'), document.QuerySelector("title")!.TextContent);
+         Assert.Equal("trusted-marker", document.QuerySelector("#content-inner")!.TextContent);
+         Assert.Single(document.QuerySelectorAll("style"));
+         Assert.Single(document.QuerySelectorAll("title"));
+         Assert.Empty(document.QuerySelectorAll("script,iframe,object,embed,form,button,img,svg"));
+      });
+
+
+
+   /// <summary>The minimized campaign input is a browser-relative authority, not a standalone Windows file URI; it never gains local image access.</summary>
+   [Fact]
+   public void Resources_BackslashAuthority_DeniesForeignImage()
+   {
+      const string Markdown = "<img src='\\\\x.png' onerror='execute()'>";
+      using IHtmlDocument document = new HtmlParser().ParseDocument(new MarkdownRenderer().Render(Markdown));
+      AssertPassive(document);
+      string source = document.QuerySelector("img")!.GetAttribute("src")!;
+      var policy = new DocumentResourcePolicy();
+      Uri target = new(new Url(new Url(policy.DocumentUri.AbsoluteUri), source).Href);
+      Assert.Equal("https", target.Scheme);
+      Assert.Null(policy.GetImageRelativePath(target));
+   }
+
+
+
+   /// <summary>Combines valid/malformed corpus pieces, then deletes, inserts or repeats one synthetic character.</summary>
+   private static string GenerateMarkdown(Random random)
+   {
+      string input = string.Concat(Enumerable.Range(0, random.Next(1, 18)).Select(_ => s_fragments[random.Next(s_fragments.Length)]));
+      const string MutationCharacters = "<>[]`~^=+\r\n'\"\\";
+      int at = random.Next(input.Length + 1);
+      return random.Next(3) switch
+      {
+         0 when at < input.Length => input.Remove(at, 1),
+         1 => input.Insert(at, s_fragments[random.Next(s_fragments.Length)]),
+         _ => input.Insert(at, new string(MutationCharacters[random.Next(MutationCharacters.Length)], random.Next(1, 20))),
+      };
+   }
+
+
+
+   /// <summary>Mutates actual built-in schemas and syntax without substituting a mock parser or supplying private documents.</summary>
+   private static string GenerateTheme(Random random)
+   {
+      JsonNode theme = JsonNode.Parse(ThemeCatalog.BuiltIn[random.Next(ThemeCatalog.BuiltIn.Count)].Json)!;
+      string payload = s_fragments[random.Next(s_fragments.Length)];
+      switch(random.Next(7))
+      {
+         case 0:
+            theme["name"] = payload;
+            break;
+         case 1:
+            theme["fonts"]!["body"] = payload;
+            break;
+         case 2:
+            theme["colors"]!["text"] = payload;
+            break;
+         case 3:
+            theme["customCSS"] = payload;
+            break;
+         case 4:
+            theme["schemaVersion"] = random.Next(-2, 6);
+            break;
+         case 5:
+            theme["sizes"]!["baseFontSize"] = random.Next(-16, 160);
+            break;
+         default:
+            theme["metadata"] = payload;
+            break;
+      }
+      string input = theme.ToJsonString();
+      return random.Next(5) == 0 ? input.Remove(random.Next(input.Length), 1) : input;
+   }
+
+
+
+   /// <summary>Checks the real platform path result independently, with no disk access, URL execution or host bridge.</summary>
+   private static void AssertAcceptedPath(string? path)
+   {
+      if(path is null)
+      {
+         return;
+      }
+      string root = Path.Combine(Path.GetTempPath(), "k22-synthetic-fuzz-root") + Path.DirectorySeparatorChar;
+      Assert.False(Path.IsPathRooted(path));
+      Assert.StartsWith(root, Path.GetFullPath(Path.Combine(root, path)), StringComparison.Ordinal);
+      Assert.DoesNotContain(':', path);
+      Assert.DoesNotContain('\\', path);
+      Assert.DoesNotContain(path, char.IsControl);
+      Assert.All(path.Split('/'), segment => Assert.False(segment.EndsWith('.') || segment.EndsWith(' ')));
+   }
+
+
+
+   /// <summary>Uses the parsed DOM's executable capabilities as the oracle, not the renderer's private allowlist.</summary>
+   private static void AssertPassive(IHtmlDocument document)
+   {
+      Assert.Empty(document.QuerySelectorAll("script,svg,math,iframe,object,embed,form,button,style,base,meta[http-equiv],audio,video"));
+      foreach(IElement element in document.QuerySelectorAll("*"))
+      {
+         Assert.DoesNotContain(element.Attributes, attribute => attribute.Name.StartsWith("on", StringComparison.OrdinalIgnoreCase));
+         Assert.False(element.HasAttribute("srcdoc") || element.HasAttribute("srcset") || element.HasAttribute("style"));
+         foreach(string name in new[] { "href", "src" })
+         {
+            string? value = element.GetAttribute(name);
+            if(value is not null)
+            {
+               var target = new Url(s_browserBase, value);
+               if(!target.IsInvalid)
+               {
+                  Assert.Contains(target.Scheme, new[] { "http", "https", "mailto" }, StringComparer.Ordinal);
+               }
+            }
+         }
+      }
+      Assert.All(document.QuerySelectorAll("input"), element =>
+      {
+         IHtmlInputElement input = Assert.IsAssignableFrom<IHtmlInputElement>(element);
+         Assert.True(input.IsDisabled);
+         Assert.Equal("checkbox", input.Type);
+      });
+   }
+
+
+
+   /// <summary>Every failure includes a reproducible seed, exact synthetic input and property exception; campaign limits fail closed.</summary>
+   private static void Campaign(int seed, string target, Func<Random, string> generate, Action<string, Random> verify)
+   {
+      string? configured = Environment.GetEnvironmentVariable("K22_FUZZ_ITERATIONS");
+      int iterations = 500;
+      if(configured is not null && (!int.TryParse(configured, NumberStyles.None, CultureInfo.InvariantCulture, out iterations) || iterations is < 1 or > 100000))
+      {
+         throw new InvalidOperationException("K22_FUZZ_ITERATIONS must be between1 and100000.");
+      }
+      var random = new Random(seed);
+      for(int iteration = 0; iteration < iterations; iteration++)
+      {
+         string input = generate(random);
+         Assert.InRange(input.Length, 0, 4096);
+         try
+         {
+            verify(input, random);
+         }
+         catch(Exception exception)
+         {
+            throw new InvalidOperationException(FormattableString.Invariant($"Target={target}; Seed={seed}; Iteration={iteration}; Input={JsonSerializer.Serialize(input)}"), exception);
+         }
+      }
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/SettingsChangesTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/SettingsChangesTests.cs
new file mode 100644
index 0000000..bb11e74
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/SettingsChangesTests.cs
@@ -0,0 +1,134 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Editors;
+using MarkdownViewr.Windows.Core.Printing;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Independent document windows cannot overwrite sibling changes by saving an older preference snapshot.</summary>
+public sealed class SettingsChangesTests
+{
+   /// <summary>Legacy remembered panel visibility does not opt new windows into showing panels, while explicit defaults survive source-generated persistence.</summary>
+   [Fact]
+   public void Copy_NewWindowDefaults_AreIndependentOfRememberedPanels()
+   {
+      var legacy = new AppSettings { ShowOutline = true, ShowSource = true };
+      AppSettings restored = SettingsChanges.Copy(legacy);
+      Assert.False(restored.ShowOutlineByDefault);
+      Assert.False(restored.ShowSourceByDefault);
+      restored.ShowOutlineByDefault = true;
+      restored.ShowSourceByDefault = true;
+      AppSettings selected = SettingsChanges.Copy(restored);
+      Assert.True(selected.ShowOutlineByDefault);
+      Assert.True(selected.ShowSourceByDefault);
+      Assert.False(legacy.ShowOutlineByDefault);
+      Assert.False(legacy.ShowSourceByDefault);
+   }
+
+
+
+   /// <summary>A local panel toggle cannot overwrite newer startup defaults chosen in another Settings window.</summary>
+   [Fact]
+   public void Merge_LocalPanelToggle_PreservesNewerStartupDefaults()
+   {
+      var baseline = new AppSettings();
+      AppSettings local = SettingsChanges.Copy(baseline);
+      local.ShowSource = true;
+      local.ShowOutline = true;
+      var saved = new AppSettings { ShowOutlineByDefault = true, ShowSourceByDefault = true };
+      AppSettings merged = SettingsChanges.Merge(saved, baseline, local);
+      Assert.True(merged.ShowOutline);
+      Assert.True(merged.ShowSource);
+      Assert.True(merged.ShowOutlineByDefault);
+      Assert.True(merged.ShowSourceByDefault);
+   }
+
+
+
+   /// <summary>Legacy settings use truncated unmarked Contents; saved presentation choices survive an unrelated stale-reader edit.</summary>
+   [Fact]
+   public void Merge_ContentsPresentation_PersistsWithoutChangingPanelDefaults()
+   {
+      var before = new AppSettings();
+      Assert.False(before.WrapOutlineEntries);
+      Assert.False(before.ShowOutlineDepthMarkers);
+      AppSettings edited = SettingsChanges.Copy(before);
+      edited.OutlineDepth = 5;
+      edited.ShowOutline = true;
+      var current = new AppSettings { WrapOutlineEntries = true, ShowOutlineDepthMarkers = true, DocumentTheme = "Nord" };
+      AppSettings result = SettingsChanges.Copy(SettingsChanges.Merge(current, before, edited));
+      Assert.True(result.WrapOutlineEntries);
+      Assert.True(result.ShowOutlineDepthMarkers);
+      Assert.True(result.ShowOutline);
+      Assert.Equal(5, result.OutlineDepth);
+      Assert.Equal("Nord", result.DocumentTheme);
+      Assert.False(result.ShowOutlineByDefault);
+      Assert.False(result.ShowSourceByDefault);
+      Assert.False(before.WrapOutlineEntries);
+      Assert.False(before.ShowOutlineDepthMarkers);
+   }
+
+
+
+   /// <summary>A window's source change preserves newer history, theme, editor and print choices from its sibling.</summary>
+   [Fact]
+   public void Merge_StaleWindow_PreservesUnchangedSiblingPreferences()
+   {
+      var before = new AppSettings();
+      AppSettings edited = SettingsChanges.Copy(before);
+      edited.ShowSource = true;
+      edited.SourceWidth = 280;
+      var current = new AppSettings
+      {
+         DocumentTheme = "Nord",
+         RecentFiles = [Path.Combine(Path.GetTempPath(), "second.md")],
+         ConfiguredEditors = [new EditorConfiguration(Guid.NewGuid(), "Sibling", "C:\\editor.exe")],
+         Print = new PrintOptions("Plain HTML", PaddingPixels: 12),
+      };
+      AppSettings result = SettingsChanges.Merge(current, before, edited);
+      Assert.True(result.ShowSource);
+      Assert.Equal(280, result.SourceWidth);
+      Assert.Equal("Nord", result.DocumentTheme);
+      Assert.Equal(current.RecentFiles, result.RecentFiles);
+      Assert.Equal(current.ConfiguredEditors, result.ConfiguredEditors);
+      Assert.Equal(current.Print, result.Print);
+      Assert.False(current.ShowSource);
+   }
+
+
+
+   /// <summary>An explicit current-window edit wins for that field, while a cleared history cannot reappear.</summary>
+   [Fact]
+   public void Merge_ExplicitEdit_AppliesOnlyChangedProperties()
+   {
+      var before = new AppSettings { DocumentTheme = "Nord", RecentFiles = [Path.Combine(Path.GetTempPath(), "old.md")] };
+      AppSettings edited = SettingsChanges.Copy(before);
+      edited.DocumentTheme = "Dracula";
+      edited.UserThemes = ["owned fixture"];
+      edited.Print = null!;
+      var current = new AppSettings { DocumentTheme = "Light", RecentFiles = [] };
+      AppSettings result = SettingsChanges.Merge(current, before, edited);
+      Assert.Equal("Dracula", result.DocumentTheme);
+      Assert.Equal(["owned fixture"], result.UserThemes);
+      Assert.Empty(result.RecentFiles);
+      Assert.Null(result.Print);
+   }
+
+
+
+   /// <summary>Nested arrays are copied; mutation of a working draft cannot alter its baseline.</summary>
+   [Fact]
+   public void Copy_MutableArrays_RemainsIndependent()
+   {
+      var before = new AppSettings { RecentFiles = [Path.Combine(Path.GetTempPath(), "original.md")], UserThemes = ["original"] };
+      AppSettings copy = SettingsChanges.Copy(before);
+      copy.RecentFiles[0] = "changed";
+      copy.UserThemes[0] = "changed";
+      Assert.EndsWith("original.md", before.RecentFiles[0], StringComparison.Ordinal);
+      Assert.Equal("original", before.UserThemes[0]);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/SourceHighlightingTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/SourceHighlightingTests.cs
new file mode 100644
index 0000000..0e530b5
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/SourceHighlightingTests.cs
@@ -0,0 +1,69 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Documents;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Source colors come from parser spans without modifying literal Unicode, whitespace or inert markup.</summary>
+public sealed class SourceHighlightingTests
+{
+   /// <summary>Common Markdown forms retain exact parser locations, including nested inline forms and task lists.</summary>
+   [Theory]
+   [InlineData("😀 Intro\r\n# Heading", SourceTokenKind.Heading, "# Heading")]
+   [InlineData("Title\n=====", SourceTokenKind.Heading, "Title\n=====")]
+   [InlineData("A `code` word", SourceTokenKind.Code, "`code`")]
+   [InlineData("```cs\nvar x = 1;\n```", SourceTokenKind.Code, "```cs\nvar x = 1;\n```")]
+   [InlineData("    indented\n", SourceTokenKind.Code, "    indented")]
+   [InlineData("A *word*", SourceTokenKind.Emphasis, "*word*")]
+   [InlineData("A **word**", SourceTokenKind.Strong, "**word**")]
+   [InlineData("A ~~word~~", SourceTokenKind.Strikethrough, "~~word~~")]
+   [InlineData("[label](https://example.invalid)", SourceTokenKind.Link, "[label](https://example.invalid)")]
+   [InlineData("<https://example.invalid>", SourceTokenKind.Link, "<https://example.invalid>")]
+   [InlineData("![image](pic.png)", SourceTokenKind.Image, "![image](pic.png)")]
+   [InlineData("- item", SourceTokenKind.List, "-")]
+   [InlineData("12. item", SourceTokenKind.List, "12.")]
+   [InlineData("- [x] task", SourceTokenKind.List, "[x]")]
+   [InlineData("> quote", SourceTokenKind.Quote, "> quote")]
+   [InlineData("---\nname: literal\n---\nText", SourceTokenKind.Frontmatter, "---\nname: literal\n---")]
+   [InlineData("<script>alert('literal')</script>", SourceTokenKind.Html, "<script>alert('literal')</script>")]
+   [InlineData("A <b>literal</b> word", SourceTokenKind.Html, "<b>")]
+   public void Parse_MarkdownForms_RetainsLiteralSpans(string source, SourceTokenKind kind, string expected)
+   {
+      IReadOnlyList<SourceToken> tokens = MarkdownSourceHighlighting.Parse(source);
+      Assert.Contains(tokens, token => token.Kind == kind && string.Equals(source.Substring(token.Start, token.Length), expected, StringComparison.Ordinal));
+      Assert.All(tokens, token => Assert.InRange(token.Start + token.Length, 1, source.Length));
+   }
+
+
+
+   /// <summary>Parent colors precede child emphasis, while ordinary whitespace, escaped syntax and fences stay literal.</summary>
+   [Fact]
+   public void Parse_NestedHeadingAndEscapes_OrdersOverridesWithoutInventingMarkup()
+   {
+      const string Source = "# **Bold** and *soft*\n\n\\*literal*\n\n```\n# not a heading\n```";
+      IReadOnlyList<SourceToken> tokens = MarkdownSourceHighlighting.Parse(Source);
+      Assert.Equal(SourceTokenKind.Heading, tokens[0].Kind);
+      Assert.Single(tokens, token => token.Kind == SourceTokenKind.Heading);
+      Assert.Single(tokens, token => token.Kind == SourceTokenKind.Strong);
+      Assert.Single(tokens, token => token.Kind == SourceTokenKind.Emphasis);
+      Assert.Empty(MarkdownSourceHighlighting.Parse("  plain 😀 text\r\n\t"));
+      Assert.Empty(MarkdownSourceHighlighting.Parse(""));
+   }
+
+
+
+   /// <summary>The supported size limit and cancellation reject work before parsing, rather than silently truncating source.</summary>
+   [Fact]
+   public void Parse_InvalidOrCancelledInput_RejectsWork()
+   {
+      Assert.Throws<ArgumentNullException>(() => MarkdownSourceHighlighting.Parse(null!));
+      Assert.Throws<ArgumentException>(() => MarkdownSourceHighlighting.Parse(new string('x', MarkdownRenderer.MaximumCharacters + 1)));
+      using var cancellation = new CancellationTokenSource();
+      cancellation.Cancel();
+      Assert.Throws<OperationCanceledException>(() => MarkdownSourceHighlighting.Parse("# Heading", cancellation.Token));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/SourcePaletteTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/SourcePaletteTests.cs
new file mode 100644
index 0000000..e1c5868
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/SourcePaletteTests.cs
@@ -0,0 +1,65 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json.Nodes;
+using MarkdownViewr.Windows.Core.Documents;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Native source colors follow shell mode and document accents without unreadable contrast or theme mutation.</summary>
+public sealed class SourcePaletteTests
+{
+   /// <summary>Every shipped document palette remains readable against both native source backgrounds.</summary>
+   [Theory]
+   [InlineData(false, "#FFFFFF", "#1F1F1F")]
+   [InlineData(true, "#1E1E1E", "#D4D4D4")]
+   public void Create_AllBuiltIns_ContrastsWithShellMode(bool dark, string background, string foreground)
+   {
+      foreach(ReaderTheme theme in ThemeCatalog.BuiltIn)
+      {
+         string original = theme.Json;
+         var palette = new SourcePalette(theme, dark);
+         Assert.Equal(background, palette.Background);
+         Assert.Equal(foreground, palette.Foreground);
+         foreach(SourceTokenKind kind in Enum.GetValues<SourceTokenKind>())
+         {
+            Assert.True(SourcePalette.Contrast(palette.Color(kind), palette.Background) >= 4.5);
+         }
+         Assert.Equal(original, theme.Json);
+      }
+   }
+
+
+
+   /// <summary>Readable custom accents are preserved; matching-background accents blend toward the readable foreground.</summary>
+   [Theory]
+   [InlineData(false, "#000000", "#FFFFFF")]
+   [InlineData(true, "#FFFFFF", "#1E1E1E")]
+   public void Create_CustomAccents_PreservesOrAdjustsColor(bool dark, string readable, string unreadable)
+   {
+      JsonNode json = JsonNode.Parse(ThemeCatalog.Find(null).Json)!;
+      json["colors"]!["heading1"] = readable;
+      json["colors"]!["link"] = unreadable;
+      var palette = new SourcePalette(ReaderTheme.Parse(json.ToJsonString()), dark);
+      Assert.Equal(readable, palette.Color(SourceTokenKind.Heading));
+      Assert.NotEqual(unreadable, palette.Color(SourceTokenKind.Link), StringComparer.Ordinal);
+      Assert.True(SourcePalette.Contrast(palette.Color(SourceTokenKind.Link), palette.Background) >= 4.5);
+      Assert.Throws<KeyNotFoundException>(() => palette.Color((SourceTokenKind)999));
+      Assert.Throws<ArgumentNullException>(() => new SourcePalette(null!, dark));
+   }
+
+
+
+   /// <summary>Contrast uses the standard sRGB luminance extremes and is independent of color ordering.</summary>
+   [Fact]
+   public void Contrast_ReferenceColors_MatchesKnownRatios()
+   {
+      Assert.Equal(21, SourcePalette.Contrast("#000000", "#FFFFFF"), 8);
+      Assert.Equal(21, SourcePalette.Contrast("#FFFFFF", "#000000"), 8);
+      Assert.Equal(1, SourcePalette.Contrast("#123456", "#123456"), 8);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/SourcePaneLayoutTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/SourcePaneLayoutTests.cs
new file mode 100644
index 0000000..603fabd
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/SourcePaneLayoutTests.cs
@@ -0,0 +1,50 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using MarkdownViewr.Windows.Core.Layout;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Checks usable source/document bounds, equal reopening and unconstrained large-window resizing.</summary>
+public sealed class SourcePaneLayoutTests
+{
+   /// <summary>Initial columns remain equal at supported widths, even when there is no measured space yet.</summary>
+   [Theory]
+   [InlineData(0)]
+   [InlineData(-1)]
+   [InlineData(double.NaN)]
+   [InlineData(double.PositiveInfinity)]
+   [InlineData(280)]
+   [InlineData(800)]
+   [InlineData(2000)]
+   public void Fraction_InitialWidth_ReturnsEqualColumns(double available) => Assert.Equal(0.5, SourcePaneLayout.Fraction(available));
+
+
+
+   /// <summary>Invalid ratios recover safely; bounded edges protect both panes and allow source to exceed600px.</summary>
+   [Theory]
+   [InlineData(1000, double.NaN, 0.5)]
+   [InlineData(1000, -10, 0.16)]
+   [InlineData(1000, 10, 0.8)]
+   [InlineData(2000, 0.6, 0.6)]
+   [InlineData(200, 0.9, 0.5)]
+   public void Fraction_PreferredRatio_ProtectsUsableColumns(double available, double preferred, double expected) => Assert.Equal(expected, SourcePaneLayout.Fraction(available, preferred), precision: 8);
+
+
+
+   /// <summary>Left/right movement changes the split in the correct direction, including physical-space clamping.</summary>
+   [Theory]
+   [InlineData(1000, 500, -70, 0.57)]
+   [InlineData(1000, 500, 70, 0.43)]
+   [InlineData(1000, 500, -900, 0.8)]
+   [InlineData(1000, 500, 900, 0.16)]
+   [InlineData(2000, 1000, -200, 0.6)]
+   [InlineData(0, 500, 70, 0.5)]
+   [InlineData(double.NaN, 500, 70, 0.5)]
+   [InlineData(1000, double.NaN, 70, 0.5)]
+   [InlineData(1000, 500, double.NaN, 0.5)]
+   public void Resize_Drag_RespectsDirectionAndBounds(double available, double sourceWidth, double delta, double expected) => Assert.Equal(expected, SourcePaneLayout.Resize(available, sourceWidth, delta), precision: 8);
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/SourcePreferencesTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/SourcePreferencesTests.cs
new file mode 100644
index 0000000..84a2f6c
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/SourcePreferencesTests.cs
@@ -0,0 +1,26 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Invalid saved widths cannot hide the reading surface or prevent startup.</summary>
+public sealed class SourcePreferencesTests
+{
+   /// <summary>Both visibility choices retain bounded widths; nonfinite values restore the default.</summary>
+   [Theory]
+   [InlineData(true, double.NaN, 320)]
+   [InlineData(false, double.PositiveInfinity, 320)]
+   [InlineData(true, -100, 160)]
+   [InlineData(false, 900, 600)]
+   [InlineData(true, 280, 280)]
+   public void Sanitize_SourcePreferences_RetainsVisibilityAndClampsWidth(bool visible, double width, double expected)
+   {
+      var settings = new AppSettings { ShowSource = visible, SourceWidth = width };
+      settings.Sanitize();
+      Assert.Equal(visible, settings.ShowSource);
+      Assert.Equal(expected, settings.SourceWidth);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/ThemeEditingTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/ThemeEditingTests.cs
new file mode 100644
index 0000000..b964fe9
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/ThemeEditingTests.cs
@@ -0,0 +1,162 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Native theme drafts cannot mutate originals, lose schema fields or bypass the shared CSS validation.</summary>
+public sealed class ThemeEditingTests
+{
+   /// <summary>All typography and palette edits persist together while unrelated metadata and the original remain intact.</summary>
+   [Fact]
+   public void Edit_AllTypographyAndPalette_PreservesSchemaAndOriginal()
+   {
+      JsonNode source = JsonNode.Parse(ThemeCatalog.Find(null).Json)!;
+      source["metadata"] = new JsonObject { ["author"] = "Owned fixture", ["note"] = "Keep this" };
+      var original = ReaderTheme.Parse(source.ToJsonString());
+      string originalJson = original.Json;
+      var fonts = new Dictionary<string, string>(StringComparer.Ordinal)
+      {
+         ["body"] = " Consolas ",
+         ["heading"] = " Segoe UI ",
+         ["code"] = " Cascadia Code ",
+      };
+      var sizes = new Dictionary<string, double>(StringComparer.Ordinal)
+      {
+         ["baseFontSize"] = 24,
+         ["h1Size"] = 56,
+         ["h2Size"] = 48,
+         ["h3Size"] = 44,
+         ["h4Size"] = 40,
+         ["h5Size"] = 38,
+         ["h6Size"] = 36,
+         ["codeFontSize"] = 20,
+         ["lineHeight"] = 2,
+      };
+      var colors = new Dictionary<string, string>(StringComparer.Ordinal) { ["background"] = " #123456 ", ["highlightBackground"] = "#654321", ["highlightText"] = "#eeeeee" };
+      ReaderTheme edited = original.Edit(" Complete typography ", fonts, sizes, colors, "p { letter-spacing: 1px; }");
+      Assert.Equal(originalJson, original.Json);
+      Assert.Equal("Complete typography", edited.Name);
+      using var result = JsonDocument.Parse(edited.Json);
+      Assert.Equal("Owned fixture", result.RootElement.GetProperty("metadata").GetProperty("author").GetString());
+      foreach((string key, string value) in fonts)
+      {
+         Assert.Equal(value.Trim(), result.RootElement.GetProperty("fonts").GetProperty(key).GetString());
+      }
+      foreach((string key, double value) in sizes)
+      {
+         Assert.Equal(value, result.RootElement.GetProperty("sizes").GetProperty(key).GetDouble());
+         Assert.Contains("--" + key + ":" + value + (string.Equals(key, "lineHeight", StringComparison.Ordinal) ? ";" : "px;"), edited.Styles, StringComparison.Ordinal);
+      }
+      foreach((string key, string value) in colors)
+      {
+         Assert.Equal(value.Trim(), result.RootElement.GetProperty("colors").GetProperty(key).GetString());
+      }
+      Assert.Contains("p { letter-spacing: 1px; }", edited.Styles, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Partial drafts preserve every unedited typography and palette field rather than replacing schema groups.</summary>
+   [Fact]
+   public void Edit_PartialDraft_PreservesUneditedFields()
+   {
+      ReaderTheme original = ThemeCatalog.Find("Nord");
+      ReaderTheme edited = original.Edit(original.Name, new Dictionary<string, string>(StringComparer.Ordinal) { ["body"] = "Consolas" }, new Dictionary<string, double>(StringComparer.Ordinal), new Dictionary<string, string>(StringComparer.Ordinal), "");
+      using var before = JsonDocument.Parse(original.Json);
+      using var after = JsonDocument.Parse(edited.Json);
+      Assert.Equal(before.RootElement.GetProperty("fonts").GetProperty("heading").GetString(), after.RootElement.GetProperty("fonts").GetProperty("heading").GetString());
+      Assert.True(JsonElement.DeepEquals(before.RootElement.GetProperty("sizes"), after.RootElement.GetProperty("sizes")));
+      Assert.True(JsonElement.DeepEquals(before.RootElement.GetProperty("colors"), after.RootElement.GetProperty("colors")));
+   }
+
+
+
+   /// <summary>Invalid numeric drafts fail before saving and leave the bundled original usable for a corrected retry.</summary>
+   [Theory]
+   [InlineData("baseFontSize", 5)]
+   [InlineData("h1Size", 97)]
+   [InlineData("lineHeight", 0.4)]
+   [InlineData("lineHeight", 4.1)]
+   [InlineData("codeFontSize", double.NaN)]
+   [InlineData("h2Size", double.PositiveInfinity)]
+   [InlineData("h3Size", double.NegativeInfinity)]
+   public void Edit_InvalidSize_RejectsWithoutMutatingOriginal(string key, double value)
+   {
+      ReaderTheme original = ThemeCatalog.Find(null);
+      string before = original.Json;
+      Assert.Throws<JsonException>(() => original.Edit("Draft", new Dictionary<string, string>(StringComparer.Ordinal), new Dictionary<string, double>(StringComparer.Ordinal) { [key] = value }, new Dictionary<string, string>(StringComparer.Ordinal), ""));
+      Assert.Equal(before, original.Json);
+      Assert.Equal("Corrected", original.Edit("Corrected", new Dictionary<string, string>(StringComparer.Ordinal), new Dictionary<string, double>(StringComparer.Ordinal), new Dictionary<string, string>(StringComparer.Ordinal), "").Name);
+   }
+
+
+
+   /// <summary>Unknown or case-confused fields cannot silently bypass the known schema and later disappear at rendering time.</summary>
+   [Theory]
+   [InlineData("fonts")]
+   [InlineData("sizes")]
+   [InlineData("colors")]
+   public void Edit_UnknownField_RejectsDraft(string group)
+   {
+      var fonts = new Dictionary<string, string>(StringComparer.Ordinal);
+      var sizes = new Dictionary<string, double>(StringComparer.Ordinal);
+      var colors = new Dictionary<string, string>(StringComparer.Ordinal);
+      if(string.Equals(group, "fonts", StringComparison.Ordinal))
+      {
+         fonts.Add("Body", "Consolas");
+      }
+      else if(string.Equals(group, "sizes", StringComparison.Ordinal))
+      {
+         sizes.Add("BaseFontSize", 18);
+      }
+      else
+      {
+         colors.Add("Background", "#123456");
+      }
+      Assert.Equal(group, Assert.Throws<ArgumentException>(() => ThemeCatalog.Find(null).Edit("Draft", fonts, sizes, colors, "")).ParamName);
+   }
+
+
+
+   /// <summary>Null draft inputs report explicit argument errors rather than damaging a saved theme or crashing the editor.</summary>
+   [Theory]
+   [InlineData("name")]
+   [InlineData("fonts")]
+   [InlineData("sizes")]
+   [InlineData("colors")]
+   [InlineData("customCss")]
+   public void Edit_NullDraft_ReportsExplicitContract(string field)
+   {
+      var fonts = new Dictionary<string, string>(StringComparer.Ordinal);
+      var sizes = new Dictionary<string, double>(StringComparer.Ordinal);
+      var colors = new Dictionary<string, string>(StringComparer.Ordinal);
+      ArgumentNullException exception = Assert.Throws<ArgumentNullException>(() => ThemeCatalog.Find(null).Edit(
+         string.Equals(field, "name", StringComparison.Ordinal) ? null! : "Draft",
+         string.Equals(field, "fonts", StringComparison.Ordinal) ? null! : fonts,
+         string.Equals(field, "sizes", StringComparison.Ordinal) ? null! : sizes,
+         string.Equals(field, "colors", StringComparison.Ordinal) ? null! : colors,
+         string.Equals(field, "customCss", StringComparison.Ordinal) ? null! : ""));
+      Assert.Equal(field, exception.ParamName);
+   }
+
+
+
+   /// <summary>Edited font/CSS strings pass through the existing HTML-escape boundary; authored color values still require hex notation.</summary>
+   [Fact]
+   public void Edit_HostileStrings_PreservesStyleBoundary()
+   {
+      ReaderTheme original = ThemeCatalog.Find(null);
+      var fonts = new Dictionary<string, string>(StringComparer.Ordinal) { ["body"] = "Font';} <script>" };
+      ReaderTheme edited = original.Edit("Safe", fonts, new Dictionary<string, double>(StringComparer.Ordinal), new Dictionary<string, string>(StringComparer.Ordinal), "</style><script>evil()</script>");
+      Assert.DoesNotContain("<", edited.Styles, StringComparison.Ordinal);
+      Assert.Contains("\\3c /style>", edited.Styles, StringComparison.Ordinal);
+      Assert.Throws<JsonException>(() => original.Edit("Invalid", fonts, new Dictionary<string, double>(StringComparer.Ordinal), new Dictionary<string, string>(StringComparer.Ordinal) { ["background"] = "red" }, ""));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/ThemeManagementTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/ThemeManagementTests.cs
new file mode 100644
index 0000000..5a47006
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/ThemeManagementTests.cs
@@ -0,0 +1,243 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using MarkdownViewr.Windows.Core.Navigation;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Theme list drafts preserve reference ordering, disabled/deleted state and edited palettes during restoration.</summary>
+public sealed class ThemeManagementTests
+{
+   /// <summary>Older settings retain all bundled choices and the original default.</summary>
+   [Fact]
+   public void All_DefaultOrOlderJson_RetainsCatalog()
+   {
+      AppSettings settings = JsonSerializer.Deserialize("{}", AppSettingsContext.Default.AppSettings)!;
+      settings.Sanitize();
+      Assert.Equal(20, ThemeManagement.All(settings).Count);
+      Assert.Equal(20, ThemeManagement.Enabled(settings).Count);
+      Assert.Equal("Catppuccin Mocha", ThemeManagement.Active(settings).Name);
+      Assert.Empty(settings.ThemeOrder);
+      Assert.Empty(settings.DisabledThemes);
+      Assert.Empty(settings.DeletedBuiltInThemes);
+   }
+
+
+
+   /// <summary>Overrides retain exact JSON, disabled choices stay in the manager and unknown order entries do not hide themes.</summary>
+   [Fact]
+   public void All_OrderOverridesDisabledDeleted_ProjectsVisibleChoices()
+   {
+      ReaderTheme nord = Rename(ThemeCatalog.Find("Nord"), "Nord", "p { color: #123456; }");
+      var settings = new AppSettings { UserThemes = [nord.Json], ThemeOrder = ["Missing", "Nord", "GitHub Light"], DisabledThemes = ["Nord"], DeletedBuiltInThemes = ["Dracula"] };
+      IReadOnlyList<ReaderTheme> all = ThemeManagement.All(settings);
+      Assert.Equal("Nord", all[0].Name);
+      Assert.Equal(nord.Json, all[0].Json);
+      Assert.Equal("GitHub Light", all[1].Name);
+      Assert.DoesNotContain(all, theme => string.Equals(theme.Name, "Dracula", StringComparison.Ordinal));
+      Assert.DoesNotContain(ThemeManagement.Enabled(settings), theme => string.Equals(theme.Name, "Nord", StringComparison.Ordinal));
+      Assert.Equal("GitHub Light", ThemeManagement.Active(new AppSettings { DocumentTheme = "Missing", ThemeOrder = ["GitHub Light"] }).Name);
+   }
+
+
+
+   /// <summary>Moves wrap neither boundary and retain copied arrays for cancelled drafts.</summary>
+   [Theory]
+   [InlineData("Catppuccin Latte", true, "Catppuccin Latte")]
+   [InlineData("Zenburn", false, "Catppuccin Latte")]
+   [InlineData("Missing", true, "Catppuccin Latte")]
+   [InlineData("Catppuccin Latte", false, "Catppuccin Mocha")]
+   [InlineData("Dracula", true, "Catppuccin Latte")]
+   public void Move_BoundaryOrVisibleChoice_PreservesOriginal(string name, bool up, string expected)
+   {
+      var settings = new AppSettings();
+      AppSettings draft = ThemeManagement.Move(settings, name, up);
+      Assert.Empty(settings.ThemeOrder);
+      string first = ThemeManagement.All(draft)[0].Name;
+      Assert.Equal(expected, first);
+      Assert.NotSame(settings.UserThemes, draft.UserThemes);
+   }
+
+
+
+   /// <summary>Disabled choices remain in order and cycling wraps over enabled choices in either direction.</summary>
+   [Fact]
+   public void Cycle_EnabledOrder_WrapsAndSkipsDisabled()
+   {
+      var settings = new AppSettings { ThemeOrder = ["Nord", "GitHub Light", "Catppuccin Mocha"], DocumentTheme = "Nord", DisabledThemes = ThemeCatalog.BuiltIn.Where(theme => theme.Name is not ("Nord" or "GitHub Light")).Select(theme => theme.Name).ToArray() };
+      Assert.Equal("GitHub Light", ThemeManagement.Cycle(settings, forward: true)!.Name);
+      Assert.Equal("GitHub Light", ThemeManagement.Cycle(settings, forward: false)!.Name);
+      settings.DocumentTheme = "GitHub Light";
+      Assert.Equal("Nord", ThemeManagement.Cycle(settings, forward: true)!.Name);
+      settings.DocumentTheme = "Missing";
+      Assert.Equal("GitHub Light", ThemeManagement.Cycle(settings, forward: true)!.Name);
+      AppSettings disabled = ThemeManagement.SetEnabled(settings, "Nord", enabled: false);
+      Assert.Contains("Nord", disabled.DisabledThemes, StringComparer.Ordinal);
+      Assert.Equal("GitHub Light", disabled.DocumentTheme);
+      Assert.Equal("GitHub Light", ThemeManagement.Cycle(disabled, forward: false)!.Name);
+      Assert.DoesNotContain("Nord", settings.DisabledThemes, StringComparer.Ordinal);
+      AppSettings enabled = ThemeManagement.SetEnabled(disabled, "Nord", enabled: true);
+      Assert.DoesNotContain("Nord", enabled.DisabledThemes, StringComparer.Ordinal);
+      Assert.Equal(settings.ThemeOrder, enabled.ThemeOrder);
+      Assert.Equal(enabled.DisabledThemes, ThemeManagement.SetEnabled(enabled, "Unknown", enabled: false).DisabledThemes);
+   }
+
+
+
+   /// <summary>An intentionally empty list has a safe fallback and no cycle command; re-enabling restores a choice.</summary>
+   [Fact]
+   public void SetEnabled_AllDisabled_RetainsSafeFallback()
+   {
+      var settings = new AppSettings { DisabledThemes = ThemeCatalog.BuiltIn.Select(theme => theme.Name).ToArray() };
+      Assert.Empty(ThemeManagement.Enabled(settings));
+      Assert.Equal("Catppuccin Mocha", ThemeManagement.Active(settings).Name);
+      Assert.Null(ThemeManagement.Cycle(settings, forward: true));
+      AppSettings enabled = ThemeManagement.SetEnabled(settings, "Nord", enabled: true);
+      Assert.Equal("Nord", ThemeManagement.Active(enabled).Name);
+      AppSettings disabled = ThemeManagement.SetEnabled(enabled, "Nord", enabled: false);
+      Assert.Equal(20, disabled.DisabledThemes.Length);
+      Assert.Equal(20, ThemeManagement.SetEnabled(disabled, "Nord", enabled: false).DisabledThemes.Length);
+   }
+
+
+
+   /// <summary>Delete removes an override/custom draft and only bundled names receive a restorable tombstone.</summary>
+   [Theory]
+   [InlineData("Nord", true)]
+   [InlineData("Owned custom", false)]
+   [InlineData("Unknown", false)]
+   public void Delete_OverrideCustomOrUnknown_PreservesOriginalAndRestorability(string name, bool builtIn)
+   {
+      ReaderTheme theme = Rename(ThemeCatalog.Find("Nord"), name);
+      var settings = new AppSettings { UserThemes = [theme.Json], DocumentTheme = name, ThemeOrder = [name, "GitHub Light"], DisabledThemes = [name] };
+      AppSettings draft = ThemeManagement.Delete(settings, name);
+      Assert.Empty(draft.UserThemes);
+      Assert.DoesNotContain(name, draft.ThemeOrder, StringComparer.Ordinal);
+      Assert.DoesNotContain(name, draft.DisabledThemes, StringComparer.Ordinal);
+      Assert.Equal(builtIn, draft.DeletedBuiltInThemes.Contains(name, StringComparer.Ordinal));
+      Assert.DoesNotContain(ThemeManagement.All(draft), item => string.Equals(item.Name, name, StringComparison.Ordinal));
+      Assert.Equal("GitHub Light", draft.DocumentTheme);
+      Assert.Single(settings.UserThemes);
+      Assert.Single(settings.DisabledThemes);
+      Assert.Empty(settings.DeletedBuiltInThemes);
+      Assert.Equal(draft.DeletedBuiltInThemes, ThemeManagement.Delete(draft, name).DeletedBuiltInThemes);
+   }
+
+
+
+   /// <summary>Restoration preserves edits/metadata/CSS in collision-safe custom copies and follows the renamed active/order entries.</summary>
+   [Fact]
+   public void RestoreBuiltIns_OverridesAndCollisions_PreservesEditsAsCustomCopies()
+   {
+      ReaderTheme original = ThemeCatalog.Find("Nord");
+      JsonNode source = JsonNode.Parse(original.Json)!;
+      source["metadata"] = new JsonObject { ["owner"] = "fixture" };
+      var edited = ReaderTheme.Parse(source.ToJsonString());
+      ReaderTheme second = Rename(original, "Nord (2)");
+      ReaderTheme third = Rename(original, "Nord (3)");
+      var settings = new AppSettings { UserThemes = [edited.Json, second.Json, third.Json], DocumentTheme = "Nord", ThemeOrder = ["Nord", "GitHub Light"], DisabledThemes = ["Nord"], DeletedBuiltInThemes = ["Dracula"] };
+      AppSettings restored = ThemeManagement.RestoreBuiltIns(settings);
+      Assert.Equal("Nord (4)", restored.DocumentTheme);
+      Assert.Equal(new[] { "Nord (4)", "GitHub Light" }, restored.ThemeOrder);
+      Assert.Empty(restored.DisabledThemes);
+      Assert.Empty(restored.DeletedBuiltInThemes);
+      Assert.Equal(23, ThemeManagement.Enabled(restored).Count);
+      ReaderTheme copy = ThemeManagement.Active(restored);
+      using var json = JsonDocument.Parse(copy.Json);
+      Assert.Equal("fixture", json.RootElement.GetProperty("metadata").GetProperty("owner").GetString());
+      Assert.Contains(ThemeManagement.All(restored), theme => string.Equals(theme.Json, original.Json, StringComparison.Ordinal));
+      Assert.Equal(3, settings.UserThemes.Length);
+      Assert.Equal("Nord", settings.DocumentTheme);
+      Assert.Equal(restored.UserThemes, ThemeManagement.RestoreBuiltIns(restored).UserThemes);
+   }
+
+
+
+   /// <summary>Restoring without overrides only clears deletion/disable state and leaves custom selection intact.</summary>
+   [Fact]
+   public void RestoreBuiltIns_CustomSelectionAndNoOverrides_RetainsNames()
+   {
+      ReaderTheme custom = Rename(ThemeCatalog.Find(null), "Owned custom", "body { color: #123456; }");
+      var settings = new AppSettings { UserThemes = [custom.Json], DocumentTheme = custom.Name, ThemeOrder = [custom.Name], DisabledThemes = ["Nord"], DeletedBuiltInThemes = ["Dracula"] };
+      AppSettings restored = ThemeManagement.RestoreBuiltIns(settings);
+      Assert.Equal(custom.Json, Assert.Single(restored.UserThemes));
+      Assert.Equal(custom.Name, restored.DocumentTheme);
+      Assert.Equal(custom.Name, Assert.Single(restored.ThemeOrder));
+      Assert.Equal(20, ThemeManagement.Enabled(ThemeManagement.RestoreBuiltIns(new AppSettings())).Count);
+   }
+
+
+
+   /// <summary>Corrupt arrays repair independently with bounded, case-sensitive names and no control characters.</summary>
+   [Fact]
+   public void SanitizeNames_InvalidDuplicateOrOversized_RepairsSavedLists()
+   {
+      Assert.Empty(ThemeManagement.SanitizeNames(null));
+      Assert.Equal(new[] { "Nord", "nord" }, ThemeManagement.SanitizeNames([null, "", " ", "Nord", "Nord", "nord", "bad\nname", new string('x', 81)]));
+      Assert.Equal(512, ThemeManagement.SanitizeNames(Enumerable.Range(0, 600).Select(number => "Theme " + number.ToString(System.Globalization.CultureInfo.InvariantCulture))).Length);
+      var settings = new AppSettings { ThemeOrder = ["Nord", "Nord"], DisabledThemes = null!, DeletedBuiltInThemes = ["bad\nname"] };
+      settings.Sanitize();
+      Assert.Equal("Nord", Assert.Single(settings.ThemeOrder));
+      Assert.Empty(settings.DisabledThemes);
+      Assert.Empty(settings.DeletedBuiltInThemes);
+   }
+
+
+
+   /// <summary>A cancelled copied manager and a later sibling-local save cannot restore old shared theme fields.</summary>
+   [Fact]
+   public void SettingsChanges_ThemeDraftAndSiblingMerge_PreservesIndependentFields()
+   {
+      var before = new AppSettings();
+      AppSettings edited = ThemeManagement.SetEnabled(ThemeManagement.Move(before, "Nord", up: true), "Dracula", enabled: false);
+      var current = new AppSettings { GlobalCss = "body { color: #123456; }", ShowSource = true };
+      AppSettings merged = SettingsChanges.Merge(current, before, edited);
+      Assert.True(merged.ShowSource);
+      Assert.Equal(current.GlobalCss, merged.GlobalCss);
+      Assert.Contains("Dracula", merged.DisabledThemes, StringComparer.Ordinal);
+      Assert.Empty(before.DisabledThemes);
+      AppSettings staleLocal = SettingsChanges.Copy(before);
+      staleLocal.ShowOutline = true;
+      AppSettings saved = SettingsChanges.Merge(merged, before, staleLocal);
+      Assert.True(saved.ShowOutline);
+      Assert.Equal(merged.ThemeOrder, saved.ThemeOrder);
+      Assert.Equal(merged.DisabledThemes, saved.DisabledThemes);
+      AppSettings roundTrip = JsonSerializer.Deserialize(JsonSerializer.Serialize(saved, AppSettingsContext.Default.AppSettings), AppSettingsContext.Default.AppSettings)!;
+      Assert.Equal(saved.ThemeOrder, roundTrip.ThemeOrder);
+      Assert.Equal(saved.DisabledThemes, roundTrip.DisabledThemes);
+   }
+
+
+
+   /// <summary>Windows reference cycling keys operate only on owned reading focus and exact Ctrl+Shift arrows.</summary>
+   [Theory]
+   [InlineData('\u2193', true, true, true, false, false, ReaderCommand.NextTheme)]
+   [InlineData('\u2191', true, true, true, false, false, ReaderCommand.PreviousTheme)]
+   [InlineData('\u2193', false, true, true, false, false, ReaderCommand.None)]
+   [InlineData('\u2191', true, false, true, false, false, ReaderCommand.None)]
+   [InlineData('\u2193', true, true, false, false, false, ReaderCommand.None)]
+   [InlineData('\u2191', true, true, true, true, false, ReaderCommand.None)]
+   [InlineData('\u2193', true, true, true, false, true, ReaderCommand.None)]
+   public void Resolve_CycleKeyAndFocusGuards_LeavesOtherInputAlone(char character, bool focused, bool control, bool shift, bool alt, bool windows, ReaderCommand expected)
+      => Assert.Equal(expected, new ReaderKeyboard().Resolve(new ReaderKey(character, control, shift, alt, windows), focused, 0));
+
+
+
+   /// <summary>Fixture renaming uses the real validated format, retaining every field.</summary>
+   private static ReaderTheme Rename(ReaderTheme theme, string name, string? css = null)
+   {
+      JsonNode json = JsonNode.Parse(theme.Json)!;
+      json["name"] = name;
+      if(css is not null)
+      {
+         json["customCSS"] = css;
+      }
+      return ReaderTheme.Parse(json.ToJsonString());
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/ThemeTransferTests.cs b/tests/MarkdownViewr.Windows.Core.Tests/ThemeTransferTests.cs
new file mode 100644
index 0000000..d572944
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.Core.Tests/ThemeTransferTests.cs
@@ -0,0 +1,252 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.Core.Tests;
+
+/// <summary>Actual JSON bytes, exact conflict choices and copied editor state cannot bypass the existing schema/style boundary.</summary>
+public sealed class ThemeTransferTests
+{
+   /// <summary>Every shipped JSON palette round-trips through the same bounded UTF-8 reader used by the native picker.</summary>
+   public static IEnumerable<object[]> BundledJson => ThemeCatalog.BuiltIn.Select(theme => new object[] { theme.Json });
+
+
+
+   /// <summary>Exported bytes preserve all original fields and leave the caller-owned stream available.</summary>
+   [Theory]
+   [MemberData(nameof(BundledJson))]
+   public async Task ReadAsync_ExportedBundledJson_PreservesExactSchema(string json)
+   {
+      using var stream = new MemoryStream(Encoding.UTF8.GetBytes(json));
+      ReaderTheme read = await ThemeJson.ReadAsync(stream);
+      Assert.Equal(json, read.Json);
+      Assert.Equal(1, read.SchemaVersion);
+      Assert.True(stream.CanRead);
+      Assert.EndsWith(".json", ThemeJson.SuggestedFileName(read), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Common Windows JSON BOM encodings preserve Unicode text and are exported later as valid UTF-8.</summary>
+   [Theory]
+   [InlineData(false)]
+   [InlineData(true)]
+   public async Task ReadAsync_BomUtf8OrUtf16_PreservesUnicode(bool utf16)
+   {
+      string json = ThemeCatalog.Find(null).Rename("Owned café").Json;
+      Encoding encoding = utf16 ? Encoding.Unicode : Encoding.UTF8;
+      using var stream = new MemoryStream(encoding.GetPreamble().Concat(encoding.GetBytes(json)).ToArray());
+      Assert.Equal(json, (await ThemeJson.ReadAsync(stream)).Json);
+   }
+
+
+
+
+   /// <summary>The exact maximum is accepted, but a larger stream is rejected without reading the whole selected file.</summary>
+   [Fact]
+   public async Task ReadAsync_ExactBoundAndOversized_AllocatesOnlyBoundedText()
+   {
+      string json = ThemeCatalog.Find(null).Json;
+      using var exact = new MemoryStream(Encoding.UTF8.GetBytes(json.PadRight(ReaderTheme.MaximumCharacters)));
+      Assert.Equal(ReaderTheme.MaximumCharacters, (await ThemeJson.ReadAsync(exact)).Json.Length);
+      using var oversized = new MemoryStream(Encoding.UTF8.GetBytes(json.PadRight(2 * 1024 * 1024)));
+      await Assert.ThrowsAsync<JsonException>(() => ThemeJson.ReadAsync(oversized));
+      Assert.InRange(oversized.Position, ReaderTheme.MaximumCharacters + 1, ReaderTheme.MaximumCharacters + 8192);
+      Assert.True(oversized.CanRead);
+   }
+
+
+
+   /// <summary>Malformed bytes/JSON, cancellation and null sources never produce an importable theme.</summary>
+   [Fact]
+   public async Task ReadAsync_InvalidBytesJsonOrCancellation_RejectsInput()
+   {
+      using var malformed = new MemoryStream([0xFF, 0x80, 0xFF]);
+      await Assert.ThrowsAsync<DecoderFallbackException>(() => ThemeJson.ReadAsync(malformed));
+      using var json = new MemoryStream(Encoding.UTF8.GetBytes("{invalid"));
+      await Assert.ThrowsAnyAsync<JsonException>(() => ThemeJson.ReadAsync(json));
+      using var cancelled = new MemoryStream(Encoding.UTF8.GetBytes(ThemeCatalog.Find(null).Json));
+      await Assert.ThrowsAnyAsync<OperationCanceledException>(() => ThemeJson.ReadAsync(cancelled, new CancellationToken(canceled: true)));
+      await Assert.ThrowsAsync<ArgumentNullException>(() => ThemeJson.ReadAsync(null!));
+   }
+
+
+
+   /// <summary>Positive newer schemas preserve metadata and require explicit consent before any copied import is saved.</summary>
+   [Fact]
+   public async Task Import_NewerCompatibleSchema_RequiresApprovalAndRetainsVersion()
+   {
+      JsonNode source = JsonNode.Parse(ThemeCatalog.Find(null).Json)!;
+      source["name"] = "Newer owned theme";
+      source["schemaVersion"] = 2;
+      source["metadata"] = new JsonObject { ["futureField"] = "retained" };
+      string json = source.ToJsonString();
+      Assert.Throws<JsonException>(() => ReaderTheme.Parse(json));
+      using var stream = new MemoryStream(Encoding.UTF8.GetBytes(json));
+      ReaderTheme theme = await ThemeJson.ReadAsync(stream);
+      Assert.Equal(2, theme.SchemaVersion);
+      var settings = new AppSettings();
+      Assert.Throws<InvalidOperationException>(() => ThemeManagement.Import(settings, theme));
+      Assert.Empty(settings.UserThemes);
+      AppSettings imported = ThemeManagement.Import(settings, theme, approveNewerSchema: true);
+      Assert.Equal(json, Assert.Single(imported.UserThemes));
+      imported.Sanitize();
+      Assert.Equal(json, Assert.Single(imported.UserThemes));
+      ReaderTheme saved = ThemeManagement.All(imported).Single(item => string.Equals(item.Name, theme.Name, StringComparison.Ordinal));
+      ReaderTheme renamed = saved.Rename("Renamed future");
+      Assert.Equal(2, renamed.SchemaVersion);
+      Assert.Equal(2, renamed.Edit(renamed.Name, new Dictionary<string, string>(StringComparer.Ordinal), new Dictionary<string, double>(StringComparer.Ordinal), new Dictionary<string, string>(StringComparer.Ordinal), "").SchemaVersion);
+      using var fields = JsonDocument.Parse(renamed.Json);
+      Assert.Equal("retained", fields.RootElement.GetProperty("metadata").GetProperty("futureField").GetString());
+      AppSettings edited = ThemeManagement.SaveEdited(imported, saved, renamed);
+      Assert.Equal("Renamed future", edited.DocumentTheme);
+      Assert.Equal(2, ThemeManagement.Active(edited).SchemaVersion);
+   }
+
+
+
+   /// <summary>Newer version support never accepts invalid versions or malicious known fields.</summary>
+   [Theory]
+   [InlineData("schemaVersion", "0")]
+   [InlineData("schemaVersion", "-1")]
+   [InlineData("schemaVersion", "1.5")]
+   [InlineData("schemaVersion", "\"2\"")]
+   [InlineData("background", "\"url(https://attacker.invalid)\"")]
+   [InlineData("baseFontSize", "1000")]
+   public void ParseCompatible_InvalidVersionOrStyle_RejectsEveryKnownBoundary(string field, string value)
+   {
+      JsonNode source = JsonNode.Parse(ThemeCatalog.Find(null).Json)!;
+      source["schemaVersion"] = 2;
+      JsonNode target = string.Equals(field, "background", StringComparison.Ordinal) ? source["colors"]! : string.Equals(field, "baseFontSize", StringComparison.Ordinal) ? source["sizes"]! : source;
+      target[field] = JsonNode.Parse(value);
+      Assert.Throws<JsonException>(() => ReaderTheme.ParseCompatible(source.ToJsonString()));
+   }
+
+
+
+   /// <summary>Overwrite/keep-both/skip have distinct copied results and never mutate the bundled palette or original preferences.</summary>
+   [Theory]
+   [InlineData(ThemeImportResolution.Overwrite, "Nord", 1)]
+   [InlineData(ThemeImportResolution.KeepBoth, "Nord (2)", 1)]
+   [InlineData(ThemeImportResolution.Skip, "", 0)]
+   public void Import_BuiltInConflict_PreservesExactChoice(ThemeImportResolution resolution, string name, int count)
+   {
+      ReaderTheme original = ThemeCatalog.Find("Nord");
+      ReaderTheme incoming = original.Edit(original.Name, new Dictionary<string, string>(StringComparer.Ordinal), new Dictionary<string, double>(StringComparer.Ordinal), new Dictionary<string, string>(StringComparer.Ordinal) { ["background"] = "#112233" }, "p { color: #123456; }");
+      var settings = new AppSettings { DisabledThemes = ["Nord"], ThemeOrder = ["Nord"], GlobalCss = "retained" };
+      AppSettings draft = ThemeManagement.Import(settings, incoming, resolution);
+      Assert.Empty(settings.UserThemes);
+      Assert.Equal(count, draft.UserThemes.Length);
+      Assert.Equal(settings.DocumentTheme, draft.DocumentTheme);
+      Assert.Equal(settings.DisabledThemes, draft.DisabledThemes);
+      Assert.Equal(settings.ThemeOrder, draft.ThemeOrder);
+      Assert.Equal(settings.GlobalCss, draft.GlobalCss);
+      if(count > 0)
+      {
+         var imported = ReaderTheme.Parse(Assert.Single(draft.UserThemes));
+         Assert.Equal(name, imported.Name);
+         Assert.Contains("--background:#112233;", imported.Styles, StringComparison.Ordinal);
+         Assert.Contains("p { color: #123456; }", imported.Styles, StringComparison.Ordinal);
+      }
+      Assert.DoesNotContain("#112233", original.Json, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Batch imports reserve prior names, overwrite only matching JSON and can revive a deliberately deleted bundled choice.</summary>
+   [Fact]
+   public void Import_BatchCollisionsOverwriteAndDeleted_PreservesUnrelatedThemes()
+   {
+      ReaderTheme nord = ThemeCatalog.Find("Nord");
+      ReaderTheme custom = nord.Rename("Owned theme");
+      var settings = new AppSettings { UserThemes = [custom.Json], DeletedBuiltInThemes = ["Dracula"] };
+      AppSettings first = ThemeManagement.Import(settings, nord);
+      AppSettings second = ThemeManagement.Import(first, nord);
+      Assert.Equal(new[] { "Owned theme", "Nord (2)", "Nord (3)" }, second.UserThemes.Select(json => ReaderTheme.Parse(json).Name), StringComparer.Ordinal);
+      ReaderTheme changed = custom.Rename(custom.Name).Edit(custom.Name, new Dictionary<string, string>(StringComparer.Ordinal), new Dictionary<string, double>(StringComparer.Ordinal), new Dictionary<string, string>(StringComparer.Ordinal), "p { color: #123456; }");
+      AppSettings replaced = ThemeManagement.Import(second, changed, ThemeImportResolution.Overwrite);
+      Assert.Equal(3, replaced.UserThemes.Length);
+      Assert.Equal(changed.Json, ThemeManagement.All(replaced).Single(theme => string.Equals(theme.Name, custom.Name, StringComparison.Ordinal)).Json);
+      AppSettings revived = ThemeManagement.Import(replaced, ThemeCatalog.Find("Dracula"));
+      Assert.Empty(revived.DeletedBuiltInThemes);
+      Assert.Contains(ThemeManagement.All(revived), theme => string.Equals(theme.Name, "Dracula", StringComparison.Ordinal));
+      Assert.Throws<ArgumentOutOfRangeException>(() => ThemeManagement.Import(settings, nord, (ThemeImportResolution)99));
+      Assert.Throws<ArgumentNullException>(() => ThemeManagement.Import(settings, null!));
+   }
+
+
+
+   /// <summary>New/copy editor drafts use unique bounded names; cancelled copies retain disabled state and original metadata.</summary>
+   [Fact]
+   public void NewAndCopy_ExistingOrLongNames_ProduceIndependentValidatedDrafts()
+   {
+      var settings = new AppSettings();
+      ReaderTheme created = ThemeManagement.NewTheme(settings);
+      Assert.Equal("New theme", created.Name);
+      AppSettings first = ThemeManagement.Import(settings, created);
+      Assert.Equal("New theme (2)", ThemeManagement.NewTheme(first).Name);
+      ReaderTheme original = ThemeCatalog.Find("Nord");
+      ReaderTheme copy = ThemeManagement.CopyTheme(first, original);
+      Assert.Equal("Nord Copy", copy.Name);
+      AppSettings next = ThemeManagement.Import(first, copy);
+      Assert.Equal("Nord Copy (2)", ThemeManagement.CopyTheme(next, original).Name);
+      ReaderTheme longName = original.Rename(new string('x', 80));
+      Assert.Equal(80, ThemeManagement.CopyTheme(settings, longName).Name.Length);
+      Assert.Empty(settings.UserThemes);
+      Assert.Throws<ArgumentNullException>(() => ThemeManagement.CopyTheme(settings, null!));
+   }
+
+
+
+   /// <summary>Native editor renaming cannot silently overwrite another palette, while in-place edits select/enable a copied draft.</summary>
+   [Fact]
+   public void SaveEdited_NameConflictAndDisabledChoice_PreservesOriginal()
+   {
+      ReaderTheme original = ThemeCatalog.Find("Nord");
+      var settings = new AppSettings { DisabledThemes = ["Nord"] };
+      Assert.Throws<JsonException>(() => ThemeManagement.SaveEdited(settings, original, original.Rename("Dracula")));
+      AppSettings saved = ThemeManagement.SaveEdited(settings, original, original);
+      Assert.Equal("Nord", saved.DocumentTheme);
+      Assert.Empty(saved.DisabledThemes);
+      Assert.Equal(original.Json, Assert.Single(saved.UserThemes));
+      Assert.Empty(settings.UserThemes);
+      Assert.Contains("Nord", settings.DisabledThemes, StringComparer.Ordinal);
+      Assert.Throws<ArgumentNullException>(() => ThemeManagement.SaveEdited(settings, null!, original));
+      Assert.Throws<ArgumentNullException>(() => ThemeManagement.SaveEdited(settings, original, null!));
+      Assert.Throws<ArgumentNullException>(() => ThemeManagement.ValidateEditName("Nord", "Nord", null!));
+   }
+
+
+
+   /// <summary>Import/export suggestions cannot turn a theme name into a Windows path or reserved device target.</summary>
+   [Theory]
+   [InlineData("GitHub Light", "github-light.json")]
+   [InlineData("Owned < > : \" / \\ | ? *", "owned-_-_-_-_-_-_-_-_-_.json")]
+   [InlineData("CON", "theme-con.json")]
+   [InlineData("con.extra", "theme-con.extra.json")]
+   [InlineData("LPT1", "theme-lpt1.json")]
+   [InlineData("COM9", "theme-com9.json")]
+   [InlineData("com10", "com10.json")]
+   [InlineData("...", "theme.json")]
+   [InlineData("COM¹", "theme-com¹.json")]
+   [InlineData("COM²", "theme-com².json")]
+   [InlineData("COM³", "theme-com³.json")]
+   [InlineData("LPT¹", "theme-lpt¹.json")]
+   [InlineData("LPT²", "theme-lpt².json")]
+   [InlineData("LPT³", "theme-lpt³.json")]
+   public void SuggestedFileName_UnsafeOrReserved_SuggestsSafeJson(string name, string expected)
+      => Assert.Equal(expected, ThemeJson.SuggestedFileName(ThemeCatalog.Find(null).Rename(name)));
+
+
+
+   /// <summary>Null filename input is a contract error rather than a native picker target.</summary>
+   [Fact]
+   public void SuggestedFileName_Null_RejectsInput() => Assert.Throws<ArgumentNullException>(() => ThemeJson.SuggestedFileName(null!));
+}
diff --git a/tests/MarkdownViewr.Windows.Core.Tests/packages.lock.json b/tests/MarkdownViewr.Windows.Core.Tests/packages.lock.json
index 5f91fb2..946aa88 100644
--- a/tests/MarkdownViewr.Windows.Core.Tests/packages.lock.json
+++ b/tests/MarkdownViewr.Windows.Core.Tests/packages.lock.json
@@ -41,6 +41,19 @@
         "resolved": "4.0.0",
         "contentHash": "kzLFyBYUnoidpGOXvpNOfIo8C92gVgVR6X8ncHwhcrDYugiOut5rrhDkr0L3cWHd7J2pKXf6LgaeXoBBDlx1ag=="
       },
+      "AngleSharp": {
+        "type": "Transitive",
+        "resolved": "1.7.2",
+        "contentHash": "r1rb5Qo/0KPzmP0nbSiXPDVfh4Ctu0B+y1RyyUq73g4sgAmEW7q10RDyTq2ZsILwtO9O2LAvMrUles7eD4zz1g=="
+      },
+      "AngleSharp.Css": {
+        "type": "Transitive",
+        "resolved": "1.0.2",
+        "contentHash": "XeBxh0h/73+MWFsGfeMwiK7xbzAK3YeHFdUIrMH1P90amIrDFD/vUDIrPlF3CixqaMH5MRIUvT6Ux+2zvhJ3SA==",
+        "dependencies": {
+          "AngleSharp": "[1.5.0, 2.0.0)"
+        }
+      },
       "Microsoft.CodeCoverage": {
         "type": "Transitive",
         "resolved": "18.10.1",
@@ -102,21 +115,32 @@
       "markdownviewr.windows.core": {
         "type": "Project",
         "dependencies": {
-          "CommunityToolkit.Mvvm": "[8.4.2, )",
-          "KofTwentyTwo.AppKit": "[0.1.0, )"
+          "HtmlSanitizer": "[9.2.1039, )",
+          "KofTwentyTwo.AppKit": "[0.1.0, )",
+          "Markdig": "[1.4.0, )"
         }
       },
-      "CommunityToolkit.Mvvm": {
+      "HtmlSanitizer": {
         "type": "CentralTransitive",
-        "requested": "[8.4.2, )",
-        "resolved": "8.4.2",
-        "contentHash": "WadCzGEc2U+3e20avRLng4qNtt4zoOGWrdUISqJWrHe3/FSnrYjuM5Sb4yQb09LhkBXrrI4Zt3dLKgRMbItsrg=="
+        "requested": "[9.2.1039, )",
+        "resolved": "9.2.1039",
+        "contentHash": "PKxy1hYknAij8YlHCC2a9GSqzUd4bh3IvY+abJBvOH1FKcZpbyafEHtdFcXQBt12Y7hNPkNEOP6Qa7uKNSs/yA==",
+        "dependencies": {
+          "AngleSharp": "1.7.2",
+          "AngleSharp.Css": "1.0.2"
+        }
       },
       "KofTwentyTwo.AppKit": {
         "type": "CentralTransitive",
         "requested": "[0.1.0, )",
         "resolved": "0.1.0",
         "contentHash": "+ymM8DxPel+C527Cp7lrhhdu0xnGHb6fl4/5vAlzsd0iiyW8u+UiOfQl1paNxA26iQZTbxQ8fMLQsUnaOA8GcQ=="
+      },
+      "Markdig": {
+        "type": "CentralTransitive",
+        "requested": "[1.4.0, )",
+        "resolved": "1.4.0",
+        "contentHash": "lLhaiI/mNDTNzgLqnmknhf4LjgTqOAyjx5+GNz0X3AxYMxUhmFppF2WVMdER+SDqwhE5wUF1pzs/cuLwFxs7xA=="
       }
     }
   }
diff --git a/tests/MarkdownViewr.Windows.UiTests/ActivationFuzzTests.cs b/tests/MarkdownViewr.Windows.UiTests/ActivationFuzzTests.cs
new file mode 100644
index 0000000..a1ddc5b
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/ActivationFuzzTests.cs
@@ -0,0 +1,88 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Fuzzes the real generated activation schema and path validator without creating a window, pipe, process or profile.</summary>
+[Trait("Category", "Fuzz")]
+public sealed class ActivationFuzzTests
+{
+   /// <summary>Only bounded absolute literal paths and the known schema can survive mutated JSON; no command/property can expand its capability.</summary>
+   [Theory]
+   [InlineData(22023)]
+   [InlineData(99173)]
+   public void Activation_MutatedJson_RejectsUnboundedOrCommandPayloads(int seed)
+   {
+      string? configured = Environment.GetEnvironmentVariable("K22_FUZZ_ITERATIONS");
+      int iterations = 500;
+      if(configured is not null && (!int.TryParse(configured, NumberStyles.None, CultureInfo.InvariantCulture, out iterations) || iterations is < 1 or > 100000))
+      {
+         throw new InvalidOperationException("K22_FUZZ_ITERATIONS must be between1 and100000.");
+      }
+      var random = new Random(seed);
+      for(int iteration = 0; iteration < iterations; iteration++)
+      {
+         string input = Generate(random);
+         try
+         {
+            ActivationRequest? request;
+            try
+            {
+               request = JsonSerializer.Deserialize(input, ActivationJsonContext.Default.ActivationRequest);
+               if(request is null)
+               {
+                  continue;
+               }
+               request.Validate();
+            }
+            catch(Exception exception) when(exception is JsonException or InvalidDataException)
+            {
+               continue;
+            }
+            using var document = JsonDocument.Parse(input);
+            Assert.All(document.RootElement.EnumerateObject(), property => Assert.Contains(property.Name, new[] { "Paths", "HasInvalidPath" }, StringComparer.Ordinal));
+            Assert.InRange(request.Paths.Length, 0, 128);
+            Assert.All(request.Paths, path =>
+            {
+               Assert.InRange(path.Length, 1, 32767);
+               Assert.True(Path.IsPathFullyQualified(path));
+               Assert.DoesNotContain(path, char.IsControl);
+            });
+            Assert.Equal(request.Paths, JsonSerializer.Deserialize(JsonSerializer.Serialize(request, ActivationJsonContext.Default.ActivationRequest), ActivationJsonContext.Default.ActivationRequest)!.Paths);
+         }
+         catch(Exception exception)
+         {
+            throw new InvalidOperationException(FormattableString.Invariant($"Target=activation; Seed={seed}; Iteration={iteration}; Input={JsonSerializer.Serialize(input)}"), exception);
+         }
+      }
+   }
+
+
+
+   /// <summary>Generated envelopes include foreign command fields, relative/control-bearing paths, excessive lists and malformed syntax.</summary>
+   private static string Generate(Random random)
+   {
+      string[] corpus = ["C:\\k22-fuzz\\notes & café $HOME.md", "relative.md", "", "C:\\k22-fuzz\\line\nbreak.md", "\\\\synthetic.invalid\\share\\notes.md", "C:\\k22-fuzz\\literal \" quote.md"];
+      var paths = new JsonArray();
+      int count = random.Next(0, 145);
+      bool validPaths = random.Next(3) == 0;
+      for(int index = 0; index < count; index++)
+      {
+         paths.Add(validPaths ? corpus[0] : corpus[random.Next(corpus.Length)]);
+      }
+      var value = new JsonObject { ["Paths"] = paths, ["HasInvalidPath"] = random.Next(2) == 1 };
+      if(random.Next(4) == 0)
+      {
+         value["command"] = "execute-synthetic-content";
+      }
+      string input = value.ToJsonString();
+      return random.Next(6) == 0 ? input.Remove(random.Next(input.Length), 1) : input;
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/ActivationInboxTests.cs b/tests/MarkdownViewr.Windows.UiTests/ActivationInboxTests.cs
new file mode 100644
index 0000000..02ae6df
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/ActivationInboxTests.cs
@@ -0,0 +1,164 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Buffers.Binary;
+using System.Collections.Concurrent;
+using System.IO.Pipes;
+using System.Text;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Real current-user pipes prove bounded native delivery without taking desktop input or launching an app.</summary>
+public sealed class ActivationInboxTests
+{
+   /// <summary>A startup request survives until a reader dispatcher attaches; rejected dispatch returns a negative acknowledgement.</summary>
+   [Fact]
+   public async Task Send_QueuedThenAttached_DeliversOnceAndHonorsAcknowledgement()
+   {
+      string key = "k22-mv-tests-" + Guid.NewGuid().ToString("N");
+      var received = new ConcurrentQueue<ActivationRequest>();
+      var errors = new ConcurrentQueue<Exception>();
+      using var inbox = new ActivationInbox(key, errors.Enqueue);
+      var request = ActivationRequest.Create(["sender & café.md"], Path.GetTempPath());
+      using var deadline = new CancellationTokenSource(TimeSpan.FromSeconds(15));
+      Assert.True(await ActivationInbox.SendAsync(key, request, deadline.Token));
+      Assert.Empty(received);
+      inbox.Attach(value => { received.Enqueue(value); return true; });
+      Assert.Equal(request.Paths, Assert.Single(received).Paths);
+      Assert.True(await ActivationInbox.SendAsync(key, request, deadline.Token));
+      Assert.Equal(2, received.Count);
+      inbox.Attach(_ => false);
+      Assert.False(await ActivationInbox.SendAsync(key, request, deadline.Token));
+      Assert.Equal(2, received.Count);
+      Assert.Empty(errors);
+   }
+
+
+
+   /// <summary>Oversized frames, unknown JSON fields and relative pipe paths are rejected, then a real valid peer still connects.</summary>
+   [Fact]
+   public async Task Listen_MalformedPeers_RejectsAndRecovers()
+   {
+      string key = "k22-mv-tests-" + Guid.NewGuid().ToString("N");
+      var received = new ConcurrentQueue<ActivationRequest>();
+      var errors = new ConcurrentQueue<Exception>();
+      using var inbox = new ActivationInbox(key, errors.Enqueue);
+      inbox.Attach(value => { received.Enqueue(value); return true; });
+      using var deadline = new CancellationTokenSource(TimeSpan.FromSeconds(20));
+      await SendMalformed(key, ActivationRequest.MaximumPayloadBytes + 1, [], deadline.Token);
+      byte[] unknown = Encoding.UTF8.GetBytes("{\"Paths\":[],\"Command\":\"execute\"}");
+      await SendMalformed(key, unknown.Length, unknown, deadline.Token);
+      byte[] relative = Encoding.UTF8.GetBytes("{\"Paths\":[\"relative.md\"]}");
+      await SendMalformed(key, relative.Length, relative, deadline.Token);
+      var request = ActivationRequest.Create(["valid.md"], Path.GetTempPath());
+      Assert.True(await ActivationInbox.SendAsync(key, request, deadline.Token));
+      Assert.Equal(request.Paths, Assert.Single(received).Paths);
+      Assert.Equal(3, errors.Count);
+   }
+
+
+
+   /// <summary>A disconnected sender never blocks the next activation and shutdown releases the pipe without leaking an owned connection.</summary>
+   [Fact]
+   public async Task Listen_DisconnectedPeer_RecoversAndReleasesPipe()
+   {
+      string key = "k22-mv-tests-" + Guid.NewGuid().ToString("N");
+      var errors = new ConcurrentQueue<Exception>();
+      using var deadline = new CancellationTokenSource(TimeSpan.FromSeconds(15));
+      Task completed;
+      using(var inbox = new ActivationInbox(key, errors.Enqueue))
+      {
+         inbox.Attach(_ => true);
+         await using(var client = new NamedPipeClientStream(".", key, PipeDirection.InOut, PipeOptions.Asynchronous | PipeOptions.CurrentUserOnly))
+         {
+            await client.ConnectAsync(deadline.Token);
+         }
+         Assert.True(await ActivationInbox.SendAsync(key, new ActivationRequest([]), deadline.Token));
+         Assert.Single(errors);
+         completed = inbox.Completion;
+         inbox.Dispose();
+         inbox.Dispose();
+      }
+      await completed.WaitAsync(deadline.Token);
+      using var replacement = new ActivationInbox(key, _ => { });
+      replacement.Attach(_ => true);
+      Assert.True(await ActivationInbox.SendAsync(key, new ActivationRequest([]), deadline.Token));
+   }
+
+
+
+   /// <summary>An already-closed peer must release its native connection before another real activation.</summary>
+   [Fact]
+   public async Task Listen_AlreadyClosedPeer_RecoversAfterReportedDisconnect()
+   {
+      string key = "k22-mv-tests-" + Guid.NewGuid().ToString("N");
+      var reported = new TaskCompletionSource<Exception>(TaskCreationOptions.RunContinuationsAsynchronously);
+      var received = new ConcurrentQueue<ActivationRequest>();
+      var connectionContext = new DeferredConnectionContext();
+      SynchronizationContext? previous = SynchronizationContext.Current;
+      ActivationInbox inbox;
+      try
+      {
+         SynchronizationContext.SetSynchronizationContext(connectionContext);
+         inbox = new ActivationInbox(key, exception => reported.TrySetResult(exception));
+      }
+      finally
+      {
+         SynchronizationContext.SetSynchronizationContext(previous);
+      }
+      using ActivationInbox ownedInbox = inbox;
+      inbox.Attach(value => { received.Enqueue(value); return true; });
+      using var deadline = new CancellationTokenSource(TimeSpan.FromSeconds(15));
+      await using(var client = new NamedPipeClientStream(".", key, PipeDirection.InOut, PipeOptions.Asynchronous | PipeOptions.CurrentUserOnly))
+      {
+         await client.ConnectAsync(deadline.Token);
+      }
+      (SendOrPostCallback callback, object? state) = await connectionContext.Continuation.Task.WaitAsync(deadline.Token);
+      // Resume the real server after the real peer closes, exercising the synchronous broken-read path.
+      var resume = Task.Run(() => callback(state), deadline.Token);
+      Assert.IsAssignableFrom<IOException>(await reported.Task.WaitAsync(deadline.Token));
+      var request = ActivationRequest.Create(["after closed peer.md"], Path.GetTempPath());
+      Assert.True(await ActivationInbox.SendAsync(key, request, deadline.Token));
+      Assert.Equal(request.Paths, Assert.Single(received).Paths);
+      await resume.WaitAsync(deadline.Token);
+   }
+
+
+
+   /// <summary>Defers only the first real server continuation, making the already-closed native peer schedule reproducible.</summary>
+   private sealed class DeferredConnectionContext : SynchronizationContext
+   {
+      internal TaskCompletionSource<(SendOrPostCallback Callback, object? State)> Continuation { get; } = new(TaskCreationOptions.RunContinuationsAsynchronously);
+
+
+
+      /// <summary>Captures the actual asynchronous continuation without changing pipe bytes, handles or acknowledgements.</summary>
+      public override void Post(SendOrPostCallback callback, object? state) => Continuation.TrySetResult((callback, state));
+   }
+
+
+
+   /// <summary>Sends an intentionally invalid frame and waits for the actual server to close it before starting the next peer.</summary>
+   private static async Task SendMalformed(string key, int declaredLength, byte[] payload, CancellationToken cancellationToken)
+   {
+      await using var client = new NamedPipeClientStream(".", key, PipeDirection.InOut, PipeOptions.Asynchronous | PipeOptions.CurrentUserOnly);
+      await client.ConnectAsync(cancellationToken);
+      byte[] length = new byte[4];
+      BinaryPrimitives.WriteInt32LittleEndian(length, declaredLength);
+      await client.WriteAsync(length, cancellationToken);
+      await client.WriteAsync(payload, cancellationToken);
+      await client.FlushAsync(cancellationToken);
+      byte[] response = new byte[1];
+      try
+      {
+         Assert.Equal(0, await client.ReadAsync(response, cancellationToken));
+      }
+      catch(IOException)
+      {
+         // Windows may report a broken pipe rather than EOF after the server rejects the malformed frame.
+      }
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/ActivationRequestTests.cs b/tests/MarkdownViewr.Windows.UiTests/ActivationRequestTests.cs
new file mode 100644
index 0000000..f084576
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/ActivationRequestTests.cs
@@ -0,0 +1,52 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Sender-relative paths, Unicode, duplicate launches and stable/dev/profile isolation retain their actual meanings.</summary>
+public sealed class ActivationRequestTests
+{
+   /// <summary>Canonicalization belongs to the sender, including literal shell characters and case-insensitive duplicate paths.</summary>
+   [Fact]
+   public void Create_RelativeUnicodeAndDuplicates_UsesSenderDirectory()
+   {
+      string directory = Path.Combine(Path.GetTempPath(), "sender space");
+      var request = ActivationRequest.Create(["notes & café $HOME.md", "./notes & café $HOME.md", "SECOND.MD", "second.md"], directory);
+      Assert.Equal(new[] { Path.Combine(directory, "notes & café $HOME.md"), Path.Combine(directory, "SECOND.MD") }, request.Paths);
+      Assert.False(request.HasInvalidPath);
+      Assert.Empty(ActivationRequest.Create([], directory).Paths);
+   }
+
+
+
+   /// <summary>Malformed messages cannot open relative paths or allocate an unbounded number of document windows.</summary>
+   [Fact]
+   public void Validate_InvalidPaths_RejectsMalformedAndUnboundedRequests()
+   {
+      Assert.Throws<InvalidDataException>(() => new ActivationRequest(null!).Validate());
+      Assert.Throws<InvalidDataException>(() => new ActivationRequest(["relative.md"]).Validate());
+      Assert.Throws<InvalidDataException>(() => new ActivationRequest([""]).Validate());
+      Assert.Throws<InvalidDataException>(() => new ActivationRequest(["C:\\bad\nfile.md"]).Validate());
+      Assert.Throws<InvalidDataException>(() => new ActivationRequest(["C:\\" + new string('a', 32768)]).Validate());
+      Assert.Throws<ArgumentException>(() => ActivationRequest.Create(Enumerable.Repeat("one.md", ActivationRequest.MaximumPaths + 1), Path.GetTempPath()));
+   }
+
+
+
+   /// <summary>Equivalent directory spellings share an instance, while distinct review profiles and channel installation roots do not.</summary>
+   [Fact]
+   public void InstanceKey_ProfilesAndInstallations_IsolatesBoundaries()
+   {
+      string root = Path.Combine(Path.GetTempPath(), "viewer");
+      string data = Path.Combine(Path.GetTempPath(), "profile");
+      string key = ActivationRequest.InstanceKey(root, data);
+      Assert.Equal(key, ActivationRequest.InstanceKey(root + Path.DirectorySeparatorChar, data.ToUpperInvariant()));
+      Assert.NotEqual(key, ActivationRequest.InstanceKey(root + "-dev", data), StringComparer.Ordinal);
+      Assert.NotEqual(key, ActivationRequest.InstanceKey(root, data + "-review"), StringComparer.Ordinal);
+      Assert.StartsWith("k22-markdownviewr-", key, StringComparison.Ordinal);
+      Assert.DoesNotContain(root, key, StringComparison.OrdinalIgnoreCase);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppSession.cs b/tests/MarkdownViewr.Windows.UiTests/AppSession.cs
index ad7bd26..dbcde89 100644
--- a/tests/MarkdownViewr.Windows.UiTests/AppSession.cs
+++ b/tests/MarkdownViewr.Windows.UiTests/AppSession.cs
@@ -32,7 +32,7 @@ public sealed class AppSession : IDisposable
 
 
    /// <summary>Launches the app against a fresh temporary data folder and waits for its main window.</summary>
-   public AppSession(bool showSplash = false)
+   public AppSession(bool showSplash = false, string? document = null, bool editorProbe = false, string documentFileName = "document.md", IReadOnlyDictionary<string, byte[]>? documentAssets = null, IReadOnlyDictionary<string, string>? additionalDocuments = null)
    {
       ExePath = ResolveExePath();
       DataDirectory = Path.Combine(Path.GetTempPath(), AppIdentity.Info.Id + "-uitests", Guid.NewGuid().ToString("N"));
@@ -41,8 +41,32 @@ public sealed class AppSession : IDisposable
           Path.Combine(DataDirectory, "settings.json"),
           $$"""{ "ShowSplashScreen": {{(showSplash ? "true" : "false")}}, "CheckForUpdatesOnStartup": false }""");
 
+      foreach((string name, byte[] bytes) in documentAssets ?? new Dictionary<string, byte[]>(StringComparer.Ordinal))
+      {
+         File.WriteAllBytes(Path.Combine(DataDirectory, name), bytes);
+      }
+
       var startInfo = new ProcessStartInfo(ExePath) { WorkingDirectory = Path.GetDirectoryName(ExePath) ?? "" };
-      startInfo.Environment[AppIdentity.Info.DataDirectoryVariable] = DataDirectory;
+      startInfo.Environment[AppIdentity.ForChannel("stable").DataDirectoryVariable] = DataDirectory;
+      startInfo.Environment[AppIdentity.ForChannel("dev").DataDirectoryVariable] = DataDirectory;
+      startInfo.Environment["MARKDOWNVIEWR_INPUT_TRACE"] = "1";
+      if(editorProbe)
+      {
+         startInfo.Environment["MARKDOWNVIEWR_EDITOR_PROBE_RESULT"] = Path.Combine(DataDirectory, "editor-result.json");
+      }
+      if(document is not null)
+      {
+         string path = Path.Combine(DataDirectory, documentFileName);
+         File.WriteAllText(path, document);
+         startInfo.ArgumentList.Add(path);
+      }
+
+      foreach((string name, string markdown) in additionalDocuments ?? new Dictionary<string, string>(StringComparer.Ordinal))
+      {
+         string path = Path.Combine(DataDirectory, name);
+         File.WriteAllText(path, markdown);
+         startInfo.ArgumentList.Add(path);
+      }
 
       _dpi = new DpiAwarenessScope();
       try
@@ -64,6 +88,12 @@ public sealed class AppSession : IDisposable
 
    public string DataDirectory { get; }
 
+
+
+   /// <summary>The smoke harness declares the channel being tested; actual native titles must match that edition. Loose runs use stable.
+   /// </summary>
+   public string DisplayName { get; } = AppIdentity.ForChannel(Environment.GetEnvironmentVariable("K22_UITEST_CHANNEL")).DisplayName;
+
    public UIA3Automation Automation { get; }
 
    public Application App { get; }
@@ -89,6 +119,20 @@ public sealed class AppSession : IDisposable
 
 
 
+   /// <summary>Retains only this fixture window and its accessibility tree when document status acceptance fails.</summary>
+   public string DescribeDocumentStatus()
+   {
+      string directory = Path.Combine(Environment.GetEnvironmentVariable("GITHUB_WORKSPACE") ?? DataDirectory, "artifacts", "installed-smoke-ui");
+      Directory.CreateDirectory(directory);
+      string name = Guid.NewGuid().ToString("N");
+      MainWindow.CaptureToFile(Path.Combine(directory, name + ".png"));
+      string tree = string.Join(Environment.NewLine, MainWindow.FindAllDescendants().Take(200).Select(element =>
+         $"Id={element.Properties.AutomationId.ValueOrDefault}; Name={element.Properties.Name.ValueOrDefault}; Type={element.Properties.ControlType.ValueOrDefault}; Bounds={element.Properties.BoundingRectangle.ValueOrDefault}; Offscreen={element.Properties.IsOffscreen.ValueOrDefault}"));
+      File.WriteAllText(Path.Combine(directory, name + ".log"), tree);
+      return tree;
+   }
+
+
    /// <summary>The settings file as the app last saved it.</summary>
    public string ReadSettings() => ReadShared(Path.Combine(DataDirectory, "settings.json"));
 
@@ -169,9 +213,16 @@ public sealed class AppSession : IDisposable
             Invoke(menu);
          }
          Wait.UntilInputIsProcessed();
-         item = Retry.WhileNull(() => FindInApp(cf => cf.ByAutomationId(itemAutomationId)), timeout: TimeSpan.FromSeconds(3), interval: s_pollInterval, ignoreException: true).Result;
+         item = Retry.WhileNull(
+            () => TopLevelWindows().Prepend(MainWindow).SelectMany(root => root.FindAllDescendants(cf => cf.ByAutomationId(itemAutomationId))).FirstOrDefault(candidate => !candidate.IsOffscreen),
+            timeout: TimeSpan.FromSeconds(3), interval: s_pollInterval, ignoreException: true).Result;
       }
       Invoke(item ?? throw new TimeoutException($"Menu item '{itemAutomationId}' never appeared under '{menuName}'. (app exited: {App.HasExited})"));
+      if(string.Equals(menuName, "View", StringComparison.Ordinal) && !item.Patterns.ExpandCollapse.IsSupported)
+      {
+         menu.Patterns.ExpandCollapse.Pattern.Collapse();
+         Wait.UntilInputIsProcessed();
+      }
    }
 
 
@@ -216,13 +267,38 @@ public sealed class AppSession : IDisposable
             return hitProcess == App.ProcessId && element.IsEnabled && !element.IsOffscreen ? element : null;
          },
          $"an unobscured mouse target '{automationId}'");
-      element.Click();
+      // Move directly: an animated path across parent-menu rows can close the target submenu.
+      AssertMouseTarget(element);
+      Mouse.Down(MouseButton.Left);
+      Wait.UntilInputIsProcessed();
+      Mouse.Up(MouseButton.Left);
       Wait.UntilInputIsProcessed();
       LastMouseInput += $" Mouse after={Mouse.Position}; hit PID={Automation.FromPoint(Mouse.Position).Properties.ProcessId.ValueOrDefault}.";
    }
 
 
 
+   /// <summary>Moves once to the current target and verifies the pointer is over it or one of its children.</summary>
+   private void AssertMouseTarget(AutomationElement element)
+   {
+      if(!element.TryGetClickablePoint(out System.Drawing.Point point))
+      {
+         throw new InvalidOperationException("The native mouse target no longer has a clickable point.");
+      }
+      NativeMouse.MoveTo(point);
+      Wait.UntilInputIsProcessed();
+      AutomationElement? hit = Automation.FromPoint(Mouse.Position);
+      for(int depth = 0; hit is not null && depth < 8; depth++, hit = hit.Parent)
+      {
+         if(hit.Equals(element))
+         {
+            return;
+         }
+      }
+      throw new InvalidOperationException("The pointer is not over the requested native control. " + LastMouseInput);
+   }
+
+
    /// <summary>Invokes the element carrying <paramref name="automationId"/> (a button, for example).</summary>
    public void ClickElement(string automationId) => Invoke(WaitForElement(automationId));
 
@@ -251,15 +327,19 @@ public sealed class AppSession : IDisposable
 
 
 
-   /// <summary>Invokes an element through UI Automation, falling back to a mouse click.</summary>
+   /// <summary>Uses the supported native Invoke or Toggle action, falling back to a verified physical click.</summary>
    private void Invoke(AutomationElement element)
    {
-      MainWindow.SetForeground();
       if(element.Patterns.Invoke.TryGetPattern(out IInvokePattern? invoke))
       {
          LastInvocation = $"UIA Invoke: {element.Properties.AutomationId.ValueOrDefault}.";
          invoke.Invoke();
       }
+      else if(element.Patterns.Toggle.TryGetPattern(out ITogglePattern? toggle))
+      {
+         LastInvocation = $"UIA Toggle: {element.Properties.AutomationId.ValueOrDefault}; before={toggle.ToggleState.Value}.";
+         toggle.Toggle();
+      }
       else
       {
          LastInvocation = $"Mouse fallback: {element.Properties.AutomationId.ValueOrDefault}.";
@@ -340,6 +420,31 @@ public sealed class AppSession : IDisposable
 
 
 
+   /// <summary>FlaUI closes only the main HWND; close every fixture-owned window first so intended siblings do not force its exit timeout.</summary>
+   private void CloseOwnedWindows()
+   {
+      if(App is not { HasExited: false })
+      {
+         return;
+      }
+      foreach(AutomationElement window in TopLevelWindows())
+      {
+         try
+         {
+            if(window.Patterns.Window.TryGetPattern(out IWindowPattern? pattern))
+            {
+               pattern.Close();
+            }
+         }
+         catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or InvalidOperationException or ObjectDisposedException or System.ComponentModel.Win32Exception)
+         {
+            // A sibling can disappear during closure; the unchanged process close/kill fallback remains below.
+         }
+      }
+   }
+
+
+
    /// <summary>Closes the app (killing it if needed), then disposes the automation and deletes the data folder.</summary>
    public void Dispose()
    {
@@ -347,6 +452,7 @@ public sealed class AppSession : IDisposable
       {
          try
          {
+            CloseOwnedWindows();
             App?.Close();
          }
          catch
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Activation.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Activation.cs
new file mode 100644
index 0000000..38d764d
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Activation.cs
@@ -0,0 +1,84 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Diagnostics;
+using FlaUI.Core.AutomationElements;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Actual secondary application processes must forward literal files into the correct existing native reader/profile.</summary>
+public partial class AppTests
+{
+   /// <summary>A secondary process with a different working directory opens its relative Unicode file in the primary and focuses duplicates.</summary>
+   [Fact]
+   public void Activation_SecondaryRelativeFile_PreservesExistingReaderAndFocusesDuplicate()
+   {
+      using var session = new AppSession(document: "# Activation original", documentFileName: "original.md");
+      Window original = WaitForDocumentWindow(session, "original.md");
+      WaitForWindowHeading(session, original, "Activation original");
+      InvokeDocumentMenu(session, original, "SourceToggle", menuName: "View");
+      Assert.Equal("# Activation original", WaitForWindowElement(session, original, "SourceText").Patterns.Value.Pattern.Value.Value);
+      string senderDirectory = Path.Combine(session.DataDirectory, "sender space");
+      Directory.CreateDirectory(senderDirectory);
+      string filename = "new & café $HOME.md";
+      File.WriteAllText(Path.Combine(senderDirectory, filename), "# Sender relative activation");
+      ForwardFileActivation(session, senderDirectory, filename);
+      Window opened = WaitForDocumentWindow(session, filename);
+      WaitForWindowHeading(session, opened, "Sender relative activation");
+      Assert.Equal(2, DocumentWindows(session).Length);
+      Assert.Equal("# Activation original", WaitForWindowElement(session, original, "SourceText").Patterns.Value.Pattern.Value.Value);
+      ForwardFileActivation(session, senderDirectory, Path.Combine(session.DataDirectory, "original.md"));
+      Assert.Equal(2, DocumentWindows(session).Length);
+      session.WaitFor(() => GetForegroundWindow() == original.Properties.NativeWindowHandle.ValueOrDefault ? original : null, "the existing document focused after duplicate activation");
+      File.WriteAllText(Path.Combine(session.DataDirectory, "original.md"), "# Original watcher survives activation");
+      WaitForWindowHeading(session, original, "Original watcher survives activation");
+      session.WaitFor(() => original.FindFirstDescendant(cf => cf.ByAutomationId("SourceText")) is { } source && string.Equals(source.Patterns.Value.Pattern.Value.Value, "# Original watcher survives activation", StringComparison.Ordinal) ? source : null, "the original source/watch state after activation");
+      RetainDocumentWindow(session, original, "secondary-activation-original");
+      RetainDocumentWindow(session, opened, "secondary-activation-new-reader");
+   }
+
+
+
+   /// <summary>Launching the same binary into another data profile keeps its windows and document activations separate.</summary>
+   [Fact]
+   public void Activation_SeparateReviewProfiles_DoesNotRedirectToSiblingProfile()
+   {
+      using var first = new AppSession(document: "# First activation profile", documentFileName: "first.md");
+      using var second = new AppSession(document: "# Second activation profile", documentFileName: "second.md");
+      WaitForWindowHeading(first, first.MainWindow, "First activation profile");
+      WaitForWindowHeading(second, second.MainWindow, "Second activation profile");
+      Assert.NotEqual(first.App.ProcessId, second.App.ProcessId);
+      File.WriteAllText(Path.Combine(first.DataDirectory, "third.md"), "# First profile redirected file");
+      ForwardFileActivation(first, first.DataDirectory, "third.md");
+      WaitForWindowHeading(first, WaitForDocumentWindow(first, "third.md"), "First profile redirected file");
+      Assert.Equal(2, DocumentWindows(first).Length);
+      Assert.Single(DocumentWindows(second));
+      Assert.NotNull(second.MainWindow.FindFirstDescendant(cf => cf.ByName("Second activation profile")));
+      RetainDocumentWindow(first, first.MainWindow, "activation-first-profile");
+      RetainDocumentWindow(second, second.MainWindow, "activation-isolated-profile");
+   }
+
+
+
+   /// <summary>Starts the real reviewed executable with literal ArgumentList values and the owning session profile; only this child is cleaned up on failure.</summary>
+   private static void ForwardFileActivation(AppSession session, string directory, params string[] paths)
+   {
+      var start = new ProcessStartInfo(session.ExePath) { WorkingDirectory = directory, UseShellExecute = false };
+      start.Environment[AppIdentity.ForChannel("stable").DataDirectoryVariable] = session.DataDirectory;
+      start.Environment[AppIdentity.ForChannel("dev").DataDirectoryVariable] = session.DataDirectory;
+      foreach(string path in paths)
+      {
+         start.ArgumentList.Add(path);
+      }
+      using Process child = Process.Start(start) ?? throw new IOException("The secondary activation process did not start.");
+      if(!child.WaitForExit(15000))
+      {
+         child.Kill(entireProcessTree: true);
+         throw new TimeoutException("The secondary activation process did not exit after delivery.");
+      }
+      Assert.Equal(0, child.ExitCode);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Appearance.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Appearance.cs
new file mode 100644
index 0000000..ad08c7b
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Appearance.cs
@@ -0,0 +1,143 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Drawing;
+using System.Text.Json;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+using FlaUI.Core.Input;
+using MarkdownViewr.Windows.Core.Printing;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Accepts actual reading width/CSS paint and proves that generated print output remains independent.</summary>
+public partial class AppTests
+{
+   /// <summary>Native reading preferences wrap actual glyphs across themes while source/find, print output and cancel remain intact.</summary>
+   [Fact]
+   public async Task Appearance_WidthCssAndPrint_PreservesSourceFindAndCancel()
+   {
+      const string Title = "APPEARANCE WIDTH PROOF WITH MANY LONG WORDS";
+      using var session = new AppSession(document: "# " + Title + "\n\nOne paired appearance needle.");
+      AutomationElement initial = session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), "the actual appearance fixture heading", TimeSpan.FromSeconds(30));
+      Assert.True(initial.BoundingRectangle.Width > 350);
+      double height = initial.BoundingRectangle.Height;
+      EditReadingAppearance(session, 320, "#content { background: #112233; }");
+      WaitForAppearanceWindowColor(session, session.MainWindow, Color.FromArgb(17, 34, 51));
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")) is { } heading && heading.BoundingRectangle.Width <= 321 && heading.BoundingRectangle.Height > height ? heading : null, "the actual heading wrapped within the saved320px reading width");
+      session.InvokeMenuItem("View", "SourceToggle");
+      string source = session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value;
+      Assert.Contains(Title, source, StringComparison.Ordinal);
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.EnterText("FindText", "paired appearance needle");
+      WaitForFindCount(session, "1 of 1");
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:GitHub Light");
+      WaitForAppearanceWindowColor(session, session.MainWindow, Color.FromArgb(17, 34, 51));
+      using(Bitmap pdf = await ExportPrintFixtureAsync(session, "reader-appearance", new PrintOptions("Active Theme", Backgrounds: true, FullPage: false)))
+      {
+         Assert.Equal(Color.White.ToArgb(), pdf.GetPixel(pdf.Width / 2, pdf.Height / 2).ToArgb());
+         Assert.True(FirstPrintedInkBand(pdf, pixel => pixel.R < 100 && pixel.G < 100).Width > pdf.Width * 0.55, "Actual printed heading width must exceed the narrow screen column, using the chosen theme's blue ink.");
+      }
+      WaitForAppearanceWindowColor(session, session.MainWindow, Color.FromArgb(17, 34, 51));
+      Assert.Equal(source, session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value);
+      WaitForFindCount(session, "1 of 1");
+      string accepted = session.ReadSettings();
+      Rectangle before = session.WaitForElement("mv-heading-0").BoundingRectangle;
+      EditReadingAppearance(session, 320, "#content { background: #445566; }", save: false);
+      Assert.Equal(accepted, session.ReadSettings());
+      Assert.Equal(before, session.WaitForElement("mv-heading-0").BoundingRectangle);
+      EditReadingAppearance(session, 320, "#content { background: #112233; }", limit: false);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")) is { } heading && heading.BoundingRectangle.Width > 321 ? heading : null, "the actual heading expanding after the native width limit is disabled");
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.False(settings.RootElement.GetProperty("ContentWidthEnabled").GetBoolean());
+         Assert.Equal(320, settings.RootElement.GetProperty("ContentWidthPx").GetDouble());
+         Assert.Equal("#content { background: #112233; }", settings.RootElement.GetProperty("GlobalCss").GetString());
+      }
+      RetainDocumentWindow(session, session.MainWindow, "reader-appearance");
+   }
+
+
+
+   /// <summary>Latest global appearance repaints an already-open sibling; its later local preference save cannot restore old CSS.</summary>
+   [Fact]
+   public void Appearance_GlobalBroadcast_PreservesSiblingReadersAndPreferences()
+   {
+      using var session = new AppSession(document: "# Global appearance first");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Global appearance first")), "the actual first reader", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("File", "NewWindowMenuItem");
+      Window sibling = session.WaitFor(() => DocumentWindows(session).FirstOrDefault(window => string.Equals(window.Name, session.DisplayName, StringComparison.Ordinal)), "an already-open blank sibling reader").AsWindow();
+      EditReadingAppearance(session, 320, "#content { background: #112233; }");
+      EditReadingAppearance(session, 320, "#content { background: #445566; }");
+      WaitForAppearanceWindowColor(session, session.MainWindow, Color.FromArgb(68, 85, 102));
+      WaitForAppearanceWindowColor(session, sibling, Color.FromArgb(68, 85, 102));
+      InvokeDocumentMenu(session, sibling, "SourceToggle", menuName: "View");
+      session.WaitFor(() => sibling.FindFirstDescendant(cf => cf.ByAutomationId("SourceText")), "the sibling saving its window-local source preference");
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.Equal("#content { background: #445566; }", settings.RootElement.GetProperty("GlobalCss").GetString());
+         Assert.Equal(320, settings.RootElement.GetProperty("ContentWidthPx").GetDouble());
+      }
+      WaitForAppearanceWindowColor(session, sibling, Color.FromArgb(68, 85, 102));
+      Assert.Equal(2, DocumentWindows(session).Length);
+      Assert.NotNull(session.MainWindow.FindFirstDescendant(cf => cf.ByName("Global appearance first")));
+      Assert.Equal("# Global appearance first", File.ReadAllText(Path.Combine(session.DataDirectory, "document.md")));
+      RetainDocumentWindow(session, sibling, "shared-global-appearance");
+   }
+
+
+
+   /// <summary>Changes actual native draft controls and explicitly saves/cancels, with no mirrored browser test properties.</summary>
+   private static void EditReadingAppearance(AppSession session, double width, string css, bool limit = true, bool save = true)
+   {
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      session.WaitForElement("ReadingAppearanceWidth").Patterns.RangeValue.Pattern.SetValue(width);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("ReadingAppearanceCss")) is { IsEnabled: true } field ? field : null, "the native layout save to finish");
+      session.EnterText("ReadingAppearanceCss", css);
+      AutomationElement checkbox = session.WaitForElement("ReadingAppearanceLimit");
+      bool enabled = checkbox.Patterns.Toggle.Pattern.ToggleState.Value == ToggleState.On;
+      if(enabled != limit)
+      {
+         checkbox.Patterns.Toggle.Pattern.Toggle();
+      }
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("ReadingAppearanceCss")) is { IsEnabled: true } field ? field : null, "the native toggle save to finish");
+      if(save)
+      {
+         session.ClickElement("SettingsApplyCss");
+         session.WaitFor(() =>
+         {
+            using var settings = JsonDocument.Parse(session.ReadSettings());
+            return string.Equals(settings.RootElement.GetProperty("GlobalCss").GetString(), css, StringComparison.Ordinal) ? session.MainWindow : null;
+         }, "the actual persisted CSS apply");
+      }
+      CloseSettings(session);
+      session.WaitForElementGone("ReadingAppearanceCss");
+   }
+
+
+
+   /// <summary>Samples the foreground owned reading gutter, excluding native panes, glyphs and active find highlights.</summary>
+   private static void WaitForAppearanceWindowColor(AppSession session, Window window, Color expected)
+   {
+      window.SetForeground();
+      Wait.UntilInputIsProcessed();
+      session.WaitFor(() =>
+      {
+         if(GetForegroundWindow() != window.Properties.NativeWindowHandle.Value)
+         {
+            return null;
+         }
+         AutomationElement? view = window.FindFirstDescendant(cf => cf.ByAutomationId("DocumentView"));
+         if(view is null)
+         {
+            return null;
+         }
+         using Bitmap image = view.Capture();
+         return image.GetPixel(Math.Min(8, image.Width - 1), Math.Min(8, image.Height - 1)).ToArgb() == expected.ToArgb() ? view : null;
+      }, "actual owned reader background " + expected);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Footer.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Footer.cs
new file mode 100644
index 0000000..0b4b4a5
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Footer.cs
@@ -0,0 +1,43 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text;
+using FlaUI.Core.AutomationElements;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Observes real loaded timestamps and stale state while a document cannot be reread.</summary>
+public partial class AppTests
+{
+   /// <summary>A locked save retains the displayed snapshot and stale action; a successful reload commits new metadata and clears it.</summary>
+   [Fact]
+   public void Footer_LockedSaveAndReload_RetainsSnapshotUntilSuccessfulRead()
+   {
+      using var session = new AppSession(document: "# Footer original");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Footer original")), "the footer fixture", TimeSpan.FromSeconds(30));
+      AutomationElement timestamp = session.WaitForElement("FileModifiedText");
+      Assert.StartsWith("Modified ", timestamp.Name, StringComparison.Ordinal);
+      Assert.True(session.WaitForElement("OpenDocumentFolderButton").IsEnabled);
+      string original = timestamp.Name;
+      string path = Path.Combine(session.DataDirectory, "document.md");
+      using(var locked = new FileStream(path, FileMode.Open, FileAccess.Write, FileShare.None))
+      {
+         byte[] updated = Encoding.UTF8.GetBytes("# Footer changed while locked");
+         locked.Write(updated);
+         locked.SetLength(updated.Length);
+         locked.Flush(flushToDisk: true);
+         session.WaitForElement("FileStaleButton");
+         session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("StatusText")) is { } status && status.Name.Contains("previous version", StringComparison.Ordinal) ? status : null, "the failed locked reload retaining its old snapshot");
+         Assert.Equal(original, session.WaitForElement("FileModifiedText").Name);
+         Assert.NotNull(session.FindInApp(cf => cf.ByName("Footer original")));
+      }
+      session.InvokeMenuItem("File", "ReloadMenuItem");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Footer changed while locked")), "the successful footer reload");
+      session.WaitForElementGone("FileStaleButton");
+      Assert.True(session.WaitForElement("OpenDocumentFolderButton").IsEnabled);
+      RetainDocumentWindow(session, session.MainWindow, "footer-after-locked-reload");
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.MarkdownExtensions.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.MarkdownExtensions.cs
new file mode 100644
index 0000000..5399d77
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.MarkdownExtensions.cs
@@ -0,0 +1,78 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Drawing;
+using System.Text.Json;
+using FlaUI.Core.AutomationElements;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Exercises deliberate native Markdown toggles against actual rendered glyphs, painted highlights and literal source.</summary>
+public partial class AppTests
+{
+   /// <summary>Independent options persist, repaint actual content and survive watched reload without rewriting the source.</summary>
+   [Fact]
+   public void Extensions_NativePreferences_PreserveLiteralSourceAndReload()
+   {
+      const string Heading = "==Highlighted== ^Power^ ~Sub~ ++Underlined++";
+      const string HtmlCode = "==Literal inline HTML code== ^Power^ H~2~O ++Underline++";
+      const string RawCode = "==Literal block HTML code== ^Power^ H~2~O ++Underline++";
+      const string Source = "# " + Heading + "\n\nLiteral extension acceptance.\n\nAuthored code: <code>" + HtmlCode + "</code> and ==Outside==.\n\n<h2>==Raw HTML highlight==</h2>\n<pre><code>" + RawCode + "</code></pre>";
+      using var session = new AppSession(document: Source);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0").And(cf.ByName("Highlighted Power Sub Underlined"))), "all enabled extension glyphs in the actual browser", TimeSpan.FromSeconds(30));
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-1").And(cf.ByName("Raw HTML highlight"))), "the raw HTML extension label in the actual browser");
+      WaitForHighlightPaint(session, visible: true);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName(HtmlCode)), "literal authored inline HTML code in the actual browser");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName(RawCode)), "literal authored block HTML code in the actual browser");
+      session.InvokeMenuItem("View", "SourceToggle");
+      string literal = session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value;
+      Assert.Contains(Heading, literal, StringComparison.Ordinal);
+      string[] ids = ["HighlightExtension", "SuperscriptExtension", "SubscriptExtension", "UnderlineExtension"];
+      string[] titles = ["==Highlighted== Power Sub Underlined", "==Highlighted== ^Power^ Sub Underlined", "==Highlighted== ^Power^ ~Sub~ Underlined", Heading];
+      for(int index = 0; index < ids.Length; index++)
+      {
+         session.InvokeMenuItem("View", "MarkdownExtensionsMenu");
+         session.MouseClickElement(ids[index]);
+         session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0").And(cf.ByName(titles[index]))), "the actual heading after the independent " + ids[index] + " change");
+         Assert.Equal(literal, session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value);
+         Assert.NotNull(session.FindInApp(cf => cf.ByName(HtmlCode)));
+         Assert.NotNull(session.FindInApp(cf => cf.ByName(RawCode)));
+         Assert.Equal("==Raw HTML highlight==", session.WaitForElement("mv-heading-1").Name);
+      }
+      WaitForHighlightPaint(session, visible: false);
+      using(var saved = JsonDocument.Parse(session.ReadSettings()))
+      {
+         foreach(string property in new[] { "RenderHighlight", "RenderSuperscript", "RenderSubscript", "RenderUnderline" })
+         {
+            Assert.False(saved.RootElement.GetProperty(property).GetBoolean());
+         }
+      }
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), Source + "\n\nWatched extension reload.");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Watched extension reload.")), "actual watched content after disabled-extension preferences", TimeSpan.FromSeconds(30));
+      Assert.Equal(Heading, session.WaitForElement("mv-heading-0").Name);
+      Assert.Contains("Watched extension reload.", session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value, StringComparison.Ordinal);
+      session.InvokeMenuItem("View", "MarkdownExtensionsMenu");
+      session.MouseClickElement("HighlightExtension");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0").And(cf.ByName("Highlighted ^Power^ ~Sub~ ++Underlined++"))), "highlight restored independently of the three disabled extensions");
+      WaitForHighlightPaint(session, visible: true);
+      Assert.Contains(Heading, session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value, StringComparison.Ordinal);
+      RetainDocumentWindow(session, session.MainWindow, "markdown-extensions");
+   }
+
+
+
+   /// <summary>Requires the selected theme's highlight pixels in the current browser heading, never a native mirrored preference.</summary>
+   private static void WaitForHighlightPaint(AppSession session, bool visible)
+   {
+      session.WaitFor(() =>
+      {
+         AutomationElement heading = session.WaitForElement("mv-heading-0");
+         using Bitmap image = heading.Capture();
+         int pixels = CountPixels(image, color => color.ToArgb() == Color.FromArgb(249, 226, 175).ToArgb());
+         return (visible ? pixels >= 50 : pixels == 0) ? heading : null;
+      }, visible ? "actual Catppuccin highlight paint" : "the actual heading with highlight paint removed");
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Print.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Print.cs
new file mode 100644
index 0000000..277c95d
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Print.cs
@@ -0,0 +1,273 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Drawing;
+using System.Drawing.Imaging;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+using FlaUI.Core.Input;
+using FlaUI.Core.WindowsAPI;
+using MarkdownViewr.Windows.Core.Printing;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Exercises native printing with owned PDF fixtures, actual Windows rasterization and explicit cancellation.</summary>
+public partial class AppTests
+{
+   /// <summary>Physical Ctrl+P opens a copied draft; cancellation retains actual source/find/zoom and saved preferences.</summary>
+   [Fact]
+   public void Print_KeyboardDraftCancel_PreservesReadingStateAndPreferences()
+   {
+      using var session = new AppSession(document: "# Print cancellation fixture\n\nSearch needle for paired find.\n\n## Print child\nMore text.");
+      WaitForPrintFixture(session, "the print fixture");
+      session.ClickElement("ZoomInButton");
+      session.InvokeMenuItem("View", "SourceToggle");
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.WaitForElement("FindText").AsTextBox().Text = "Search needle";
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("FindCountText").And(cf.ByName("1 of 1"))), "the actual paired print-fixture match");
+      double height = session.FindInApp(cf => cf.ByAutomationId("mv-heading-0"))!.BoundingRectangle.Height;
+      string settings = session.ReadSettings();
+      string source = session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value;
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_P);
+      session.WaitForElement("PrintImages").AsCheckBox().IsChecked = false;
+      Assert.True(session.WaitForElement("PrintTheme").BoundingRectangle.Width >= 440, "The native print options must provide a readable wide layout.");
+      Assert.NotNull(session.WaitForElement("PrintOpenPdf"));
+      Assert.NotNull(session.WaitForElement("PrintOpenPdfFolder"));
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("PrintTheme");
+      Assert.Equal(settings, session.ReadSettings());
+      Assert.Equal(source, session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value);
+      Assert.Equal("Search needle", session.WaitForElement("FindText").AsTextBox().Text);
+      Assert.Equal("1 of 1", session.WaitForElement("FindCountText").Name);
+      WaitForZoomGlyph(session, height);
+   }
+
+
+
+   /// <summary>Retains the actual owned logs/window when a print fixture fails to render before the unchanged startup deadline.</summary>
+   private AutomationElement WaitForPrintFixture(AppSession session, string description)
+   {
+      try
+      {
+         return session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), description, TimeSpan.FromSeconds(30));
+      }
+      catch(TimeoutException)
+      {
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         throw;
+      }
+   }
+
+
+
+   /// <summary>The real Windows print dialog is opened then cancelled; no job is sent to any printer.</summary>
+   [Fact]
+   public void Print_WindowsDialogCancel_PreservesReadyDocument()
+   {
+      using var session = new AppSession(document: "# Windows print fixture\n\nNever submit this fixture to a physical printer.");
+      AutomationElement heading = WaitForPrintFixture(session, "the Windows print fixture");
+      double height = heading.BoundingRectangle.Height;
+      session.InvokeMenuItem("File", "PrintMenuItem");
+      session.ClickButton("Print...");
+      session.WaitForElementGone("PrintTheme");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByControlType(ControlType.Button).And(cf.ByName("Cancel")).And(cf.ByClassName("Button"))), "the owned Windows print dialog's Cancel button");
+      session.ClickButton("Cancel");
+      WaitForZoomGlyph(session, height);
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Windows print fixture")));
+   }
+
+
+
+   /// <summary>Actual native PDFs expand folded content, apply image/background preferences and leave screen collapse/zoom intact.</summary>
+   [Fact]
+   public async Task Print_SavePdf_RendersPrintOptionsAndPreservesScreen()
+   {
+      byte[] imageBytes = CreatePrintImage();
+      string paragraphs = string.Join("\n\n", Enumerable.Repeat("Reading position fixture text retains its native viewport and source location through deliberate printing.", 10));
+      using var session = new AppSession(document: "# Printed heading fixture\n\n" + paragraphs + "\n\n## Folded image\n\n![owned red image](red.png)\n\nHidden print text.", documentAssets: new Dictionary<string, byte[]>(StringComparer.Ordinal) { ["red.png"] = imageBytes });
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), "the PDF fixture heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("owned red image")) is null ? session.MainWindow : null, "the actual image hidden by section collapse");
+      session.ClickElement("OutlineHeading:0");
+      double original = session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), "the visible PDF fixture heading").BoundingRectangle.Height;
+      Assert.True(original > 0);
+      session.ClickElement("ZoomInButton");
+      WaitForZoomGlyph(session, original * 1.1);
+      session.InvokeMenuItem("View", "SourceToggle");
+      session.ClickElement("OutlineHeading:1");
+      (Rectangle Glyph, Rectangle View) reading = WaitForStablePrintViewport(session);
+      Assert.True(session.WaitForElement("mv-heading-0").BoundingRectangle.Top < reading.View.Top);
+      string source = session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value;
+      string first = Path.Combine(session.DataDirectory, "default-print.pdf");
+      SavePrintPdf(session, first);
+      string firstEvidence = RetainPrintedFixture(session, first);
+      using Bitmap clean = await RenderFirstPdfPageAsync(first);
+      clean.Save(firstEvidence + ".png", ImageFormat.Png);
+      Assert.True(CountPixels(clean, pixel => pixel.R > 180 && pixel.G < 80 && pixel.B < 80) > 400, "The expanded print PDF is missing the owned red image.");
+      Assert.True(CountPixels(clean, pixel => pixel.R > 245 && pixel.G > 245 && pixel.B > 245) > clean.Width * clean.Height * 0.8, "Ink-saving print output must have a predominantly white page.");
+      Assert.True(CountPixels(clean, pixel => pixel.R < 100 && pixel.G < 100 && pixel.B < 100) > 100, "The actual PDF is missing printed heading/body glyphs.");
+      AssertPrintScreenState(session, reading, source);
+      string second = Path.Combine(session.DataDirectory, "themed-print.pdf");
+      SavePrintPdf(session, second, new PrintOptions("Active Theme", true, false, true, false, true));
+      string secondEvidence = RetainPrintedFixture(session, second);
+      using Bitmap themed = await RenderFirstPdfPageAsync(second);
+      themed.Save(secondEvidence + ".png", ImageFormat.Png);
+      Assert.Equal(0, CountPixels(themed, pixel => pixel.R > 180 && pixel.G < 80 && pixel.B < 80));
+      Assert.True(CountPixels(themed, pixel => Math.Abs(pixel.R - 30) < 3 && Math.Abs(pixel.G - 30) < 3 && Math.Abs(pixel.B - 46) < 3) > 1000, "Active-theme backgrounds did not reach the actual printed PDF.");
+      AssertPrintScreenState(session, reading, source);
+   }
+
+
+
+   /// <summary>Creates only the owned red image used to prove expanded print content and the images toggle.</summary>
+   private static byte[] CreatePrintImage()
+   {
+      using var asset = new Bitmap(40, 40);
+      using(var graphics = Graphics.FromImage(asset))
+      {
+         graphics.Clear(Color.Red);
+      }
+      using var bytes = new MemoryStream();
+      asset.Save(bytes, ImageFormat.Png);
+      return bytes.ToArray();
+   }
+
+
+
+   /// <summary>Checks the real viewport, visible glyph size, hidden browser image and literal native source after printing.</summary>
+   private static void AssertPrintScreenState(AppSession session, (Rectangle Glyph, Rectangle View) reading, string source)
+   {
+      Assert.Null(session.FindInApp(cf => cf.ByName("owned red image")));
+      try
+      {
+         session.WaitFor(() =>
+         {
+            AutomationElement heading = session.WaitForElement("mv-heading-1");
+            return heading.BoundingRectangle == reading.Glyph && session.WaitForElement("DocumentView").BoundingRectangle == reading.View ? heading : null;
+         }, "the unchanged actual heading and reading viewport after PDF output");
+      }
+      catch(TimeoutException exception)
+      {
+         throw new TimeoutException(exception.Message + " " + session.ReadLogs(), exception);
+      }
+      Assert.Equal(source, session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value);
+   }
+
+
+
+   /// <summary>Uses the actual app options and Windows Save picker; output is always an owned fixture path.</summary>
+   private void SavePrintPdf(AppSession session, string path, PrintOptions? options = null)
+   {
+      try
+      {
+         session.InvokeMenuItem("File", "PrintMenuItem");
+         session.WaitForElement("PrintTheme");
+         if(options is not null)
+         {
+            ConfigurePrintOptions(session, options);
+         }
+         session.ClickButton("Save PDF...");
+         AutomationElement filename = session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("1001").And(cf.ByControlType(ControlType.Edit))), "the owned Windows PDF filename field");
+         EnterPickerFilename(session, filename, path);
+         session.ClickButton("Save");
+         session.WaitFor(() => File.Exists(path) && new FileInfo(path).Length > 100 ? session.FindInApp(cf => cf.ByAutomationId("StatusText").And(cf.ByName("PDF saved."))) : null, "the completed actual PDF export", TimeSpan.FromSeconds(30));
+      }
+      catch(TimeoutException)
+      {
+         _output.WriteLine("Owned export files: " + string.Join(", ", Directory.GetFiles(session.DataDirectory, "*.pdf").Select(Path.GetFileName)));
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         throw;
+      }
+   }
+
+
+
+   /// <summary>Waits for settled actual glyph/view rectangles; WebView2 can report stale out-of-range UIA scroll percentages.</summary>
+   private static (Rectangle Glyph, Rectangle View) WaitForStablePrintViewport(AppSession session)
+   {
+      (Rectangle Glyph, Rectangle View) previous = default;
+      int stable = 0;
+      session.WaitFor(() =>
+      {
+         AutomationElement heading = session.WaitForElement("mv-heading-1");
+         (Rectangle Glyph, Rectangle View) current = (heading.BoundingRectangle, session.WaitForElement("DocumentView").BoundingRectangle);
+         stable = current == previous ? stable + 1 : 0;
+         previous = current;
+         return current.Glyph.Height > 0 && current.View.IntersectsWith(current.Glyph) && stable >= 4 ? heading : null;
+      }, "the settled actual heading and reading viewport before printing");
+      return previous;
+   }
+
+
+
+   /// <summary>Physical text entry commits the Windows picker's actual destination instead of only its UIA value.</summary>
+   private static void EnterPickerFilename(AppSession session, AutomationElement filename, string path)
+   {
+      filename.Focus();
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_A);
+      Keyboard.Type(path);
+      Wait.UntilInputIsProcessed();
+      try
+      {
+         session.WaitFor(() => string.Equals(filename.AsTextBox().Text, path, StringComparison.Ordinal) ? filename : null, "the fully committed exact owned picker filename");
+      }
+      catch(TimeoutException exception)
+      {
+         throw new TimeoutException(exception.Message + "; Expected=" + path + "; Actual=" + filename.AsTextBox().Text + "; Last invocation=" + session.LastInvocation, exception);
+      }
+   }
+
+
+
+   /// <summary>Windows' built-in PDF renderer verifies actual exported bytes without another parser/renderer dependency.</summary>
+   private static async Task<Bitmap> RenderFirstPdfPageAsync(string path)
+   {
+      global::Windows.Storage.StorageFile file = await global::Windows.Storage.StorageFile.GetFileFromPathAsync(path);
+      global::Windows.Data.Pdf.PdfDocument document = await global::Windows.Data.Pdf.PdfDocument.LoadFromFileAsync(file);
+      Assert.True(document.PageCount > 0);
+      using global::Windows.Data.Pdf.PdfPage page = document.GetPage(0);
+      using var image = new global::Windows.Storage.Streams.InMemoryRandomAccessStream();
+      await page.RenderToStreamAsync(image, new global::Windows.Data.Pdf.PdfPageRenderOptions { DestinationWidth = 816, DestinationHeight = 1056 });
+      image.Seek(0);
+      using Stream stream = image.AsStreamForRead();
+      using var bitmap = new Bitmap(stream);
+      return new Bitmap(bitmap);
+   }
+
+
+
+   /// <summary>Counts actual rendered fixture pixels; no application-reported theme or PDF-success flag can satisfy image assertions.</summary>
+   private static int CountPixels(Bitmap bitmap, Func<Color, bool> predicate)
+   {
+      int count = 0;
+      for(int y = 0; y < bitmap.Height; y++)
+      {
+         for(int x = 0; x < bitmap.Width; x++)
+         {
+            count += predicate(bitmap.GetPixel(x, y)) ? 1 : 0;
+         }
+      }
+      return count;
+   }
+
+
+
+   /// <summary>Retains only owned generated fixture output alongside existing installed acceptance evidence.</summary>
+   private static string RetainPrintedFixture(AppSession session, string pdf)
+   {
+      string directory = Path.Combine(Environment.GetEnvironmentVariable("GITHUB_WORKSPACE") ?? session.DataDirectory, "artifacts", "installed-smoke-print");
+      Directory.CreateDirectory(directory);
+      string name = Guid.NewGuid().ToString("N");
+      string output = Path.Combine(directory, name);
+      File.Copy(pdf, output + ".pdf");
+      return output;
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.PrintGeometry.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.PrintGeometry.cs
new file mode 100644
index 0000000..cb82276
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.PrintGeometry.cs
@@ -0,0 +1,206 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Drawing;
+using System.Drawing.Imaging;
+using FlaUI.Core.AutomationElements;
+using MarkdownViewr.Windows.Core.Printing;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Measures real printed glyphs and block geometry through the native options and Windows PDF rasterizer.</summary>
+public partial class AppTests
+{
+   /// <summary>Printed font scale and padding change actual glyphs while active paired find, source and reading paint remain intact.</summary>
+   [Fact]
+   public async Task Print_ZoomAndPadding_ChangesRealOutputAndPreservesFind()
+   {
+      using var session = new AppSession(document: "# PRINT GEOMETRY\n\n## Find fixture\n\nOne paired needle in literal source.");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), "the print geometry heading", TimeSpan.FromSeconds(30));
+      double height = session.WaitForElement("mv-heading-0").BoundingRectangle.Height;
+      for(int step = 0; step < 4; step++)
+      {
+         double previous = session.WaitForElement("mv-heading-0").BoundingRectangle.Height;
+         session.ClickElement("ZoomInButton");
+         string percentage = Math.Round(Math.Pow(1.1, step + 1) * 100).ToString(System.Globalization.CultureInfo.InvariantCulture);
+         session.WaitFor(() =>
+         {
+            AutomationElement heading = session.WaitForElement("mv-heading-0");
+            AutomationElement reset = session.WaitForElement("ZoomResetButton");
+            return heading.BoundingRectangle.Height > previous && reset.IsEnabled && string.Equals(reset.Name, "Actual size (" + percentage + "%)", StringComparison.Ordinal) ? heading : null;
+         }, "the real larger heading at the completed requested zoom step");
+      }
+      // UIA text boxes use rounded font metrics (35px becomes 44px at 121%); exact font scale is measured in the PDF below.
+      Assert.InRange(session.WaitForElement("mv-heading-0").BoundingRectangle.Height / height, 1.35, 1.6);
+      session.InvokeMenuItem("View", "SourceToggle");
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.EnterText("FindText", "paired needle");
+      WaitForFindCount(session, "1 of 1");
+      (Rectangle Glyph, Rectangle View) reading = WaitForStablePrintViewport(session);
+      string source = session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value;
+      var standardOptions = new PrintOptions("Active Theme");
+      using Bitmap standard = await ExportPrintFixtureAsync(session, "standard", standardOptions);
+      Rectangle original = FirstPrintedInkBand(standard);
+      AssertPrintFindState(session, reading, source);
+      using Bitmap matched = await ExportPrintFixtureAsync(session, "matched", standardOptions with { MatchScreenZoom = true });
+      Rectangle scaled = FirstPrintedInkBand(matched);
+      Assert.InRange((double)scaled.Height / original.Height, 1.35, 1.6);
+      Assert.InRange((double)scaled.Width / original.Width, 1.35, 1.6);
+      AssertPrintFindState(session, reading, source);
+      using Bitmap padded = await ExportPrintFixtureAsync(session, "padded", standardOptions with { PaddingPixels = 40 });
+      Rectangle inset = FirstPrintedInkBand(padded);
+      Assert.InRange(inset.Left - original.Left, 38, 42);
+      Assert.InRange(inset.Height - original.Height, -1, 1);
+      Assert.True(inset.Top > original.Top + 20);
+      AssertPrintFindState(session, reading, source);
+   }
+
+
+
+   /// <summary>A saved custom width and optional borders alter real printed block edges; full-page mode overrides the narrow width.</summary>
+   [Fact]
+   public async Task Print_UserWidthAndBorders_ChangesRealBlockEdges()
+   {
+      using var session = new AppSession(document: "# WIDTH\n\n## Borders\n\n```text\nx\n```");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), "the print width heading", TimeSpan.FromSeconds(30));
+      OpenSettingsAction(session, "EditDocumentThemeMenu");
+      session.EnterText("ThemeEditorName", "Print geometry");
+      session.EnterText("ThemeEditorCss", "body { max-width: 240px; margin: 0 auto; } pre { border: none; border-radius: 0; }");
+      session.ClickButton("Save theme");
+      session.WaitForElementGone("ThemeEditorName");
+      CloseSettings(session);
+      session.InvokeMenuItem("View", "SourceToggle");
+      (Rectangle Glyph, Rectangle View) reading = WaitForStablePrintViewport(session);
+      string source = session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value;
+      var options = new PrintOptions("Print geometry", FullPage: false);
+      using Bitmap plain = await ExportPrintFixtureAsync(session, "without-borders", options);
+      (int Count, int Left) without = LongestPrintedInkRow(plain);
+      AssertPrintScreenState(session, reading, source);
+      using Bitmap narrow = await ExportPrintFixtureAsync(session, "narrow-border", options with { Borders = true });
+      (int Count, int Left) content = LongestPrintedInkRow(narrow);
+      Assert.True(content.Count > without.Count + 100, "Optional borders must add a real continuous printed block edge.");
+      Assert.InRange(content.Count, 220, 260);
+      AssertPrintScreenState(session, reading, source);
+      using Bitmap full = await ExportPrintFixtureAsync(session, "full-border", options with { Borders = true, FullPage = true });
+      (int Count, int Left) page = LongestPrintedInkRow(full);
+      Assert.True(page.Count > content.Count * 2, "Full-page mode must override the custom narrow document width.");
+      Assert.True(page.Left < content.Left - 150, "The full-page border must reach the actual page content edge.");
+      AssertPrintScreenState(session, reading, source);
+   }
+
+
+
+   /// <summary>Edits all requested print choices through their actual native controls, including the bounded NumberBox.</summary>
+   private static void ConfigurePrintOptions(AppSession session, PrintOptions options, AutomationElement? owner = null)
+   {
+      FindPrintControl(session, owner, "PrintTheme").AsComboBox().Select(options.Theme);
+      FindPrintControl(session, owner, "PrintBackgrounds").AsCheckBox().IsChecked = options.Backgrounds;
+      FindPrintControl(session, owner, "PrintImages").AsCheckBox().IsChecked = options.Images;
+      FindPrintControl(session, owner, "PrintZoom").AsComboBox().Select(options.MatchScreenZoom ? "Match screen" : "Standard (100%)");
+      FindPrintControl(session, owner, "PrintWidth").AsComboBox().Select(options.FullPage ? "Full page" : "Document width");
+      FindPrintControl(session, owner, "PrintBorders").AsCheckBox().IsChecked = options.Borders;
+      FindPrintControl(session, owner, "PrintPadding").Patterns.RangeValue.Pattern.SetValue(options.PaddingPixels);
+   }
+
+
+
+   /// <summary>Concurrent Settings and output dialogs retain distinct native control ownership despite sharing option identities.</summary>
+   private static AutomationElement FindPrintControl(AppSession session, AutomationElement? owner, string identity)
+      => owner is null ? session.WaitForElement(identity) : session.WaitFor(() => owner.FindFirstDescendant(cf => cf.ByAutomationId(identity)), "the owned print control " + identity);
+
+
+
+   /// <summary>Retains the real generated PDF before decoding it and its rendered page before any geometric assertion.</summary>
+   private async Task<Bitmap> ExportPrintFixtureAsync(AppSession session, string name, PrintOptions options)
+   {
+      string pdf = Path.Combine(session.DataDirectory, name + ".pdf");
+      SavePrintPdf(session, pdf, options);
+      string evidence = RetainPrintedFixture(session, pdf);
+      Bitmap bitmap = await RenderFirstPdfPageAsync(pdf);
+      bitmap.Save(evidence + ".png", ImageFormat.Png);
+      return bitmap;
+   }
+
+
+
+   /// <summary>Checks actual source selection, query/count, reading paint and native/browser geometry after each successful PDF.</summary>
+   private static void AssertPrintFindState(AppSession session, (Rectangle Glyph, Rectangle View) reading, string source)
+   {
+      AssertPrintScreenState(session, reading, source);
+      WaitForFindCount(session, "1 of 1");
+      Assert.Equal("paired needle", session.WaitForElement("FindText").AsTextBox().Text);
+      AutomationElement text = session.WaitForElement("SourceText");
+      session.WaitFor(() => string.Equals(ReadSourceSelection(text), "paired needle", StringComparison.Ordinal) ? text : null, "the unchanged real paired source selection after printing");
+      WaitForDocumentColor(session, Color.FromArgb(30, 30, 46));
+   }
+
+
+
+   /// <summary>Measures the first contiguous dark glyph band, excluding light rules and later body text.</summary>
+   private static Rectangle FirstPrintedInkBand(Bitmap bitmap, Func<Color, bool>? isInk = null)
+   {
+      isInk ??= IsPrintedInk;
+      int top = -1;
+      int bottom = -1;
+      int left = bitmap.Width;
+      int right = -1;
+      for(int y = 0; y < bitmap.Height; y++)
+      {
+         bool ink = false;
+         for(int x = 0; x < bitmap.Width; x++)
+         {
+            if(isInk(bitmap.GetPixel(x, y)))
+            {
+               ink = true;
+               left = Math.Min(left, x);
+               right = Math.Max(right, x);
+            }
+         }
+         if(ink)
+         {
+            top = top < 0 ? y : top;
+            bottom = y;
+         }
+         else if(top >= 0)
+         {
+            break;
+         }
+      }
+      Assert.True(top >= 0 && right >= left, "The actual PDF must contain a printed heading glyph band.");
+      return Rectangle.FromLTRB(left, top, right + 1, bottom + 1);
+   }
+
+
+
+   /// <summary>Finds the real longest dark row and its left edge to distinguish optional block borders and page width.</summary>
+   private static (int Count, int Left) LongestPrintedInkRow(Bitmap bitmap)
+   {
+      (int Count, int Left) longest = default;
+      for(int y = 0; y < bitmap.Height; y++)
+      {
+         int count = 0;
+         int left = -1;
+         for(int x = 0; x < bitmap.Width; x++)
+         {
+            if(IsPrintedInk(bitmap.GetPixel(x, y)))
+            {
+               count++;
+               left = left < 0 ? x : left;
+            }
+         }
+         if(count > longest.Count)
+         {
+            longest = (count, left);
+         }
+      }
+      return longest;
+   }
+
+
+
+   /// <summary>Counts dark printed ink only; backgrounds are disabled and the fixture's light heading rules are excluded.</summary>
+   private static bool IsPrintedInk(Color pixel) => pixel.R < 100 && pixel.G < 100 && pixel.B < 100;
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Settings.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Settings.cs
new file mode 100644
index 0000000..7be2aec
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Settings.cs
@@ -0,0 +1,442 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+using System.Text.Json;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+using FlaUI.Core.Input;
+using FlaUI.Core.WindowsAPI;
+using MarkdownViewr.Windows.Core.Printing;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Drives actual Settings navigation and checks that parent cancellation retains the saved reader state.</summary>
+public partial class AppTests
+{
+   /// <summary>Explicit startup panel defaults apply to later windows, while the current reader keeps its local visibility choices.</summary>
+   [Fact]
+   public void Settings_NewWindowPanelDefaults_LeaveExistingReaderUnchanged()
+   {
+      using var session = new AppSession(document: "# Default visibility fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Default visibility fixture")), "the default visibility fixture", TimeSpan.FromSeconds(30));
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("OutlineDepth")));
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("SourceText")));
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      session.WaitForElement("SettingsAppearanceTab").Patterns.SelectionItem.Pattern.Select();
+      AutomationElement contents = session.WaitForElement("SettingsDefaultContentsToggle");
+      AutomationElement source = session.WaitForElement("SettingsDefaultSourceToggle");
+      Assert.Equal(ToggleState.Off, contents.Patterns.Toggle.Pattern.ToggleState.Value);
+      Assert.Equal(ToggleState.Off, source.Patterns.Toggle.Pattern.ToggleState.Value);
+      contents.Patterns.Toggle.Pattern.Toggle();
+      source.Patterns.Toggle.Pattern.Toggle();
+      using(var saved = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.True(saved.RootElement.GetProperty("ShowOutlineByDefault").GetBoolean());
+         Assert.True(saved.RootElement.GetProperty("ShowSourceByDefault").GetBoolean());
+      }
+      CloseSettings(session);
+      Window original = session.MainWindow;
+      Assert.Null(original.FindFirstDescendant(cf => cf.ByAutomationId("SourceText")));
+      original.SetForeground();
+      session.WaitForElement("ZoomResetButton").Focus();
+      Wait.UntilInputIsProcessed();
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_N);
+      session.WaitFor(() => DocumentWindows(session).Length == 2 ? session.MainWindow : null, "a reader opened with the selected panel defaults");
+      Window second = DocumentWindows(session).Single(window => !window.Equals(original));
+      Assert.NotNull(WaitForWindowElement(session, second, "SourceText"));
+      AutomationElement depth = WaitForWindowElement(session, second, "OutlineDepth");
+      Assert.False(depth.IsOffscreen);
+      Assert.True(depth.BoundingRectangle.Width > 0);
+      Assert.Null(original.FindFirstDescendant(cf => cf.ByAutomationId("SourceText")));
+      Assert.Null(original.FindFirstDescendant(cf => cf.ByAutomationId("OutlineDepth")));
+   }
+
+
+
+   /// <summary>Native long titles wrap without truncation, depth markers update sibling windows and unrelated saves retain both choices.</summary>
+   [Fact]
+   public void Settings_ContentsPresentation_UpdatesLiveSiblingsAndPersists()
+   {
+      const string Title = "A deliberately long heading that must wrap across several lines in a narrow Contents panel without losing its full title";
+      const string Document = "# Contents display fixture\n\n## " + Title + "\nBody";
+      using var session = new AppSession(document: Document, documentFileName: "contents.md",
+         additionalDocuments: new Dictionary<string, string>(StringComparer.Ordinal) { ["sibling.md"] = Document });
+      Window primary = WaitForDocumentWindow(session, "contents.md");
+      Window sibling = WaitForDocumentWindow(session, "sibling.md");
+      WaitForWindowHeading(session, sibling, "Contents display fixture");
+      session.WaitForElement("mv-heading-0");
+      InvokeDocumentMenu(session, primary, "OutlineToggle", menuName: "View");
+      InvokeDocumentMenu(session, sibling, "OutlineToggle", menuName: "View");
+      AutomationElement title = WaitForWindowElement(session, primary, "OutlineTitle:1");
+      double oneLineHeight = title.BoundingRectangle.Height;
+      Assert.True(oneLineHeight > 0);
+      Assert.Equal(Title, WaitForWindowElement(session, primary, "OutlineHeading:1").Name);
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("OutlineDepthMarker:1")));
+      InvokeDocumentMenu(session, primary, "SettingsMenuItem");
+      AutomationElement wrap = session.WaitForElement("SettingsContentsWrapToggle");
+      AutomationElement markers = session.WaitForElement("SettingsContentsDepthMarkersToggle");
+      Assert.Equal(ToggleState.Off, wrap.Patterns.Toggle.Pattern.ToggleState.Value);
+      Assert.Equal(ToggleState.Off, markers.Patterns.Toggle.Pattern.ToggleState.Value);
+      wrap.Patterns.Toggle.Pattern.Toggle();
+      markers.Patterns.Toggle.Pattern.Toggle();
+      RetainDocumentWindow(session, session.TopLevelWindows().Single(element => string.Equals(element.Name, session.DisplayName + " — Settings", StringComparison.Ordinal)).AsWindow(), "general-contents-settings");
+      CloseSettings(session);
+      session.WaitFor(() => primary.FindFirstDescendant(cf => cf.ByAutomationId("OutlineTitle:1")) is { } label && label.BoundingRectangle.Height > oneLineHeight * 1.8 ? label : null, "the fully wrapped Contents title");
+      Assert.Equal("Heading level 2", WaitForWindowElement(session, primary, "OutlineDepthMarker:1").Name);
+      Assert.Equal("Heading level 2", WaitForWindowElement(session, sibling, "OutlineDepthMarker:1").Name);
+      Assert.True(WaitForWindowElement(session, sibling, "OutlineTitle:1").BoundingRectangle.Height > oneLineHeight * 1.8);
+      InvokeDocumentMenu(session, sibling, "SourceToggle", menuName: "View");
+      AssertSavedContentsPreferences(session, enabled: true);
+      InvokeDocumentMenu(session, primary, "SettingsMenuItem");
+      Assert.Equal(ToggleState.On, session.WaitForElement("SettingsContentsWrapToggle").Patterns.Toggle.Pattern.ToggleState.Value);
+      Assert.Equal(ToggleState.On, session.WaitForElement("SettingsContentsDepthMarkersToggle").Patterns.Toggle.Pattern.ToggleState.Value);
+      session.WaitForElement("SettingsContentsWrapToggle").Patterns.Toggle.Pattern.Toggle();
+      session.WaitForElement("SettingsContentsDepthMarkersToggle").Patterns.Toggle.Pattern.Toggle();
+      CloseSettings(session);
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("OutlineDepthMarker:1")));
+      session.WaitFor(() => primary.FindFirstDescendant(cf => cf.ByAutomationId("OutlineTitle:1")) is { } label && label.BoundingRectangle.Height <= oneLineHeight * 1.2 ? label : null, "the restored single-line Contents title");
+      Assert.Equal(Title, WaitForWindowElement(session, primary, "OutlineHeading:1").Name);
+      AssertSavedContentsPreferences(session, enabled: false);
+      RetainDocumentWindow(session, primary, "contents-truncation-and-markers");
+   }
+
+
+
+   /// <summary>Only a clipped Contents label needs its full-title tooltip, and physical activation still reaches that exact heading.</summary>
+   [Fact]
+   public void Settings_ContentsTooltip_TruncatedTitleKeepsPhysicalHeadingTarget()
+   {
+      const string Title = "A long Contents heading that is visibly clipped and must remain clickable while its full title is available on hover";
+      string body = string.Join("\n\n", Enumerable.Range(0, 50).Select(index => "Contents hover paragraph " + index));
+      using var session = new AppSession(document: "# Contents hover root\n\n" + body + "\n\n## " + Title + "\n\n" + body);
+      session.WaitForElement("mv-heading-0", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      AutomationElement item = session.WaitForElement("OutlineHeading:1");
+      System.Drawing.Rectangle bounds = item.BoundingRectangle;
+      NativeMouse.MoveTo(new System.Drawing.Point(bounds.Left + bounds.Width / 2, bounds.Top + bounds.Height / 2));
+      session.WaitFor(() => session.FindInApp(cf => cf.ByControlType(ControlType.ToolTip).And(cf.ByName(Title))), "the full title of the actually clipped Contents label");
+      session.MouseClickElement("OutlineHeading:1");
+      WaitForBrowserHeadingAlignment(session, "mv-heading-1");
+      Assert.Equal(Title, session.WaitForElement("OutlineHeading:1").Name);
+      RetainDocumentWindow(session, session.MainWindow, "contents-full-title-hover-target");
+   }
+
+
+
+   /// <summary>Apply shares actual defaults with the next print dialog and sibling saves; Restore and closing discard only the draft.</summary>
+   [Fact]
+   public void Settings_PrintingDefaults_ApplyRestoreAndDialogCancel()
+   {
+      using var session = new AppSession(document: "# Printing defaults fixture", documentFileName: "printing.md",
+         additionalDocuments: new Dictionary<string, string>(StringComparer.Ordinal) { ["sibling.md"] = "# Printing sibling fixture" });
+      Window primary = WaitForDocumentWindow(session, "printing.md");
+      Window sibling = WaitForDocumentWindow(session, "sibling.md");
+      AutomationElement heading = WaitForWindowHeading(session, primary, "Printing defaults fixture");
+      WaitForWindowHeading(session, sibling, "Printing sibling fixture");
+      double originalHeight = heading.BoundingRectangle.Height;
+      string originalSettings = session.ReadSettings();
+      InvokeDocumentMenu(session, primary, "SettingsMenuItem");
+      session.WaitForElement("SettingsPrintingTab").Patterns.SelectionItem.Pattern.Select();
+      var options = new PrintOptions("Nord", Backgrounds: true, Images: false, MatchScreenZoom: true, FullPage: false, Borders: true, PaddingPixels: 24);
+      ConfigurePrintOptions(session, options);
+      Assert.Equal(originalSettings, session.ReadSettings());
+      session.ClickElement("SettingsApplyPrint");
+      AssertSavedPrintingDefaults(session, options);
+      RetainDocumentWindow(session, session.TopLevelWindows().Single(element => string.Equals(element.Name, session.DisplayName + " — Settings", StringComparison.Ordinal)).AsWindow(), "printing-defaults-settings");
+      CloseSettings(session);
+      InvokeDocumentMenu(session, sibling, "SourceToggle", menuName: "View");
+      AssertSavedPrintingDefaults(session, options);
+      string savedSettings = session.ReadSettings();
+      InvokeDocumentMenu(session, primary, "PrintMenuItem");
+      AssertPrintOptionControls(session, options);
+      ConfigurePrintOptions(session, new PrintOptions());
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("PrintTheme");
+      Assert.Equal(savedSettings, session.ReadSettings());
+      Assert.Equal(originalHeight, WaitForWindowHeading(session, primary, "Printing defaults fixture").BoundingRectangle.Height);
+      InvokeDocumentMenu(session, primary, "SettingsMenuItem");
+      session.WaitForElement("SettingsPrintingTab").Patterns.SelectionItem.Pattern.Select();
+      AssertPrintOptionControls(session, options);
+      ConfigurePrintOptions(session, new PrintOptions());
+      session.ClickElement("SettingsRestorePrint");
+      AssertPrintOptionControls(session, options);
+      ConfigurePrintOptions(session, new PrintOptions());
+      CloseSettings(session);
+      Assert.Equal(savedSettings, session.ReadSettings());
+   }
+
+
+
+   /// <summary>A sibling's accepted output defaults update the saved baseline while an existing Settings draft remains available to apply or restore.</summary>
+   [Fact]
+   public void Settings_PrintingDraft_SiblingSavePreservesDraftAndRefreshesRestore()
+   {
+      using var session = new AppSession(document: "# Printing draft fixture", documentFileName: "draft.md",
+         additionalDocuments: new Dictionary<string, string>(StringComparer.Ordinal) { ["sibling.md"] = "# Printing sibling output fixture" });
+      Window primary = WaitForDocumentWindow(session, "draft.md");
+      Window sibling = WaitForDocumentWindow(session, "sibling.md");
+      WaitForWindowHeading(session, primary, "Printing draft fixture");
+      WaitForWindowHeading(session, sibling, "Printing sibling output fixture");
+      InvokeDocumentMenu(session, primary, "SettingsMenuItem");
+      session.WaitForElement("SettingsPrintingTab").Patterns.SelectionItem.Pattern.Select();
+      Window settings = session.TopLevelWindows().Single(element => string.Equals(element.Name, session.DisplayName + " — Settings", StringComparison.Ordinal)).AsWindow();
+      var draft = new PrintOptions("Nord", Images: false, Borders: true, PaddingPixels: 24);
+      ConfigurePrintOptions(session, draft, settings);
+      InvokeDocumentMenu(session, sibling, "PrintMenuItem");
+      AutomationElement dialog = session.WaitForElement("PrintOptionsDialog");
+      var saved = new PrintOptions("Plain HTML", Backgrounds: true, FullPage: false, PaddingPixels: 8);
+      ConfigurePrintOptions(session, saved, dialog);
+      session.ClickButton("Print...");
+      session.WaitForElementGone("PrintOptionsDialog");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByControlType(ControlType.Button).And(cf.ByName("Cancel")).And(cf.ByClassName("Button"))), "the owned Windows print dialog's Cancel button");
+      session.ClickButton("Cancel");
+      AssertSavedPrintingDefaults(session, saved);
+      AssertPrintOptionControls(session, draft, settings);
+      session.ClickElement("SettingsRestorePrint");
+      AssertPrintOptionControls(session, saved, settings);
+      AssertSavedPrintingDefaults(session, saved);
+      CloseSettings(session);
+      InvokeDocumentMenu(session, primary, "SourceToggle", menuName: "View");
+      AssertSavedPrintingDefaults(session, saved);
+   }
+
+
+
+   /// <summary>Reads each actual native print control so shared Settings/dialog initialization cannot silently diverge.</summary>
+   private static void AssertPrintOptionControls(AppSession session, PrintOptions options, AutomationElement? owner = null)
+   {
+      Assert.Equal(options.Theme, FindPrintControl(session, owner, "PrintTheme").AsComboBox().SelectedItem?.Text);
+      Assert.Equal(options.Backgrounds, FindPrintControl(session, owner, "PrintBackgrounds").AsCheckBox().IsChecked);
+      Assert.Equal(options.Images, FindPrintControl(session, owner, "PrintImages").AsCheckBox().IsChecked);
+      Assert.Equal(options.MatchScreenZoom ? "Match screen" : "Standard (100%)", FindPrintControl(session, owner, "PrintZoom").AsComboBox().SelectedItem?.Text);
+      Assert.Equal(options.FullPage ? "Full page" : "Document width", FindPrintControl(session, owner, "PrintWidth").AsComboBox().SelectedItem?.Text);
+      Assert.Equal(options.Borders, FindPrintControl(session, owner, "PrintBorders").AsCheckBox().IsChecked);
+      Assert.Equal(options.PaddingPixels, FindPrintControl(session, owner, "PrintPadding").Patterns.RangeValue.Pattern.Value.Value);
+   }
+
+
+
+   /// <summary>Checks the real saved print record rather than a returned UI draft.</summary>
+   private static void AssertSavedPrintingDefaults(AppSession session, PrintOptions options)
+   {
+      using var saved = JsonDocument.Parse(session.ReadSettings());
+      JsonElement print = saved.RootElement.GetProperty("Print");
+      Assert.Equal(options.Theme, print.GetProperty("Theme").GetString());
+      Assert.Equal(options.Backgrounds, print.GetProperty("Backgrounds").GetBoolean());
+      Assert.Equal(options.Images, print.GetProperty("Images").GetBoolean());
+      Assert.Equal(options.MatchScreenZoom, print.GetProperty("MatchScreenZoom").GetBoolean());
+      Assert.Equal(options.FullPage, print.GetProperty("FullPage").GetBoolean());
+      Assert.Equal(options.Borders, print.GetProperty("Borders").GetBoolean());
+      Assert.Equal(options.PaddingPixels, print.GetProperty("PaddingPixels").GetDouble());
+   }
+
+
+
+   /// <summary>The appearance draft survives a cancelled secondary theme editor without saving either draft.</summary>
+   [Fact]
+   public void Settings_ThemeEditorCancel_RetainsCssDraftUntilWindowClose()
+   {
+      using var session = new AppSession(document: "# Settings cancellation fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Settings cancellation fixture")), "the Settings fixture heading", TimeSpan.FromSeconds(30));
+      string saved = session.ReadSettings();
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      session.EnterText("ReadingAppearanceCss", "html { background: #112233; }");
+      session.WaitForElement("SettingsThemesTab").Patterns.SelectionItem.Pattern.Select();
+      session.ClickElement("EditDocumentThemeMenu");
+      session.EnterText("ThemeEditorName", "Cancelled Settings theme");
+      session.ClickButton("Cancel");
+      session.WaitForElement("SettingsWindowRoot");
+      session.WaitForElement("SettingsAppearanceTab").Patterns.SelectionItem.Pattern.Select();
+      Assert.Equal("html { background: #112233; }", session.WaitForElement("ReadingAppearanceCss").Patterns.Value.Pattern.Value.Value);
+      Assert.Equal(saved, session.ReadSettings());
+      CloseSettings(session);
+      Assert.Equal(saved, session.ReadSettings());
+      Assert.NotNull(session.WaitForElement("mv-heading-0"));
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("EditDocumentThemeMenu")));
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("ManageDocumentThemesMenu")));
+      session.ClickElement("DocumentTheme:Catppuccin Mocha");
+      RetainDocumentWindow(session, session.MainWindow, "settings-draft-cancel");
+   }
+
+
+
+   /// <summary>A normal native settings window stays resizable/nonmodal and saves routine preferences without applying CSS drafts.</summary>
+   [Fact]
+   public void Settings_NativeWindowLayoutAndNavigation_SavesRoutineFieldsOnly()
+   {
+      using var session = new AppSession(document: "# Standard settings fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Standard settings fixture")), "the native Settings fixture", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      Window window = session.TopLevelWindows().Single(element => string.Equals(element.Name, session.DisplayName + " — Settings", StringComparison.Ordinal)).AsWindow();
+      Assert.True(session.MainWindow.IsEnabled);
+      Assert.True(window.Patterns.Transform.Pattern.CanResize.Value);
+      var desktop = new System.Drawing.Rectangle(User32.GetSystemMetrics(SystemMetric.SM_XVIRTUALSCREEN), User32.GetSystemMetrics(SystemMetric.SM_YVIRTUALSCREEN),
+         User32.GetSystemMetrics(SystemMetric.SM_CXVIRTUALSCREEN), User32.GetSystemMetrics(SystemMetric.SM_CYVIRTUALSCREEN));
+      Assert.True(desktop.Contains(window.BoundingRectangle), "The complete Settings window must fit on the actual desktop.");
+      window.Patterns.Transform.Pattern.Resize(780, 600);
+      session.WaitForElement("ReadingAppearanceWidth").Patterns.RangeValue.Pattern.SetValue(320);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("ReadingAppearanceLimit")) is { IsEnabled: true } control ? control : null, "the immediate width save");
+      AutomationElement limit = session.WaitForElement("ReadingAppearanceLimit");
+      if(limit.Patterns.Toggle.Pattern.ToggleState.Value != ToggleState.On)
+      {
+         limit.Patterns.Toggle.Pattern.Toggle();
+      }
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("ReadingAppearanceCss")) is { IsEnabled: true } control ? control : null, "the immediate width toggle save");
+      session.EnterText("ReadingAppearanceCss", "html { background: #334455; }");
+      session.WaitForElement("SettingsThemesTab").Patterns.SelectionItem.Pattern.Select();
+      Assert.NotNull(session.WaitForElement("EditDocumentThemeMenu"));
+      session.WaitForElement("SettingsEditorsTab").Patterns.SelectionItem.Pattern.Select();
+      Assert.NotNull(session.WaitForElement("ConfigureEditorMenuItem"));
+      session.WaitForElement("SettingsAppearanceTab").Patterns.SelectionItem.Pattern.Select();
+      Assert.Equal("html { background: #334455; }", session.WaitForElement("ReadingAppearanceCss").Patterns.Value.Pattern.Value.Value);
+      CloseSettings(session);
+      using var saved = JsonDocument.Parse(session.ReadSettings());
+      Assert.Equal(320, saved.RootElement.GetProperty("ContentWidthPx").GetDouble());
+      Assert.True(saved.RootElement.GetProperty("ContentWidthEnabled").GetBoolean());
+      Assert.Equal("", saved.RootElement.GetProperty("GlobalCss").GetString());
+      Assert.NotNull(session.WaitForElement("mv-heading-0"));
+   }
+
+
+
+   /// <summary>Advanced startup controls persist the actual choices and survive a sibling reader's unrelated save.</summary>
+   [Fact]
+   public void Settings_AdvancedStartup_PersistsAcrossSettingsAndSiblingSaves()
+   {
+      using var session = new AppSession(document: "# Startup settings fixture", documentFileName: "startup.md",
+         additionalDocuments: new Dictionary<string, string>(StringComparer.Ordinal) { ["sibling.md"] = "# Startup sibling fixture" });
+      Window sibling = WaitForDocumentWindow(session, "sibling.md");
+      WaitForWindowHeading(session, sibling, "Startup sibling fixture");
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("AppKitSplash")));
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      session.WaitForElement("SettingsAdvancedTab").Patterns.SelectionItem.Pattern.Select();
+      AutomationElement splash = session.WaitForElement("SettingsSplashToggle");
+      AutomationElement duration = session.WaitForElement("SettingsSplashDurationBox");
+      Assert.Equal(ToggleState.Off, splash.Patterns.Toggle.Pattern.ToggleState.Value);
+      Assert.False(duration.IsEnabled);
+      splash.Patterns.Toggle.Pattern.Toggle();
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("SettingsSplashDurationBox")) is { IsEnabled: true } control ? control : null, "the enabled splash duration");
+      duration.Patterns.RangeValue.Pattern.SetValue(1250);
+      session.WaitForElement("SettingsStartupUpdatesToggle").Patterns.Toggle.Pattern.Toggle();
+      CloseSettings(session);
+      InvokeDocumentMenu(session, sibling, "OutlineToggle", menuName: "View");
+      using(var saved = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.True(saved.RootElement.GetProperty("ShowSplashScreen").GetBoolean());
+         Assert.Equal(1250, saved.RootElement.GetProperty("SplashMilliseconds").GetInt32());
+         Assert.True(saved.RootElement.GetProperty("CheckForUpdatesOnStartup").GetBoolean());
+         Assert.True(saved.RootElement.GetProperty("ShowOutline").GetBoolean());
+      }
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      session.WaitForElement("SettingsAdvancedTab").Patterns.SelectionItem.Pattern.Select();
+      Assert.Equal(1250, session.WaitForElement("SettingsSplashDurationBox").Patterns.RangeValue.Pattern.Value.Value);
+      session.WaitForElement("SettingsSplashToggle").Patterns.Toggle.Pattern.Toggle();
+      Assert.False(session.WaitForElement("SettingsSplashDurationBox").IsEnabled);
+      CloseSettings(session);
+      using var disabled = JsonDocument.Parse(session.ReadSettings());
+      Assert.False(disabled.RootElement.GetProperty("ShowSplashScreen").GetBoolean());
+      Assert.Equal(1250, disabled.RootElement.GetProperty("SplashMilliseconds").GetInt32());
+      RetainDocumentWindow(session, session.MainWindow, "advanced-startup-settings");
+   }
+
+
+
+   /// <summary>The native page advertises user-selected defaults and enables its OS action only for a registered installed executable.</summary>
+   [Fact]
+   public void Settings_DefaultFileTypes_RespectsInstalledRegistration()
+   {
+      using var session = new AppSession(document: "# Default file settings fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Default file settings fixture")), "the default file settings fixture", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      session.WaitForElement("SettingsAppearanceTab").Patterns.SelectionItem.Pattern.Select();
+      AutomationElement guidance = session.WaitForElement("SettingsDefaultFilesGuidance");
+      Assert.Contains(".md", guidance.Name, StringComparison.Ordinal);
+      Assert.Contains(".txt) is optional", guidance.Name, StringComparison.Ordinal);
+      AutomationElement choose = session.WaitForElement("SettingsDefaultFilesButton");
+      var stable = new FileTypeRegistration(Microsoft.Win32.Registry.CurrentUser, session.ExePath, "stable");
+      var dev = new FileTypeRegistration(Microsoft.Win32.Registry.CurrentUser, session.ExePath, "dev");
+      bool registered = stable.GetDefaultAppsUri(supportsAppPage: true) is not null || dev.GetDefaultAppsUri(supportsAppPage: true) is not null;
+      Assert.Equal(registered, choose.IsEnabled);
+      AssertDefaultMarkdownStatus(session, registered, stable, dev);
+      string? installedFixture = Environment.GetEnvironmentVariable("K22_UITEST_INSTALLED");
+      if(string.Equals(installedFixture, "1", StringComparison.Ordinal))
+      {
+         FileTypeRegistration installedRegistration = string.Equals(Environment.GetEnvironmentVariable("K22_UITEST_CHANNEL"), "dev", StringComparison.Ordinal) ? dev : stable;
+         Assert.NotNull(installedRegistration.GetDefaultAppsUri(supportsAppPage: true));
+         Assert.True(choose.IsEnabled);
+      }
+      else if(string.Equals(installedFixture, "0", StringComparison.Ordinal))
+      {
+         Assert.False(registered);
+      }
+      if(!registered)
+      {
+         Assert.NotNull(session.FindInApp(cf => cf.ByName("Install or repair MarkdownViewr to make it available in Open with and Default Apps. This preview does not change Windows file associations.")));
+      }
+      CloseSettings(session);
+      Assert.NotNull(session.WaitForElement("mv-heading-0"));
+      RetainDocumentWindow(session, session.MainWindow, "default-file-settings");
+   }
+
+
+
+   /// <summary>Reads the actual saved presentation choices and proves they did not opt new windows into either pane.</summary>
+   private static void AssertSavedContentsPreferences(AppSession session, bool enabled)
+   {
+      using var saved = JsonDocument.Parse(session.ReadSettings());
+      Assert.Equal(enabled, saved.RootElement.GetProperty("WrapOutlineEntries").GetBoolean());
+      Assert.Equal(enabled, saved.RootElement.GetProperty("ShowOutlineDepthMarkers").GetBoolean());
+      Assert.False(saved.RootElement.GetProperty("ShowOutlineByDefault").GetBoolean());
+      Assert.False(saved.RootElement.GetProperty("ShowSourceByDefault").GetBoolean());
+   }
+
+
+
+   /// <summary>Compares the live native status to Windows' effective ProgID, including exact edition ownership, then exercises refresh.</summary>
+   private static void AssertDefaultMarkdownStatus(AppSession session, bool registered, FileTypeRegistration stable, FileTypeRegistration dev)
+   {
+      string expected = "This copy is not registered for Markdown defaults.";
+      if(registered)
+      {
+         FileTypeRegistration current = stable.GetDefaultAppsUri(supportsAppPage: true) is not null ? stable : dev;
+         expected = current.IsDefaultMarkdownViewer(ShellFileAssociations.QueryProgId(".md")) switch
+         {
+            true => "Default viewer for .md files.",
+            false => "Not the default viewer for .md files.",
+            null => "Windows did not report the current .md default. Use Default Apps to check your choice.",
+         };
+      }
+      Assert.Equal(expected, session.WaitForElement("SettingsDefaultMarkdownStatus").Name);
+      session.ClickElement("SettingsRefreshDefaultFiles");
+      Assert.Equal(expected, session.WaitForElement("SettingsDefaultMarkdownStatus").Name);
+   }
+
+
+
+   /// <summary>All configuration tests enter through the actual File Settings command and native category items.</summary>
+   private static void OpenSettingsAction(AppSession session, string identity, string tab = "SettingsThemesTab")
+   {
+      session.InvokeMenuItem("File", "SettingsMenuItem");
+      session.WaitForElement(tab).Patterns.SelectionItem.Pattern.Select();
+      Window settings = session.TopLevelWindows().Single(window => string.Equals(window.Name, session.DisplayName + " — Settings", StringComparison.Ordinal)).AsWindow();
+      settings.SetForeground();
+      session.WaitForElement(identity).Focus();
+      Wait.UntilInputIsProcessed();
+      session.ClickElement(identity);
+   }
+
+
+
+   /// <summary>Separately saved theme/editor actions return to the same parent draft; closing discards unsubmitted CSS.</summary>
+   private static void CloseSettings(AppSession session)
+   {
+      session.WaitForElement("SettingsWindowRoot", TimeSpan.FromSeconds(30));
+      session.TopLevelWindows().Single(window => string.Equals(window.Name, session.DisplayName + " — Settings", StringComparison.Ordinal)).AsWindow().Close();
+      session.WaitForElementGone("SettingsWindowRoot");
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceCopy.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceCopy.cs
new file mode 100644
index 0000000..ecfc33b
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceCopy.cs
@@ -0,0 +1,39 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Input;
+using FlaUI.Core.WindowsAPI;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Copies literal native selections with real Ctrl+C and observes the system clipboard rather than a source mirror.</summary>
+public partial class AppTests
+{
+   /// <summary>Syntax styling never changes copied Unicode, whitespace, original newline spelling or the read-only source snapshot.</summary>
+   [Fact]
+   public void SourceHighlighting_CopyUnicodeAndNewlines_UsesPlainExactClipboard()
+   {
+      const string Markdown = "# Exact source copy\r\n\r\n**bold** 😀 café\n<script>literal</script>\r\nlast\r";
+      using var session = new AppSession(document: Markdown);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Exact source copy")), "the source copy fixture", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source = session.WaitForElement("SourceText");
+      session.MouseClickElement("SourceText");
+      source.Patterns.Text.Pattern.DocumentRange.Select();
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_C);
+      session.WaitFor(() => string.Equals(NativeClipboard.ReadText(), Markdown, StringComparison.Ordinal) ? source : null, "exact original source on the actual Unicode clipboard");
+      Assert.False(NativeClipboard.HasRichText());
+      SourceRange(source, "😀 café").Select();
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_C);
+      session.WaitFor(() => string.Equals(NativeClipboard.ReadText(), "😀 café", StringComparison.Ordinal) ? source : null, "the actual native Unicode selection copied without syntax colors");
+      Assert.False(NativeClipboard.HasRichText());
+      Keyboard.Type("Cannot edit source");
+      Wait.UntilInputIsProcessed();
+      Assert.Equal(Markdown.ReplaceLineEndings("\r"), source.Patterns.Value.Pattern.Value.Value);
+      Assert.True(source.Patterns.Value.Pattern.IsReadOnly.Value);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceHighlighting.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceHighlighting.cs
new file mode 100644
index 0000000..d722ab5
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceHighlighting.cs
@@ -0,0 +1,143 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Globalization;
+using FlaUI.Core;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Identifiers;
+using FlaUI.Core.Input;
+using MarkdownViewr.Windows.Core.Documents;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Observes actual native source text-range colors and formatting, rather than mirrored parser/token diagnostics.</summary>
+public partial class AppTests
+{
+   /// <summary>Moving the actual pointer into and out of the native source must retain semantic character colors.</summary>
+   [Fact]
+   public void SourceHighlighting_PointerHoverAndFocus_RetainsNativeTokenColors()
+   {
+      using var session = new AppSession(document: "# Hover highlighting\n\nPlain text and \u0060literal code\u0060.");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Hover highlighting")), "the hover regression fixture", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      session.InvokeMenuItem("View", "ThemeLight");
+      AutomationElement source = session.WaitForElement("SourceText");
+      var palette = new SourcePalette(ThemeCatalog.Find("Catppuccin Mocha"), dark: false);
+      WaitForNativeSourceColor(session, source, "Hover highlighting", palette.Color(SourceTokenKind.Heading));
+      WaitForNativeSourceColor(session, source, "literal code", palette.Color(SourceTokenKind.Code));
+      session.MainWindow.SetForeground();
+      System.Drawing.Rectangle bounds = source.BoundingRectangle;
+      var point = new System.Drawing.Point(bounds.Left + bounds.Width / 2, bounds.Top + Math.Min(40, bounds.Height / 2));
+      NativeMouse.MoveTo(point);
+      Wait.UntilInputIsProcessed();
+      Assert.Equal(palette.Color(SourceTokenKind.Heading), NativeSourceColorHex(SourceRange(source, "Hover highlighting"), session));
+      Assert.Equal(palette.Color(SourceTokenKind.Code), NativeSourceColorHex(SourceRange(source, "literal code"), session));
+      source.Focus();
+      SourceRange(source, "Plain text").Select();
+      Wait.UntilInputIsProcessed();
+      Assert.Equal(palette.Color(SourceTokenKind.Heading), NativeSourceColorHex(SourceRange(source, "Hover highlighting"), session));
+      Assert.Equal(palette.Color(SourceTokenKind.Code), NativeSourceColorHex(SourceRange(source, "literal code"), session));
+      Assert.True(source.Patterns.Value.Pattern.IsReadOnly.Value);
+      RetainDocumentWindow(session, session.MainWindow, "source-hover-regression");
+   }
+
+
+
+   /// <summary>Converts the observed native COLORREF for exact before/after-hover assertions.</summary>
+   private static string NativeSourceColorHex(ITextRange range, AppSession session)
+   {
+      int color = NativeSourceAttribute(range, session.Automation.TextAttributeLibrary.ForegroundColor);
+      return FormattableString.Invariant($"#{color & 255:X2}{color >> 8 & 255:X2}{color >> 16 & 255:X2}");
+   }
+
+
+
+   /// <summary>Shell mode and document palette recolor native glyphs while exact text, selection and read-only source remain intact.</summary>
+   [Fact]
+   public void SourceHighlighting_ThemeModesAndPalette_UpdatesNativeRanges()
+   {
+      const string Markdown = "# Highlighting fixture\r\n\r\nPlain 😀 text and **bold** with *italic* and `code`.\n\n<script>literal()</script>\n\n[passive](https://example.invalid)";
+      using var session = new AppSession(document: Markdown);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Highlighting fixture")), "the source color fixture", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source = session.WaitForElement("SourceText");
+      Assert.True(source.Patterns.Value.Pattern.IsReadOnly.Value);
+      Assert.Equal(Markdown.ReplaceLineEndings("\r"), source.Patterns.Value.Pattern.Value.Value);
+      session.InvokeMenuItem("View", "ThemeLight");
+      AssertNativeSourcePalette(session, source, ThemeCatalog.Find("Catppuccin Mocha"), dark: false);
+      session.InvokeMenuItem("View", "ThemeSystem");
+      session.InvokeMenuItem("View", "ThemeLight");
+      AssertNativeSourcePalette(session, source, ThemeCatalog.Find("Catppuccin Mocha"), dark: false);
+      SourceRange(source, "Plain 😀 text").Select();
+      string selected = ReadSourceSelection(source);
+      session.InvokeMenuItem("View", "ThemeDark");
+      AssertNativeSourcePalette(session, source, ThemeCatalog.Find("Catppuccin Mocha"), dark: true);
+      Assert.Equal(selected, ReadSourceSelection(source));
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:GitHub Light");
+      AssertNativeSourcePalette(session, source, ThemeCatalog.Find("GitHub Light"), dark: true);
+      Assert.Equal(selected, ReadSourceSelection(source));
+      Assert.True(NativeSourceAttribute(SourceRange(source, "bold"), session.Automation.TextAttributeLibrary.FontWeight) >= 600);
+      Assert.True(Assert.IsType<bool>(SourceRange(source, "italic").GetAttributeValue(session.Automation.TextAttributeLibrary.IsItalic)));
+      Assert.Empty(source.FindAllDescendants(cf => cf.ByControlType(FlaUI.Core.Definitions.ControlType.Hyperlink)));
+      Assert.Equal(Markdown.ReplaceLineEndings("\r"), source.Patterns.Value.Pattern.Value.Value);
+      RetainDocumentWindow(session, session.MainWindow, "source-native-dark-document-palette");
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), "# Fresh highlighting\n\nPlain 😀 text and `new code`.");
+      session.WaitFor(() => source.Patterns.Value.Pattern.Value.Value.Contains("Fresh highlighting", StringComparison.Ordinal) ? source : null, "the committed highlighted reload snapshot");
+      var palette = new SourcePalette(ThemeCatalog.Find("GitHub Light"), dark: true);
+      WaitForNativeSourceColor(session, source, "new code", palette.Color(SourceTokenKind.Code));
+   }
+
+
+
+   /// <summary>Real native foreground attributes follow semantic spans and remain distinct from ordinary source text.</summary>
+   private static void AssertNativeSourcePalette(AppSession session, AutomationElement source, ReaderTheme theme, bool dark)
+   {
+      var palette = new SourcePalette(theme, dark);
+      WaitForNativeSourceColor(session, source, "Highlighting fixture", palette.Color(SourceTokenKind.Heading));
+      WaitForNativeSourceColor(session, source, "Plain 😀 text", palette.Foreground);
+      WaitForNativeSourceColor(session, source, "code", palette.Color(SourceTokenKind.Code));
+      WaitForNativeSourceColor(session, source, "passive", palette.Color(SourceTokenKind.Link));
+   }
+
+
+
+   /// <summary>UIA's native color attribute is COLORREF, with red in the low byte.</summary>
+   private static void WaitForNativeSourceColor(AppSession session, AutomationElement source, string literal, string expected)
+   {
+      int red = int.Parse(expected.AsSpan(1, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture);
+      int green = int.Parse(expected.AsSpan(3, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture);
+      int blue = int.Parse(expected.AsSpan(5, 2), NumberStyles.HexNumber, CultureInfo.InvariantCulture);
+      int color = red | green << 8 | blue << 16;
+      try
+      {
+         int stable = 0;
+         session.WaitFor(() =>
+         {
+            stable = NativeSourceAttribute(SourceRange(source, literal), session.Automation.TextAttributeLibrary.ForegroundColor) == color ? stable + 1 : 0;
+            return stable >= 3 ? source : null;
+         }, "the actual native source color of " + literal);
+      }
+      catch(TimeoutException exception)
+      {
+         string actual = NativeSourceColorHex(SourceRange(source, literal), session);
+         throw new TimeoutException(exception.Message + "; Expected=" + expected + "; Actual=" + actual + "; Last native invocation=" + session.LastInvocation + "; App logs: " + session.ReadLogs() + "; Native tree: " + session.DescribeDocumentStatus(), exception);
+      }
+   }
+
+
+
+   /// <summary>Reads an actual native text range rather than using cached application source positions.</summary>
+   private static ITextRange SourceRange(AutomationElement source, string literal)
+      => source.Patterns.Text.Pattern.DocumentRange.FindText(literal, backward: false, ignoreCase: false) ?? throw new InvalidOperationException("The literal native source range is absent: " + literal);
+
+
+
+   /// <summary>Only a native numeric attribute satisfies appearance assertions; unsupported/mixed attributes fail explicitly.</summary>
+   private static int NativeSourceAttribute(ITextRange range, TextAttributeId attribute)
+      => Assert.IsType<int>(range.GetAttributeValue(attribute));
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceLayout.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceLayout.cs
new file mode 100644
index 0000000..6a93e72
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.SourceLayout.cs
@@ -0,0 +1,51 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Input;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Compares actual native/browser pane geometry without counting the outline as document space.</summary>
+public partial class AppTests
+{
+   /// <summary>UIA widths include display scaling; equal DIP columns must remain within two physical pixels.</summary>
+   private static void AssertEqualSourcePanes(AppSession session)
+   {
+      try
+      {
+         session.WaitFor(() =>
+         {
+            AutomationElement source = session.WaitForElement("SourceText");
+            AutomationElement document = session.WaitForElement("DocumentView");
+            return source.BoundingRectangle.Width > 0 && Math.Abs(source.BoundingRectangle.Width - document.BoundingRectangle.Width) <= 2 ? source : null;
+         }, "equal actual document/source widths, excluding the outline and dividers");
+      }
+      catch(TimeoutException exception)
+      {
+         throw new TimeoutException(exception.Message + "; Last native invocation=" + session.LastInvocation + "; Settings=" + session.ReadSettings() + "; Native tree: " + session.DescribeDocumentStatus(), exception);
+      }
+   }
+
+
+
+   /// <summary>Moves the real owned divider and checks the pointer target before pressing a button.</summary>
+   private static void DragSourceDivider(AppSession session, AutomationElement divider, int horizontalChange)
+   {
+      session.MainWindow.SetForeground();
+      Assert.True(divider.TryGetClickablePoint(out System.Drawing.Point start));
+      Assert.Equal("SourceDivider", session.Automation.FromPoint(start).Properties.AutomationId.ValueOrDefault);
+      NativeMouse.MoveTo(start);
+      Wait.UntilInputIsProcessed();
+      Mouse.Down(MouseButton.Left);
+      Wait.UntilInputIsProcessed();
+      NativeMouse.MoveTo(new System.Drawing.Point(start.X + horizontalChange, start.Y));
+      Wait.UntilInputIsProcessed();
+      Mouse.Up(MouseButton.Left);
+      Wait.UntilInputIsProcessed();
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.ThemeManagement.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.ThemeManagement.cs
new file mode 100644
index 0000000..c4f7651
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.ThemeManagement.cs
@@ -0,0 +1,212 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Drawing;
+using System.Text.Json;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+using FlaUI.Core.WindowsAPI;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Drives actual theme management, menu geometry, physical cycling keys and shared reader paint.</summary>
+public partial class AppTests
+{
+   /// <summary>Native saved order/disable state changes the real submenu and physical cycling; cancelled deletion and text focus remain untouched.</summary>
+   [Fact]
+   public void Themes_OrderDisableCycleAndCancel_UsesActualNativeChoices()
+   {
+      using var session = new AppSession(document: "# Native theme management");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Native theme management")), "the actual theme fixture heading", TimeSpan.FromSeconds(30));
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "Catppuccin Mocha");
+      session.ClickElement("ThemeListUp");
+      SelectThemeDraft(session, "Catppuccin Latte");
+      session.WaitForElement("ThemeListEnabled").Patterns.Toggle.Pattern.Toggle();
+      session.ClickButton("Save themes");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.WaitForElement("DocumentTheme:Catppuccin Mocha");
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("DocumentTheme:Catppuccin Latte")));
+      AutomationElement[] menu = session.TopLevelWindows().SelectMany(window => window.FindAllDescendants(cf => cf.ByControlType(ControlType.MenuItem)))
+         .Where(element => element.Properties.AutomationId.ValueOrDefault?.StartsWith("DocumentTheme:", StringComparison.Ordinal) == true && !element.IsOffscreen)
+         .OrderBy(element => element.BoundingRectangle.Top).ToArray();
+      Assert.Equal("DocumentTheme:Catppuccin Mocha", menu[0].Properties.AutomationId.Value);
+      Assert.Equal("DocumentTheme:Dracula", menu[1].Properties.AutomationId.Value);
+      session.ClickElement("DocumentTheme:Catppuccin Mocha");
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.SHIFT, VirtualKeyShort.DOWN);
+      WaitForDocumentColor(session, Color.FromArgb(40, 42, 54));
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.SHIFT, VirtualKeyShort.UP);
+      WaitForDocumentColor(session, Color.FromArgb(30, 30, 46));
+      string accepted = session.ReadSettings();
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "Catppuccin Mocha");
+      session.ClickElement("ThemeListDelete");
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      Assert.Equal(accepted, session.ReadSettings());
+      WaitForDocumentColor(session, Color.FromArgb(30, 30, 46));
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.EnterText("FindText", "Native theme management");
+      WaitForFindCount(session, "1 of 1");
+      session.WaitForElement("FindText").Focus();
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.SHIFT, VirtualKeyShort.DOWN);
+      Assert.Equal(accepted, session.ReadSettings());
+      Assert.Equal("Native theme management", session.WaitForElement("FindText").Patterns.Value.Pattern.Value.Value);
+      RetainDocumentWindow(session, session.MainWindow, "theme-order-disable-cycle-cancel");
+   }
+
+
+
+   /// <summary>Actual native palette pixels and explicit default/enabled state stay in the copied manager draft until Save.</summary>
+   [Fact]
+   public void Themes_PalettePreviewAndDefaultChoice_PreservesDraftAndPaintsSavedSelection()
+   {
+      using var session = new AppSession(document: "# Native palette preview fixture");
+      session.WaitForElement("mv-heading-0", TimeSpan.FromSeconds(30));
+      string saved = session.ReadSettings();
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "Nord");
+      AutomationElement choice = session.WaitForElement("ThemeChoice:Nord");
+      choice.Patterns.ScrollItem.Pattern.ScrollIntoView();
+      Assert.Equal("Built-in · Enabled", session.WaitForElement("ThemeState:Nord").Name);
+      Assert.False(session.WaitForElement("ThemeListDefault").Patterns.SelectionItem.Pattern.IsSelected.Value);
+      WaitForThemePaletteColor(session, "Nord", "background", Color.FromArgb(46, 52, 64));
+      Assert.Contains("color #", session.WaitForElement("ThemePalette:Nord:text").Name, StringComparison.Ordinal);
+      Assert.Contains("color #", session.WaitForElement("ThemePalette:Nord:heading1").Name, StringComparison.Ordinal);
+      Assert.Contains("color #", session.WaitForElement("ThemePalette:Nord:heading2").Name, StringComparison.Ordinal);
+      Assert.Contains("color #", session.WaitForElement("ThemePalette:Nord:link").Name, StringComparison.Ordinal);
+      session.WaitForElement("ThemeListEnabled").Patterns.Toggle.Pattern.Toggle();
+      Assert.Equal("Built-in · Disabled", session.WaitForElement("ThemeState:Nord").Name);
+      session.WaitForElement("ThemeListDefault").Patterns.SelectionItem.Pattern.Select();
+      Assert.Equal(ToggleState.On, session.WaitForElement("ThemeListEnabled").Patterns.Toggle.Pattern.ToggleState.Value);
+      Assert.True(session.WaitForElement("ThemeListDefault").Patterns.SelectionItem.Pattern.IsSelected.Value);
+      Assert.Equal("Built-in · Enabled · Default", session.WaitForElement("ThemeState:Nord").Name);
+      Assert.Equal(saved, session.ReadSettings());
+      RetainDocumentWindow(session, session.TopLevelWindows().Single(element => string.Equals(element.Name, session.DisplayName + " — Settings", StringComparison.Ordinal)).AsWindow(), "native-theme-palettes-default-draft");
+      session.ClickButton("Save themes");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      WaitForSavedDocumentTheme(session, "Nord");
+      WaitForDocumentColor(session, Color.FromArgb(46, 52, 64));
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "Nord");
+      Assert.True(session.WaitForElement("ThemeListDefault").Patterns.SelectionItem.Pattern.IsSelected.Value);
+      Assert.Equal("Built-in · Enabled · Default", session.WaitForElement("ThemeState:Nord").Name);
+      session.ClickButton("Cancel");
+      CloseSettings(session);
+   }
+
+
+
+   /// <summary>Measures an actually visible swatch's painted center rather than only its label or serialized palette.</summary>
+   private static void WaitForThemePaletteColor(AppSession session, string name, string field, Color expected)
+   {
+      session.WaitFor(() =>
+      {
+         AutomationElement swatch = session.WaitForElement("ThemePalette:" + name + ":" + field);
+         if(swatch.IsOffscreen)
+         {
+            return null;
+         }
+         using Bitmap image = swatch.Capture();
+         return image.GetPixel(image.Width / 2, image.Height / 2).ToArgb() == expected.ToArgb() ? swatch : null;
+      }, "the actual native theme palette color " + expected);
+   }
+
+
+
+   /// <summary>Saved deletion removes a real choice and updates sibling paint; later local saves cannot resurrect deleted/shared state.</summary>
+   [Fact]
+   public void Themes_SharedDeleteRestoreAndSiblingSave_RetainsActualCatalog()
+   {
+      using var session = new AppSession(document: "# Shared theme management");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Shared theme management")), "the actual first reader", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("File", "NewWindowMenuItem");
+      Window sibling = session.WaitFor(() => DocumentWindows(session).FirstOrDefault(window => string.Equals(window.Name, session.DisplayName, StringComparison.Ordinal)), "the blank theme sibling").AsWindow();
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:GitHub Light");
+      WaitForAppearanceWindowColor(session, session.MainWindow, Color.White);
+      WaitForAppearanceWindowColor(session, sibling, Color.White);
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "GitHub Light");
+      session.ClickElement("ThemeListDelete");
+      session.ClickButton("Save themes");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      WaitForAppearanceWindowColor(session, session.MainWindow, Color.FromArgb(239, 241, 245));
+      WaitForAppearanceWindowColor(session, sibling, Color.FromArgb(239, 241, 245));
+      InvokeDocumentMenu(session, sibling, "SourceToggle", menuName: "View");
+      session.WaitFor(() => sibling.FindFirstDescendant(cf => cf.ByAutomationId("SourceText")), "the sibling's later local preference save");
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.Equal("GitHub Light", Assert.Single(settings.RootElement.GetProperty("DeletedBuiltInThemes").EnumerateArray()).GetString());
+         Assert.Equal("Catppuccin Latte", settings.RootElement.GetProperty("DocumentTheme").GetString());
+      }
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.WaitForElement("DocumentTheme:Catppuccin Latte");
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("DocumentTheme:GitHub Light")));
+      session.ClickElement("DocumentTheme:Catppuccin Latte");
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      session.ClickElement("ThemeListRestore");
+      Assert.NotNull(session.WaitForElement("ThemeChoice:GitHub Light"));
+      session.ClickButton("Save themes");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:GitHub Light");
+      WaitForAppearanceWindowColor(session, session.MainWindow, Color.White);
+      WaitForAppearanceWindowColor(session, sibling, Color.White);
+      Assert.Equal(2, DocumentWindows(session).Length);
+      Assert.Equal("# Shared theme management", File.ReadAllText(Path.Combine(session.DataDirectory, "document.md")));
+      RetainDocumentWindow(session, sibling, "theme-shared-delete-restore");
+   }
+
+
+
+   /// <summary>Waits for an atomic saved selection before checking restoration that deliberately retains the same painted palette.</summary>
+   private static void WaitForSavedDocumentTheme(AppSession session, string name)
+      => session.WaitFor(() =>
+      {
+         using var settings = JsonDocument.Parse(session.ReadSettings());
+         return string.Equals(settings.RootElement.GetProperty("DocumentTheme").GetString(), name, StringComparison.Ordinal) ? session.MainWindow : null;
+      }, "the saved document theme " + name);
+
+
+
+
+   /// <summary>Scrolls the owned virtualized theme list until its exact native item is realized, then selects that copied-draft choice.</summary>
+   private static void SelectThemeDraft(AppSession session, string name)
+   {
+      AutomationElement list = session.WaitForElement("ThemeList");
+      AutomationElement item = session.WaitFor(() =>
+      {
+         AutomationElement? candidate = list.FindFirstDescendant(cf => cf.ByAutomationId("ThemeChoice:" + name));
+         if(candidate is not null)
+         {
+            return candidate;
+         }
+         FlaUI.Core.Patterns.IScrollPattern scroll = list.Patterns.Scroll.Pattern;
+         if(scroll.VerticallyScrollable.Value)
+         {
+            if(scroll.VerticalScrollPercent.Value >= 100)
+            {
+               scroll.SetScrollPercent(-1, 0);
+            }
+            else
+            {
+               scroll.Scroll(ScrollAmount.NoAmount, ScrollAmount.LargeIncrement);
+            }
+         }
+         return null;
+      }, "the realized native theme " + name);
+      item.Patterns.SelectionItem.Pattern.Select();
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.ThemeTransfer.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.ThemeTransfer.cs
new file mode 100644
index 0000000..66f68b3
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.ThemeTransfer.cs
@@ -0,0 +1,273 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Drawing;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+using FlaUI.Core.WindowsAPI;
+using MarkdownViewr.Windows.Core.Themes;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Real native JSON pickers, explicit conflict/version choices and exported bytes prove theme transfer independently of settings alone.</summary>
+public partial class AppTests
+{
+   /// <summary>Every actual conflict button has distinct persisted and painted outcomes; Skip leaves committed settings unchanged.</summary>
+   [Theory]
+   [InlineData("Overwrite", "Nord", 1)]
+   [InlineData("Keep both", "Nord (2)", 1)]
+   [InlineData("Skip", "", 0)]
+   public void ThemeTransfer_NativeConflictChoice_PreservesExpectedPalette(string choice, string importedName, int count)
+   {
+      byte[] incoming = ThemeFixture("Nord", "#112233");
+      using var session = new AppSession(document: "# JSON conflict fixture", documentAssets: new Dictionary<string, byte[]>(StringComparer.Ordinal) { ["incoming.json"] = incoming });
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("JSON conflict fixture")), "the actual conflict document", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:Nord");
+      WaitForDocumentColor(session, Color.FromArgb(46, 52, 64));
+      string before = session.ReadSettings();
+      ChooseThemeImports(session, "incoming.json");
+      session.ClickButton(choice);
+      WaitForThemeImportResult(session, count, 1 - count, 0);
+      using var settings = JsonDocument.Parse(session.ReadSettings());
+      Assert.Equal(count, settings.RootElement.GetProperty("UserThemes").GetArrayLength());
+      if(count == 0)
+      {
+         Assert.Equal(before, session.ReadSettings());
+         WaitForDocumentColor(session, Color.FromArgb(46, 52, 64));
+      }
+      else
+      {
+         string json = Assert.Single(settings.RootElement.GetProperty("UserThemes").EnumerateArray()).GetString()!;
+         using var imported = JsonDocument.Parse(json);
+         Assert.Equal(importedName, imported.RootElement.GetProperty("name").GetString());
+         if(string.Equals(choice, "Keep both", StringComparison.Ordinal))
+         {
+            WaitForDocumentColor(session, Color.FromArgb(46, 52, 64));
+            session.InvokeMenuItem("View", "DocumentThemesMenu");
+            session.ClickElement("DocumentTheme:" + importedName);
+         }
+         WaitForDocumentColor(session, Color.FromArgb(17, 34, 51));
+      }
+      Assert.Equal(incoming, File.ReadAllBytes(Path.Combine(session.DataDirectory, "incoming.json")));
+      RetainDocumentWindow(session, session.MainWindow, "theme-conflict-" + choice.Replace(' ', '-'));
+   }
+
+
+
+   /// <summary>Newer-schema skip/approval and a mixed multiple-file batch retain metadata; exporting a disabled theme writes the exact chosen JSON.</summary>
+   [Fact]
+   public void ThemeTransfer_BatchFutureInvalidAndDisabledExport_PreservesActualJson()
+   {
+      byte[] future = ThemeFixture("Owned future", "#334455", version: 2);
+      var assets = new Dictionary<string, byte[]>(StringComparer.Ordinal)
+      {
+         ["future.json"] = future,
+         ["other.json"] = ThemeFixture("Owned other", "#556677"),
+         ["invalid.json"] = Encoding.UTF8.GetBytes("{invalid"),
+         ["oversized.json"] = Encoding.UTF8.GetBytes(new string(' ', ReaderTheme.MaximumCharacters + 1024)),
+      };
+      using var session = new AppSession(document: "# JSON batch fixture", documentAssets: assets);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("JSON batch fixture")), "the actual batch document", TimeSpan.FromSeconds(30));
+      string original = session.ReadSettings();
+      ChooseThemeImports(session, "future.json");
+      session.ClickButton("Skip");
+      WaitForThemeImportResult(session, 0, 1, 0);
+      Assert.Equal(original, session.ReadSettings());
+      ChooseThemeImports(session, "future.json", "other.json", "invalid.json", "oversized.json");
+      session.ClickButton("Import anyway");
+      WaitForThemeImportResult(session, 2, 0, 2);
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:Owned future");
+      WaitForDocumentColor(session, Color.FromArgb(51, 68, 85));
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "Owned future");
+      session.WaitForElement("ThemeListEnabled").Patterns.Toggle.Pattern.Toggle();
+      session.ClickButton("Save themes");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      string beforeExport = session.ReadSettings();
+      string destination = Path.Combine(session.DataDirectory, "export & café $HOME.json");
+      ExportSelectedTheme(session, "Owned future", destination);
+      Assert.Equal(beforeExport, session.ReadSettings());
+      Assert.Equal(future, File.ReadAllBytes(destination));
+      using(var exported = JsonDocument.Parse(File.ReadAllText(destination)))
+      {
+         Assert.Equal(2, exported.RootElement.GetProperty("schemaVersion").GetInt32());
+         Assert.Equal("Owned café metadata", exported.RootElement.GetProperty("metadata").GetProperty("note").GetString());
+      }
+      foreach((string name, byte[] bytes) in assets)
+      {
+         Assert.Equal(bytes, File.ReadAllBytes(Path.Combine(session.DataDirectory, name)));
+      }
+      Assert.DoesNotContain("Owned café metadata", session.ReadLogs(), StringComparison.Ordinal);
+      Assert.DoesNotContain("future.json", session.ReadLogs(), StringComparison.Ordinal);
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("JSON batch fixture")));
+      RetainDocumentWindow(session, session.MainWindow, "theme-batch-future-disabled-export");
+   }
+
+
+
+   /// <summary>Manager new/copy/edit/default remain within one copied draft across dialogs; duplicate renaming stays open and Cancel discards every change.</summary>
+   [Fact]
+   public void ThemeManager_NewCopyDisabledEditAndCancel_RetainsCopiedDraft()
+   {
+      using var session = new AppSession(document: "# JSON manager fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("JSON manager fixture")), "the actual manager document", TimeSpan.FromSeconds(30));
+      string original = session.ReadSettings();
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "Nord");
+      session.WaitForElement("ThemeListEnabled").Patterns.Toggle.Pattern.Toggle();
+      session.ClickElement("ThemeListCopy");
+      Assert.Equal("Nord Copy", session.WaitForElement("ThemeEditorName").Patterns.Value.Pattern.Value.Value);
+      session.EnterText("ThemeEditorColor:background", "#112233");
+      session.ClickButton("Save theme");
+      session.WaitForElement("ThemeChoice:Nord Copy");
+      Assert.Equal(original, session.ReadSettings());
+      session.ClickElement("ThemeListNew");
+      session.EnterText("ThemeEditorName", "Owned new draft");
+      session.ClickButton("Save theme");
+      session.WaitForElement("ThemeChoice:Owned new draft");
+      Assert.Equal(original, session.ReadSettings());
+      RejectDuplicateThemeRename(session);
+      SelectThemeDraft(session, "Nord");
+      session.WaitForElement("ThemeListDefault").Patterns.SelectionItem.Pattern.Select();
+      Assert.Equal(ToggleState.On, session.WaitForElement("ThemeListEnabled").Patterns.Toggle.Pattern.ToggleState.Value);
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      Assert.Equal(original, session.ReadSettings());
+      WaitForDocumentColor(session, Color.FromArgb(30, 30, 46));
+      OpenSettingsAction(session, "ManageDocumentThemesMenu");
+      SelectThemeDraft(session, "Nord");
+      session.ClickElement("ThemeListCopy");
+      session.EnterText("ThemeEditorColor:background", "#445566");
+      session.ClickButton("Save theme");
+      session.WaitForElement("ThemeChoice:Nord Copy");
+      session.ClickButton("Save themes");
+      session.WaitForElementGone("ThemeList");
+      CloseSettings(session);
+      WaitForDocumentColor(session, Color.FromArgb(68, 85, 102));
+      WaitForSavedDocumentTheme(session, "Nord Copy");
+      RetainDocumentWindow(session, session.MainWindow, "theme-manager-copied-drafts");
+   }
+
+
+
+   /// <summary>Actual import/export selector and destination cancels preserve source/glyphs/settings and create no theme file.</summary>
+   [Fact]
+   public void ThemeTransfer_NativePickerCancels_PreservesReaderAndFiles()
+   {
+      using var session = new AppSession(document: "# Theme transfer cancellation");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Theme transfer cancellation")), "the actual cancellation document", TimeSpan.FromSeconds(30));
+      InvokeDocumentMenu(session, session.MainWindow, "SourceToggle", menuName: "View");
+      string source = session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value;
+      string settings = session.ReadSettings();
+      Rectangle glyph = session.WaitForElement("mv-heading-0").BoundingRectangle;
+      string[] files = Directory.GetFiles(session.DataDirectory, "*.json").Order(StringComparer.Ordinal).ToArray();
+      OpenSettingsAction(session, "ImportDocumentThemesMenu");
+      _ = WaitForOpenPickerFilename(session);
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("1001");
+      CloseSettings(session);
+      OpenSettingsAction(session, "ExportDocumentThemesMenu");
+      session.WaitForElement("ThemeExportChoice");
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("ThemeExportChoice");
+      CloseSettings(session);
+      OpenSettingsAction(session, "ExportDocumentThemesMenu");
+      session.WaitForElement("ThemeExportChoice");
+      session.ClickButton("Export theme");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("1001").And(cf.ByControlType(ControlType.Edit))), "the actual theme destination before cancellation");
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("1001");
+      CloseSettings(session);
+      Assert.Equal(settings, session.ReadSettings());
+      Assert.Equal(source, session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value);
+      Assert.Equal(glyph, session.WaitForElement("mv-heading-0").BoundingRectangle);
+      Assert.Equal(files, Directory.GetFiles(session.DataDirectory, "*.json").Order(StringComparer.Ordinal), StringComparer.Ordinal);
+      Assert.Equal("# Theme transfer cancellation", File.ReadAllText(Path.Combine(session.DataDirectory, "document.md")));
+      RetainDocumentWindow(session, session.MainWindow, "theme-transfer-native-cancels");
+   }
+
+
+
+
+   /// <summary>The real native editor rejects a renamed collision and returns to the untouched manager draft on Cancel.</summary>
+   private static void RejectDuplicateThemeRename(AppSession session)
+   {
+      SelectThemeDraft(session, "Nord");
+      session.ClickElement("ThemeListEdit");
+      session.EnterText("ThemeEditorName", "Dracula");
+      session.ClickButton("Save theme");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("ThemeEditorError")) is { } error && error.Name.Contains("already exists", StringComparison.Ordinal) ? error : null, "the actual duplicate-name validation error");
+      Assert.NotNull(session.FindInApp(cf => cf.ByAutomationId("ThemeEditorName")));
+      session.ClickButton("Cancel");
+      session.WaitForElement("ThemeList");
+   }
+
+
+
+
+   /// <summary>Fixture JSON is real versioned theme data with Unicode metadata, never application-reported paint values.</summary>
+   private static byte[] ThemeFixture(string name, string color, int version = 1)
+   {
+      JsonNode json = JsonNode.Parse(ThemeCatalog.Find("Nord").Json)!;
+      json["name"] = name;
+      json["schemaVersion"] = version;
+      json["colors"]!["background"] = color;
+      json["metadata"] = new JsonObject { ["note"] = "Owned café metadata" };
+      return Encoding.UTF8.GetBytes(json.ToJsonString());
+   }
+
+
+
+   /// <summary>Navigates the owned native picker before selecting literal names, retaining all batch files within its filename capacity.</summary>
+   private static void ChooseThemeImports(AppSession session, params string[] files)
+   {
+      OpenSettingsAction(session, "ImportDocumentThemesMenu");
+      AutomationElement filename = WaitForOpenPickerFilename(session);
+      if(files.Length > 1)
+      {
+         string directory = session.DataDirectory + Path.DirectorySeparatorChar;
+         EnterPickerFilename(session, filename, directory);
+         SendReadingKey(VirtualKeyShort.RETURN);
+         session.WaitFor(() => !string.Equals(WaitForOpenPickerFilename(session).AsTextBox().Text, directory, StringComparison.Ordinal) ? filename : null, "the native picker completing navigation into the fixture folder");
+         filename = WaitForOpenPickerFilename(session);
+      }
+      string paths = string.Join(" ", files.Select(file => "\"" + (files.Length > 1 ? file : Path.Combine(session.DataDirectory, file)) + "\""));
+      EnterPickerFilename(session, filename, paths);
+      session.ClickButton("Open");
+   }
+
+
+
+   /// <summary>Waits for native completion counts after all actual parser/choice outcomes, not a fixed delay.</summary>
+   private static void WaitForThemeImportResult(AppSession session, int imported, int skipped, int failed)
+   {
+      CloseSettings(session);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("StatusText").And(cf.ByName(FormattableString.Invariant($"Themes imported: {imported}. Skipped: {skipped}. Failed: {failed}.")))), "completed native theme batch results", TimeSpan.FromSeconds(30));
+   }
+
+
+
+   /// <summary>Export selection includes disabled choices; the exact native destination must produce a real JSON file and native success.</summary>
+   private static void ExportSelectedTheme(AppSession session, string name, string destination)
+   {
+      OpenSettingsAction(session, "ExportDocumentThemesMenu");
+      session.WaitForElement("ThemeExportChoice").Patterns.ExpandCollapse.Pattern.Expand();
+      session.WaitForElement("ThemeExport:" + name).Patterns.SelectionItem.Pattern.Select();
+      session.ClickButton("Export theme");
+      AutomationElement filename = session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("1001").And(cf.ByControlType(ControlType.Edit))), "the exact owned Windows theme export destination");
+      EnterPickerFilename(session, filename, destination);
+      session.ClickButton("Save");
+      CloseSettings(session);
+      session.WaitFor(() => File.Exists(destination) ? session.FindInApp(cf => cf.ByAutomationId("StatusText").And(cf.ByName("Theme exported."))) : null, "actual completed theme JSON export", TimeSpan.FromSeconds(30));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Toolbar.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Toolbar.cs
new file mode 100644
index 0000000..6d4dcb7
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Toolbar.cs
@@ -0,0 +1,268 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Drawing;
+using System.Text.Json;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+using FlaUI.Core.Input;
+using FlaUI.Core.WindowsAPI;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Drives actual reference toolbar commands and verifies their shared reader/menu state and literal editor boundary.</summary>
+public partial class AppTests
+{
+   /// <summary>TOC/depth/source/theme/zoom toolbar actions change actual native/browser surfaces and agree with View.</summary>
+   [Fact]
+   public void Toolbar_ReadingCommandsAndMenus_RemainSynchronized()
+   {
+      using var session = new AppSession(document: "# Toolbar fixture\n\n## Child\n\n### Deep heading");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Toolbar fixture")), "the actual toolbar fixture", TimeSpan.FromSeconds(30));
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("ToolbarDepthButton")));
+      Assert.False(session.WaitForElement("ToolbarPrintButton").IsOffscreen);
+      Assert.True(session.WaitForElement("ToolbarPrintButton").IsEnabled);
+      AssertCompactToolbarLayout(session);
+      ClickToolbarCommand(session, "ToolbarOutlineButton");
+      Assert.NotNull(session.WaitForElement("OutlineDepth"));
+      session.WaitForElement("OutlineDepth").AsComboBox().Select(1);
+      Assert.NotNull(session.WaitForElement("OutlineHeading:1"));
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("OutlineHeading:2")));
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.Equal(2, settings.RootElement.GetProperty("OutlineDepth").GetInt32());
+      }
+      ClickToolbarCommand(session, "ToolbarSourceButton");
+      AssertEqualSourcePanes(session);
+      session.InvokeMenuItem("View", "SourceToggle");
+      session.WaitForElementGone("SourceText");
+      Assert.Equal(ToggleState.Off, session.WaitForElement("ToolbarSourceButton").Patterns.Toggle.Pattern.ToggleState.Value);
+      ClickToolbarCommand(session, "ToolbarThemeButton");
+      session.ClickElement("ToolbarTheme:GitHub Light");
+      WaitForDocumentColor(session, Color.White);
+      Assert.Equal("Document theme: GitHub Light", FindToolbarCommand(session, "ToolbarThemeButton").Name);
+      double height = session.WaitForElement("mv-heading-0").BoundingRectangle.Height;
+      SendReadingKey(VirtualKeyShort.ESCAPE);
+      ClickToolbarCommand(session, "ZoomInButton");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")) is { } glyph && glyph.BoundingRectangle.Height > height ? glyph : null, "actual glyph growth from toolbar zoom");
+      ClickToolbarCommand(session, "ZoomResetButton");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("ZoomResetButton").And(cf.ByName("Actual size (100%)"))), "the actual toolbar zoom percentage reset");
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.WaitForElementGone("OutlineDepth");
+      Assert.Equal(ToggleState.Off, session.WaitForElement("ToolbarOutlineButton").Patterns.Toggle.Pattern.ToggleState.Value);
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("ToolbarDepthButton")));
+      RetainDocumentWindow(session, session.MainWindow, "reference-toolbar-reading-actions");
+   }
+
+
+
+   /// <summary>Multiple editors offer real file/folder targets; one editor launches directly and overflow Print uses the owned draft.</summary>
+   [Fact]
+   public void Toolbar_EditorAndPrint_UsesLiteralTargetsAndOwnedDialogs()
+   {
+      using var session = new AppSession(document: "# Toolbar editor fixture", editorProbe: true, documentFileName: "notes & café $HOME.md");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Toolbar editor fixture")), "the actual toolbar editor fixture", TimeSpan.FromSeconds(30));
+      AssertDisabledEditorExplanation(session);
+      (string fileId, string folderId) = ConfigureToolbarEditors(session);
+      ClickToolbarCommand(session, "ToolbarEditorButton");
+      session.ClickElement("ToolbarEditor:" + folderId);
+      using(JsonDocument result = ReadToolbarEditorResult(session))
+      {
+         Assert.Equal(session.DataDirectory, Assert.Single(result.RootElement.GetProperty("Arguments").EnumerateArray()).GetString());
+      }
+      File.Delete(Path.Combine(session.DataDirectory, "editor-result.json"));
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.WaitForElement("EditorChoice:" + folderId).Patterns.SelectionItem.Pattern.Select();
+      session.ClickElement("EditorRemove");
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.Equal(fileId, Assert.Single(settings.RootElement.GetProperty("ConfiguredEditors").EnumerateArray()).GetProperty("Id").GetString());
+      }
+      ClickToolbarCommand(session, "ToolbarEditorButton");
+      using(JsonDocument result = ReadToolbarEditorResult(session))
+      {
+         Assert.Equal(Path.Combine(session.DataDirectory, "notes & café $HOME.md"), Assert.Single(result.RootElement.GetProperty("Arguments").EnumerateArray()).GetString());
+      }
+      string saved = session.ReadSettings();
+      ClickToolbarCommand(session, "ToolbarPrintButton");
+      session.WaitForElement("PrintOptionsDialog");
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("PrintOptionsDialog");
+      Assert.Equal(saved, session.ReadSettings());
+      Assert.DoesNotContain("notes & café", session.ReadLogs(), StringComparison.Ordinal);
+      Assert.DoesNotContain("Unhandled UI exception", session.ReadLogs(), StringComparison.Ordinal);
+      RetainDocumentWindow(session, session.MainWindow, "reference-toolbar-editor-print");
+   }
+
+
+
+   /// <summary>Physical hover exposes the actual disabled-command reason and mouse exit closes it without a UI exception.</summary>
+   private static void AssertDisabledEditorExplanation(AppSession session)
+   {
+      AutomationElement disabledEditor = FindToolbarCommand(session, "ToolbarEditorButton");
+      Assert.False(disabledEditor.IsEnabled);
+      const string Explanation = "No editor is configured. Choose one in File → Settings → Editors.";
+      Assert.Equal(Explanation, disabledEditor.Properties.HelpText.Value);
+      session.MainWindow.SetForeground();
+      Wait.UntilInputIsProcessed();
+      Rectangle target = disabledEditor.BoundingRectangle;
+      NativeMouse.MoveTo(new Point(target.Left + target.Width / 2, target.Top + target.Height / 2));
+      AutomationElement tooltip = session.WaitForElement("EditorUnavailableTip");
+      Assert.False(tooltip.IsOffscreen);
+      Assert.True(string.Equals(tooltip.Name, Explanation, StringComparison.Ordinal) || tooltip.FindFirstDescendant(cf => cf.ByName(Explanation)) is not null, "The actual disabled-command tooltip must show the Settings route.");
+      Assert.DoesNotContain("Unhandled UI exception", session.ReadLogs(), StringComparison.Ordinal);
+      RetainDocumentWindow(session, session.MainWindow, "disabled-editor-native-tooltip");
+      Rectangle document = session.WaitForElement("DocumentView").BoundingRectangle;
+      NativeMouse.MoveTo(new Point(document.Left + 24, document.Top + 24));
+      SendReadingKey(VirtualKeyShort.ESCAPE);
+      session.WaitForElementGone("EditorUnavailableTip");
+   }
+
+
+
+   /// <summary>A committed editor change refreshes actual sibling commands and its later source save cannot restore the old list.</summary>
+   [Fact]
+   public void Toolbar_EditorBroadcast_PreservesSiblingMenuAndLaterWindowSave()
+   {
+      using var session = new AppSession(document: "# First toolbar sibling", editorProbe: true, documentFileName: "first.md",
+         additionalDocuments: new Dictionary<string, string>(StringComparer.Ordinal) { ["second.md"] = "# Second toolbar sibling" });
+      Window first = WaitForDocumentWindow(session, "first.md");
+      Window second = WaitForDocumentWindow(session, "second.md");
+      WaitForWindowHeading(session, second, "Second toolbar sibling");
+      InvokeDocumentMenu(session, first, "SettingsMenuItem");
+      session.WaitForElement("SettingsEditorsTab").Patterns.SelectionItem.Pattern.Select();
+      session.ClickElement("ConfigureEditorMenuItem");
+      session.EnterText("EditorName", "Shared editor");
+      session.EnterText("EditorPath", ResolveEditorProbe());
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      AutomationElement command = session.WaitFor(() => second.FindFirstDescendant(cf => cf.ByAutomationId("ToolbarEditorButton").And(cf.ByName("Open in Shared editor"))), "the sibling's actual updated toolbar command");
+      Assert.True(command.IsEnabled);
+      second.SetForeground();
+      command.Patterns.Invoke.Pattern.Invoke();
+      using(JsonDocument result = ReadToolbarEditorResult(session))
+      {
+         Assert.Equal(Path.Combine(session.DataDirectory, "second.md"), Assert.Single(result.RootElement.GetProperty("Arguments").EnumerateArray()).GetString());
+      }
+      InvokeDocumentMenu(session, second, "SourceToggle", menuName: "View");
+      session.WaitFor(() => second.FindFirstDescendant(cf => cf.ByAutomationId("SourceText")), "the sibling's later local source preference save");
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.Equal("Shared editor", Assert.Single(settings.RootElement.GetProperty("ConfiguredEditors").EnumerateArray()).GetProperty("Name").GetString());
+      }
+      Assert.NotNull(WaitForWindowHeading(session, first, "First toolbar sibling"));
+      Assert.Equal(2, DocumentWindows(session).Length);
+      RetainDocumentWindow(session, second, "reference-toolbar-shared-editor");
+   }
+
+
+
+   /// <summary>Narrow-window overflow preserves actual source, theme, zoom and Print actions without clipping fixed TOC controls.</summary>
+   [Fact]
+   public void Toolbar_NarrowWindow_OverflowRetainsReadingAndPrintCommands()
+   {
+      using var session = new AppSession(document: "# Narrow toolbar fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Narrow toolbar fixture")), "the narrow toolbar fixture", TimeSpan.FromSeconds(30));
+      double width = session.MainWindow.BoundingRectangle.Width;
+      session.MainWindow.Patterns.Transform.Pattern.Resize(650, session.MainWindow.BoundingRectangle.Height);
+      session.WaitFor(() => session.MainWindow.BoundingRectangle.Width < width - 100 ? session.MainWindow : null, "the actual narrower native window");
+      Assert.False(session.WaitForElement("ToolbarPrintButton").IsOffscreen);
+      ClickToolbarCommand(session, "ToolbarSourceButton");
+      AssertEqualSourcePanes(session);
+      ClickToolbarCommand(session, "ToolbarThemeButton");
+      session.ClickElement("ToolbarTheme:GitHub Light");
+      WaitForDocumentColor(session, Color.White);
+      ClickToolbarCommand(session, "ZoomInButton");
+      AutomationElement reset = FindToolbarCommand(session, "ZoomResetButton");
+      session.WaitFor(() => string.Equals(reset.Name, "Actual size (110%)", StringComparison.Ordinal) ? reset : null, "the actual narrow-toolbar zoom percentage");
+      SendReadingKey(VirtualKeyShort.ESCAPE);
+      string saved = session.ReadSettings();
+      ClickToolbarCommand(session, "ToolbarPrintButton");
+      session.WaitForElement("PrintOptionsDialog");
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("PrintOptionsDialog");
+      Assert.Equal(saved, session.ReadSettings());
+      Assert.Equal("# Narrow toolbar fixture", session.WaitForElement("SourceText").Patterns.Value.Pattern.Value.Value);
+      RetainDocumentWindow(session, session.MainWindow, "reference-toolbar-narrow-overflow");
+   }
+
+
+
+   /// <summary>Measures the native row at the current DPI, including aligned hit targets and the gap between command groups.</summary>
+   private static void AssertCompactToolbarLayout(AppSession session)
+   {
+      AutomationElement fixedPrint = session.WaitForElement("ToolbarPrintButton");
+      double scale = fixedPrint.BoundingRectangle.Height / 48;
+      foreach(string identity in new[] { "ToolbarOutlineButton", "ToolbarSourceButton", "ZoomResetButton", "ToolbarThemeButton" })
+      {
+         AutomationElement command = session.WaitForElement(identity);
+         double printCenter = fixedPrint.BoundingRectangle.Top + fixedPrint.BoundingRectangle.Height / 2;
+         double commandCenter = command.BoundingRectangle.Top + command.BoundingRectangle.Height / 2;
+         Assert.InRange(Math.Abs(printCenter - commandCenter), 0, 2 * scale);
+      }
+      Assert.InRange(session.WaitForElement("ReaderToolbar").BoundingRectangle.Height, 40 * scale, 52 * scale);
+      Assert.InRange(session.WaitForElement("ToolbarSourceButton").BoundingRectangle.Left - fixedPrint.BoundingRectangle.Right, 0, 36 * scale);
+   }
+
+
+
+   /// <summary>Only owned controls are invoked; responsive overflow follows the same visible command path a user takes.</summary>
+   private static void ClickToolbarCommand(AppSession session, string identity)
+   {
+      _ = FindToolbarCommand(session, identity);
+      session.ClickElement(identity);
+   }
+
+
+
+   /// <summary>Reads native commands in the bar or its already-open popup, opening More only when needed.</summary>
+   private static AutomationElement FindToolbarCommand(AppSession session, string identity)
+   {
+      AutomationElement? command = session.FindInApp(cf => cf.ByAutomationId(identity));
+      if(command is null || command.IsOffscreen)
+      {
+         AutomationElement toolbar = session.WaitForElement("ReaderToolbar");
+         AutomationElement more = session.WaitFor(() => toolbar.FindFirstDescendant(cf => cf.ByAutomationId("MoreButton")), "the owned toolbar overflow button");
+         more.Patterns.Invoke.Pattern.Invoke();
+      }
+      return session.WaitForElement(identity);
+   }
+
+
+
+   /// <summary>Configures the real native editor list with the existing test-only process fixture.</summary>
+   private static (string FileId, string FolderId) ConfigureToolbarEditors(AppSession session)
+   {
+      string executable = ResolveEditorProbe();
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.EnterText("EditorName", "File editor");
+      session.EnterText("EditorPath", executable);
+      session.ClickElement("EditorAdd");
+      session.EnterText("EditorName", "Folder editor");
+      session.EnterText("EditorPath", executable);
+      session.WaitForElement("EditorFolder").Patterns.Toggle.Pattern.Toggle();
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using var settings = JsonDocument.Parse(session.ReadSettings());
+      JsonElement editors = settings.RootElement.GetProperty("ConfiguredEditors");
+      return (editors[0].GetProperty("Id").GetString()!, editors[1].GetProperty("Id").GetString()!);
+   }
+
+
+
+   /// <summary>Returns real probe output after the launched process writes its literal arguments.</summary>
+   private static JsonDocument ReadToolbarEditorResult(AppSession session)
+   {
+      string path = Path.Combine(session.DataDirectory, "editor-result.json");
+      session.WaitFor(() => File.Exists(path) ? session.MainWindow : null, "the actual toolbar-launched editor fixture output");
+      return JsonDocument.Parse(File.ReadAllText(path));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Typography.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Typography.cs
new file mode 100644
index 0000000..85262f1
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Typography.cs
@@ -0,0 +1,106 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Text.Json;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Drives the complete native typography draft and checks actual browser glyphs rather than saved settings alone.</summary>
+public partial class AppTests
+{
+   /// <summary>All fonts/sizes save, real heading/body/code glyphs grow and cancellation preserves the accepted theme.</summary>
+   [Fact]
+   public void ThemeEditor_AllTypography_PaintsActualGlyphsAndPreservesCancel()
+   {
+      using var session = new AppSession(document: "# Heading font probe\n\nBody font probe\n\n`Code font probe`\n\n## Heading two\n\n### Heading three\n\n#### Heading four\n\n##### Heading five\n\n###### Heading six");
+      AutomationElement heading = session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), "the typography fixture heading", TimeSpan.FromSeconds(30));
+      double headingHeight = heading.BoundingRectangle.Height;
+      double bodyHeight = WaitForTypographyText(session, "Body font probe").BoundingRectangle.Height;
+      double codeHeight = WaitForTypographyText(session, "Code font probe").BoundingRectangle.Height;
+      Assert.True(headingHeight > 0 && bodyHeight > 0 && codeHeight > 0);
+      OpenSettingsAction(session, "EditDocumentThemeMenu");
+      session.EnterText("ThemeEditorName", "Typography acceptance");
+      foreach(string id in new[] { "ThemeEditorBodyFont", "ThemeEditorHeadingFont", "ThemeEditorCodeFont" })
+      {
+         session.EnterText(id, "Consolas");
+      }
+      // Give native rounded glyph metrics a clear growth margin while retaining the40% assertion.
+      var sizes = new Dictionary<string, (string Id, double Value)>(StringComparer.Ordinal)
+      {
+         ["baseFontSize"] = ("ThemeEditorBodySize", 28),
+         ["h1Size"] = ("ThemeEditorHeading1Size", 56),
+         ["h2Size"] = ("ThemeEditorHeading2Size", 48),
+         ["h3Size"] = ("ThemeEditorHeading3Size", 44),
+         ["h4Size"] = ("ThemeEditorHeading4Size", 40),
+         ["h5Size"] = ("ThemeEditorHeading5Size", 38),
+         ["h6Size"] = ("ThemeEditorHeading6Size", 36),
+         ["codeFontSize"] = ("ThemeEditorCodeSize", 20),
+         ["lineHeight"] = ("ThemeEditorLineHeight", 2),
+      };
+      foreach((string _, (string id, double value)) in sizes)
+      {
+         session.WaitForElement(id).Patterns.RangeValue.Pattern.SetValue(value);
+      }
+      session.ClickButton("Save theme");
+      session.WaitForElementGone("ThemeEditorName");
+      CloseSettings(session);
+      AssertSavedTypography(session, sizes);
+      try
+      {
+         session.WaitFor(() =>
+         {
+            AutomationElement current = session.WaitForElement("mv-heading-0");
+            return current.BoundingRectangle.Height > headingHeight * 1.4 &&
+               WaitForTypographyText(session, "Body font probe").BoundingRectangle.Height > bodyHeight * 1.4 &&
+               WaitForTypographyText(session, "Code font probe").BoundingRectangle.Height > codeHeight * 1.15 ? current : null;
+         }, "actual heading, body and code glyph growth after all typography edits");
+      }
+      catch(TimeoutException exception)
+      {
+         string heights = FormattableString.Invariant($"Heading={headingHeight:R}/{session.WaitForElement("mv-heading-0").BoundingRectangle.Height:R}; Body={bodyHeight:R}/{WaitForTypographyText(session, "Body font probe").BoundingRectangle.Height:R}; Code={codeHeight:R}/{WaitForTypographyText(session, "Code font probe").BoundingRectangle.Height:R}");
+         throw new TimeoutException(exception.Message + "; Initial/current actual glyph heights: " + heights + "; Native tree: " + session.DescribeDocumentStatus(), exception);
+      }
+      string accepted = session.ReadSettings();
+      double acceptedHeight = session.WaitForElement("mv-heading-0").BoundingRectangle.Height;
+      OpenSettingsAction(session, "EditDocumentThemeMenu");
+      session.EnterText("ThemeEditorHeadingFont", "Arial");
+      session.WaitForElement("ThemeEditorBodySize").Patterns.RangeValue.Pattern.SetValue(36);
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("ThemeEditorName");
+      CloseSettings(session);
+      Assert.Equal(accepted, session.ReadSettings());
+      Assert.Equal(acceptedHeight, session.WaitForElement("mv-heading-0").BoundingRectangle.Height);
+      RetainDocumentWindow(session, session.MainWindow, "full-typography");
+   }
+
+
+
+   /// <summary>Checks every accepted native control against the actual persisted theme schema.</summary>
+   private static void AssertSavedTypography(AppSession session, IReadOnlyDictionary<string, (string Id, double Value)> sizes)
+   {
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.Equal("Typography acceptance", settings.RootElement.GetProperty("DocumentTheme").GetString());
+         using var theme = JsonDocument.Parse(Assert.Single(settings.RootElement.GetProperty("UserThemes").EnumerateArray()).GetString()!);
+         foreach(string key in new[] { "body", "heading", "code" })
+         {
+            Assert.Equal("Consolas", theme.RootElement.GetProperty("fonts").GetProperty(key).GetString());
+         }
+         foreach((string key, (string _, double value)) in sizes)
+         {
+            Assert.Equal(value, theme.RootElement.GetProperty("sizes").GetProperty(key).GetDouble());
+         }
+      }
+   }
+
+
+
+   /// <summary>Requires an actual browser text glyph, excluding the native editor's labels and controls.</summary>
+   private static AutomationElement WaitForTypographyText(AppSession session, string text)
+      => session.WaitFor(() => session.WaitForElement("DocumentView").FindFirstDescendant(cf => cf.ByName(text).And(cf.ByControlType(ControlType.Text))), "the actual " + text + " browser glyph");
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.Windows.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.Windows.cs
new file mode 100644
index 0000000..84a8c88
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.Windows.cs
@@ -0,0 +1,347 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Diagnostics;
+using System.Runtime.InteropServices;
+using System.Text;
+using System.Text.Json;
+using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Definitions;
+using FlaUI.Core.Input;
+using FlaUI.Core.Patterns;
+using FlaUI.Core.WindowsAPI;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Exercises independent native document windows and private history through real controls and owned file fixtures.</summary>
+public partial class AppTests
+{
+   /// <summary>Literal startup paths open separate readers; zoom and Ctrl+W leave the sibling's actual glyphs and watcher intact.</summary>
+   [Fact]
+   public void Windows_StartupFilesAndClose_PreservesSiblingReader()
+   {
+      using var session = new AppSession(document: "# First independent reader", documentFileName: "one.mdown",
+         additionalDocuments: new Dictionary<string, string>(StringComparer.Ordinal) { ["two.mkd"] = "# Second independent reader" });
+      Window first = WaitForDocumentWindow(session, "one.mdown");
+      Window second = WaitForDocumentWindow(session, "two.mkd");
+      AutomationElement firstHeading = WaitForWindowHeading(session, first, "First independent reader");
+      AutomationElement secondHeading = WaitForWindowHeading(session, second, "Second independent reader");
+      double firstHeight = firstHeading.BoundingRectangle.Height;
+      double secondHeight = secondHeading.BoundingRectangle.Height;
+      Assert.Equal(2, DocumentWindows(session).Length);
+      first.SetForeground();
+      WaitForWindowElement(session, first, "ZoomInButton").Patterns.Invoke.Pattern.Invoke();
+      session.WaitFor(() =>
+      {
+         AutomationElement? current = first.FindFirstDescendant(cf => cf.ByAutomationId("mv-heading-0"));
+         return current is not null && current.BoundingRectangle.Height > firstHeight && WaitForWindowElement(session, first, "ZoomResetButton").IsEnabled ? current : null;
+      }, "the first window's actual larger glyph after its document navigation");
+      Assert.Equal(secondHeight, secondHeading.BoundingRectangle.Height);
+      Assert.Equal("Actual size (100%)", WaitForWindowElement(session, second, "ZoomResetButton").Name);
+      first.SetForeground();
+      WaitForWindowElement(session, first, "ZoomResetButton").Focus();
+      Wait.UntilInputIsProcessed();
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_W);
+      session.WaitFor(() => DocumentWindows(session).Length == 1 ? second : null, "Ctrl+W closing only its own document window");
+      Assert.False(session.App.HasExited);
+      File.WriteAllText(Path.Combine(session.DataDirectory, "two.mkd"), "# Sibling reload after close");
+      AutomationElement reloaded = WaitForWindowHeading(session, second, "Sibling reload after close");
+      Assert.Equal(secondHeight, reloaded.BoundingRectangle.Height);
+      RetainDocumentWindow(session, second, "surviving-window");
+   }
+
+
+
+   /// <summary>Physical local links open native readers, focus duplicates and retain inherited containment through a junction/reload attack.</summary>
+   [Fact]
+   public void Windows_LocalDocumentLinks_OpenOwnedReaderAndPreserveReloadScope()
+   {
+      const string Filename = "child & café $HOME.md";
+      string document = "# Link source\n\n[Open linked child](nested/" + Uri.EscapeDataString(Filename) + ")\n\n[Blocked program](blocked.exe)\n\n[Blocked parent](../private.md)";
+      using var session = new AppSession(document: document, documentFileName: "links.md");
+      string nested = Path.Combine(session.DataDirectory, "nested");
+      string saved = Path.Combine(session.DataDirectory, "saved-nested");
+      Directory.CreateDirectory(nested);
+      string path = Path.Combine(nested, Filename);
+      File.WriteAllText(path, "# Linked child");
+      File.WriteAllText(Path.Combine(session.DataDirectory, "blocked.exe"), "Not an executable; must never be dispatched.");
+      Window source = WaitForDocumentWindow(session, "links.md");
+      WaitForWindowHeading(session, source, "Link source");
+      InvokeDocumentMenu(session, source, "SourceToggle", menuName: "View");
+      string original = WaitForWindowElement(session, source, "SourceText").Patterns.Value.Pattern.Value.Value;
+      ClickLocalDocumentLink(session, source, "Open linked child");
+      Window child = WaitForDocumentWindow(session, Filename);
+      WaitForWindowHeading(session, child, "Linked child");
+      Assert.Equal(2, DocumentWindows(session).Length);
+      Assert.Equal(original, WaitForWindowElement(session, source, "SourceText").Patterns.Value.Pattern.Value.Value);
+      ClickLocalDocumentLink(session, source, "Open linked child");
+      session.WaitFor(() => GetForegroundWindow() == child.Properties.NativeWindowHandle.ValueOrDefault ? child : null, "the existing linked reader focused without duplication");
+      Assert.Equal(2, DocumentWindows(session).Length);
+      File.WriteAllText(path, "# Linked child refreshed");
+      WaitForWindowHeading(session, child, "Linked child refreshed");
+      foreach(string label in new[] { "Blocked program", "Blocked parent" })
+      {
+         ClickLocalDocumentLink(session, source, label);
+         session.WaitFor(() => WaitForWindowElement(session, source, "StatusText").Name.Contains("outside", StringComparison.Ordinal) ? source : null, "the rejected document link");
+         Assert.Equal(2, DocumentWindows(session).Length);
+      }
+      AssertLinkedReloadScope(session, child, nested, saved, Filename);
+   }
+
+
+
+   /// <summary>Replacing the linked directory with an outside junction must keep the old snapshot and enforce scope on manual reload.</summary>
+   private static void AssertLinkedReloadScope(AppSession session, Window child, string nested, string saved, string filename)
+   {
+      string outside = Path.Combine(Path.GetTempPath(), "markdownviewr-link-outside-" + Guid.NewGuid().ToString("N"));
+      Directory.CreateDirectory(outside);
+      File.WriteAllText(Path.Combine(outside, filename), "# Outside content must never be displayed");
+      Assert.StartsWith(Path.GetFullPath(session.DataDirectory) + Path.DirectorySeparatorChar, Path.GetFullPath(nested), StringComparison.Ordinal);
+      Assert.StartsWith(Path.GetFullPath(session.DataDirectory) + Path.DirectorySeparatorChar, Path.GetFullPath(saved), StringComparison.Ordinal);
+      try
+      {
+         Directory.Move(nested, saved);
+         var start = new ProcessStartInfo("cmd.exe") { UseShellExecute = false, CreateNoWindow = true };
+         start.ArgumentList.Add("/c");
+         start.ArgumentList.Add("mklink");
+         start.ArgumentList.Add("/J");
+         start.ArgumentList.Add(nested);
+         start.ArgumentList.Add(outside);
+         using Process process = Process.Start(start)!;
+         Assert.True(process.WaitForExit(10000), "Junction creation did not finish.");
+         Assert.Equal(0, process.ExitCode);
+         InvokeDocumentMenu(session, child, "ReloadMenuItem");
+         session.WaitFor(() => WaitForWindowElement(session, child, "StatusText").Name.Contains("previous version", StringComparison.Ordinal) ? child : null, "folder-scoped reload retaining the committed snapshot");
+         Assert.NotNull(WaitForWindowElement(session, child, "FileStaleButton"));
+         Assert.Null(child.FindFirstDescendant(cf => cf.ByName("Outside content must never be displayed")));
+         WaitForWindowHeading(session, child, "Linked child refreshed");
+         RetainDocumentWindow(session, child, "linked-document-scope-denial");
+      }
+      finally
+      {
+         if(Directory.Exists(nested) && new DirectoryInfo(nested).Attributes.HasFlag(FileAttributes.ReparsePoint))
+         {
+            Directory.Delete(nested);
+         }
+         if(Directory.Exists(saved) && !Directory.Exists(nested))
+         {
+            Directory.Move(saved, nested);
+         }
+         Assert.StartsWith(Path.Combine(Path.GetFullPath(Path.GetTempPath()), "markdownviewr-link-outside-"), Path.GetFullPath(outside), StringComparison.Ordinal);
+         Directory.Delete(outside, recursive: true);
+      }
+   }
+
+
+
+   /// <summary>Clicks the real browser hyperlink in its owning window so the host receives actual user-initiated navigation.</summary>
+   private static void ClickLocalDocumentLink(AppSession session, Window window, string label)
+   {
+      window.SetForeground();
+      Wait.UntilInputIsProcessed();
+      AutomationElement link = session.WaitFor(() => window.FindFirstDescendant(cf => cf.ByControlType(ControlType.Hyperlink).And(cf.ByName(label))), "the owned document hyperlink " + label);
+      Mouse.Click(link.GetClickablePoint());
+   }
+
+
+
+   /// <summary>New windows stay blank; recent activation focuses existing readers, failed opens preserve them and clearing cannot be undone by stale preferences.</summary>
+   [Fact]
+   public void Windows_NewRecentAndClear_PreservesDocumentsAndHistory()
+   {
+      using var session = new AppSession(document: "# Recent first", documentFileName: "one.md",
+         additionalDocuments: new Dictionary<string, string>(StringComparer.Ordinal) { ["two.markdown"] = "# Recent second" });
+      Window first = WaitForDocumentWindow(session, "one.md");
+      Window second = WaitForDocumentWindow(session, "two.markdown");
+      WaitForWindowHeading(session, first, "Recent first");
+      WaitForWindowHeading(session, second, "Recent second");
+      string[] history = ReadRecentDocuments(session);
+      Assert.Equal(2, history.Length);
+      first.SetForeground();
+      WaitForWindowElement(session, first, "ZoomResetButton").Focus();
+      Wait.UntilInputIsProcessed();
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_N);
+      Window blank = session.WaitFor(() => DocumentWindows(session).FirstOrDefault(window => string.Equals(window.Name, session.DisplayName, StringComparison.Ordinal)), "a genuinely blank native Ctrl+N window").AsWindow();
+      Assert.Null(blank.FindFirstDescendant(cf => cf.ByAutomationId("mv-heading-0")));
+      Assert.Equal(3, DocumentWindows(session).Length);
+      InvokeDocumentMenu(session, blank, "RecentDocument:" + Array.IndexOf(history, Path.Combine(session.DataDirectory, "one.md")), recent: true);
+      session.WaitFor(() => GetForegroundWindow() == first.Properties.NativeWindowHandle.Value ? first : null, "the actual original reader brought to the native foreground by its recent entry");
+      Assert.Equal(3, DocumentWindows(session).Length);
+      Assert.Equal(history, ReadRecentDocuments(session));
+      InvokeDocumentMenu(session, blank, "CloseWindowMenuItem");
+      InvokeDocumentMenu(session, second, "CloseWindowMenuItem");
+      session.WaitFor(() => DocumentWindows(session).Length == 1 ? first : null, "the first reader remaining after both other windows close");
+      File.Delete(Path.Combine(session.DataDirectory, "two.markdown"));
+      InvokeDocumentMenu(session, first, "RecentDocument:" + Array.IndexOf(history, Path.Combine(session.DataDirectory, "two.markdown")), recent: true);
+      Window missing = session.WaitFor(() => DocumentWindows(session).FirstOrDefault(window => string.Equals(window.Name, session.DisplayName, StringComparison.Ordinal)), "the separate missing-file window").AsWindow();
+      session.WaitFor(() => missing.FindFirstDescendant(cf => cf.ByAutomationId("StatusText")) is { } status && status.Name.StartsWith("Could not open this document:", StringComparison.Ordinal) ? status : null, "the actual missing recent-file error");
+      Assert.NotNull(first.FindFirstDescendant(cf => cf.ByName("Recent first")));
+      Assert.Equal(history, ReadRecentDocuments(session));
+      InvokeDocumentMenu(session, missing, "ClearRecentDocuments", recent: true);
+      Assert.Empty(ReadRecentDocuments(session));
+      // This window loaded the nonempty history before Clear; its next preference save must not resurrect that stale snapshot.
+      InvokeDocumentMenu(session, missing, "SourceToggle", menuName: "View");
+      session.WaitFor(() => missing.FindFirstDescendant(cf => cf.ByAutomationId("SourceText")), "the older-history window saving its source preference after Clear");
+      Assert.Empty(ReadRecentDocuments(session));
+      using(var saved = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.True(saved.RootElement.GetProperty("ShowSource").GetBoolean());
+      }
+      Assert.True(File.Exists(Path.Combine(session.DataDirectory, "one.md")));
+      RetainDocumentWindow(session, first, "cleared-history-reader");
+      InvokeDocumentMenu(session, first, "ExitMenuItem");
+      session.WaitFor(() => session.App.HasExited ? session.Automation.GetDesktop() : null, "File/Exit closing all document windows");
+   }
+
+
+
+   /// <summary>The real Windows picker opens multiple literal paths in separate readers and cancellation preserves them.</summary>
+   [Fact]
+   public void Windows_FilePickerMultipleAndCancel_PreservesExistingReader()
+   {
+      using var session = new AppSession(document: "# Original picker reader", documentFileName: "original.txt",
+         documentAssets: new Dictionary<string, byte[]>(StringComparer.Ordinal)
+         {
+            ["picked & caf\u00e9.mdown"] = Encoding.UTF8.GetBytes("# First picked reader"),
+            ["picked two.mkd"] = Encoding.UTF8.GetBytes("# Second picked reader"),
+         });
+      Window original = WaitForDocumentWindow(session, "original.txt");
+      WaitForWindowHeading(session, original, "Original picker reader");
+      InvokeDocumentMenu(session, original, "OpenMenuItem");
+      AutomationElement filename = WaitForOpenPickerFilename(session);
+      string paths = "\"" + Path.Combine(session.DataDirectory, "picked & caf\u00e9.mdown") + "\" \"" + Path.Combine(session.DataDirectory, "picked two.mkd") + "\"";
+      EnterPickerFilename(session, filename, paths);
+      session.ClickButton("Open");
+      Window first = WaitForDocumentWindow(session, "picked & caf\u00e9.mdown");
+      Window second = WaitForDocumentWindow(session, "picked two.mkd");
+      WaitForWindowHeading(session, first, "First picked reader");
+      WaitForWindowHeading(session, second, "Second picked reader");
+      Assert.Equal(3, DocumentWindows(session).Length);
+      Assert.NotNull(original.FindFirstDescendant(cf => cf.ByName("Original picker reader")));
+      string[] history = ReadRecentDocuments(session);
+      Assert.Equal(3, history.Length);
+      InvokeDocumentMenu(session, original, "OpenMenuItem");
+      WaitForOpenPickerFilename(session);
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("1001");
+      Assert.Equal(3, DocumentWindows(session).Length);
+      Assert.Equal(history, ReadRecentDocuments(session));
+      Assert.NotNull(original.FindFirstDescendant(cf => cf.ByName("Original picker reader")));
+      RetainDocumentWindow(session, first, "multiple-picker-reader");
+   }
+
+
+
+   /// <summary>Observes actual native foreground ownership without relying on a mirrored application property.</summary>
+   [LibraryImport("user32.dll")]
+   private static partial nint GetForegroundWindow();
+
+
+
+   /// <summary>Counts only real app document windows, excluding native menu, log and picker surfaces.</summary>
+   private static Window[] DocumentWindows(AppSession session)
+      => session.TopLevelWindows().Where(window => window.FindFirstDescendant(cf => cf.ByAutomationId("DocumentView")) is not null).Select(window => window.AsWindow()).ToArray();
+
+
+
+   /// <summary>Matches the native document window's basename rather than an arbitrary WebView child title.</summary>
+   private static Window WaitForDocumentWindow(AppSession session, string filename)
+      => session.WaitFor(() => DocumentWindows(session).FirstOrDefault(window => window.Name.StartsWith(filename + " \u2014 ", StringComparison.Ordinal)), "the separate " + filename + " reader", TimeSpan.FromSeconds(30)).AsWindow();
+
+
+
+   /// <summary>Requires the actual browser heading within the specified window, including asynchronous reload completion.</summary>
+   private static AutomationElement WaitForWindowHeading(AppSession session, Window window, string title)
+      => session.WaitFor(() => window.FindFirstDescendant(cf => cf.ByAutomationId("mv-heading-0").And(cf.ByName(title))), "the actual " + title + " glyph in its own reader", TimeSpan.FromSeconds(30));
+
+
+
+   /// <summary>Looks up native controls only in their owning document window.</summary>
+   private static AutomationElement WaitForWindowElement(AppSession session, Window window, string id)
+      => session.WaitFor(() => window.FindFirstDescendant(cf => cf.ByAutomationId(id)), "the native " + id + " control in its own window");
+
+
+
+   /// <summary>Reads the persisted private history of owned fixture paths after the native commands.</summary>
+   private static string[] ReadRecentDocuments(AppSession session)
+   {
+      using var settings = JsonDocument.Parse(session.ReadSettings());
+      return settings.RootElement.GetProperty("RecentFiles").EnumerateArray().Select(value => value.GetString()!).ToArray();
+   }
+
+
+
+   /// <summary>Opens the requested window's native menu and invokes its actual item, including the recent submenu.</summary>
+   private static void InvokeDocumentMenu(AppSession session, Window window, string id, bool recent = false, string menuName = "File")
+   {
+      window.SetForeground();
+      AutomationElement menu = session.WaitFor(() => window.FindFirstDescendant(cf => cf.ByControlType(ControlType.MenuItem).And(cf.ByName(menuName))), "the window's native " + menuName + " menu");
+      menu.Patterns.ExpandCollapse.Pattern.Expand();
+      if(recent)
+      {
+         AutomationElement submenu = session.WaitFor(() => session.TopLevelWindows().Select(root => root.FindFirstDescendant(cf => cf.ByAutomationId("RecentDocumentsMenu"))).FirstOrDefault(element => element is not null), "the private recent-file submenu");
+         submenu.Patterns.ExpandCollapse.Pattern.Expand();
+      }
+      AutomationElement item = session.WaitFor(() => session.TopLevelWindows().Select(root => root.FindFirstDescendant(cf => cf.ByAutomationId(id))).FirstOrDefault(element => element is not null), "the requested native " + id + " command");
+      if(item.Patterns.Invoke.TryGetPattern(out IInvokePattern? invoke))
+      {
+         invoke.Invoke();
+      }
+      else
+      {
+         Assert.True(item.TryGetClickablePoint(out System.Drawing.Point point));
+         NativeMouse.MoveTo(point);
+         Wait.UntilInputIsProcessed();
+         AutomationElement? hit = session.Automation.FromPoint(Mouse.Position);
+         bool target = false;
+         for(int depth = 0; hit is not null && depth < 8; depth++, hit = hit.Parent)
+         {
+            if(hit.Equals(item))
+            {
+               target = true;
+               break;
+            }
+         }
+         Assert.True(target, "The actual native pointer must be over the requested menu item or its child.");
+         Assert.Equal(session.App.ProcessId, session.Automation.FromPoint(Mouse.Position).Properties.ProcessId.ValueOrDefault);
+         Mouse.Down(MouseButton.Left);
+         Wait.UntilInputIsProcessed();
+         Mouse.Up(MouseButton.Left);
+      }
+      Wait.UntilInputIsProcessed();
+   }
+
+
+
+   /// <summary>Retains actual owned native picker controls and nonsensitive app errors when the exact filename lookup fails.</summary>
+   private static AutomationElement WaitForOpenPickerFilename(AppSession session)
+   {
+      try
+      {
+         return session.WaitFor(() => session.TopLevelWindows().SelectMany(window => window.FindAllDescendants())
+            .FirstOrDefault(element => string.Equals(element.Properties.AutomationId.ValueOrDefault, "1148", StringComparison.Ordinal)
+               && element.Properties.ControlType.ValueOrDefault == ControlType.Edit), "the real Windows multi-file picker filename field");
+      }
+      catch(TimeoutException exception)
+      {
+         string windows = string.Join(Environment.NewLine, session.TopLevelWindows().Select(window =>
+            "Window=" + window.Name + "; " + string.Join(Environment.NewLine, window.FindAllDescendants().Take(180).Select(element =>
+               "Id=" + element.Properties.AutomationId.ValueOrDefault + "; Name=" + element.Properties.Name.ValueOrDefault + "; Type=" + element.Properties.ControlType.ValueOrDefault))));
+         throw new TimeoutException(exception.Message + "; Last invocation: " + session.LastInvocation + "; Last mouse input: " + session.LastMouseInput + " Logs: " + session.ReadLogs() + "; Owned native windows: " + windows + "; Main tree: " + session.DescribeDocumentStatus(), exception);
+      }
+   }
+
+
+
+   /// <summary>Retains only the owned fixture window; hosted installed evidence collects these actual pixels.</summary>
+   private static void RetainDocumentWindow(AppSession session, Window window, string name)
+   {
+      string directory = Path.Combine(Environment.GetEnvironmentVariable("GITHUB_WORKSPACE") ?? session.DataDirectory, "artifacts", "installed-smoke-ui");
+      Directory.CreateDirectory(directory);
+      window.SetForeground();
+      window.CaptureToFile(Path.Combine(directory, name + "-" + Guid.NewGuid().ToString("N") + ".png"));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/AppTests.cs b/tests/MarkdownViewr.Windows.UiTests/AppTests.cs
index 6187a8b..e232ea0 100644
--- a/tests/MarkdownViewr.Windows.UiTests/AppTests.cs
+++ b/tests/MarkdownViewr.Windows.UiTests/AppTests.cs
@@ -3,18 +3,24 @@
  * SPDX-License-Identifier: MIT
  */
 
+using System.Net;
+using System.Net.Sockets;
+using System.Text.Json;
 using FlaUI.Core.AutomationElements;
+using FlaUI.Core.Input;
+using FlaUI.Core.Patterns;
+using FlaUI.Core.WindowsAPI;
 using Xunit.Abstractions;
 
 
 namespace MarkdownViewr.Windows.UiTests;
 
 /// <summary>
-/// End-to-end tests of the real app: the AppKit shell pieces and the example feature.
+/// End-to-end tests of the real app: the AppKit shell pieces and the document surface.
 /// UI tests share one desktop, so they never run in parallel.
 /// </summary>
 [Collection("Desktop")]
-public class AppTests
+public partial class AppTests
 {
    private readonly ITestOutputHelper _output;
 
@@ -25,6 +31,190 @@ public class AppTests
 
 
 
+   /// <summary>The native command launches the chosen real fixture process with one literal document path.</summary>
+   [Fact]
+   public void Editor_ConfiguredExecutable_LaunchesLiteralDocument()
+   {
+      using var session = new AppSession(document: "# Editor fixture", editorProbe: true, documentFileName: "notes & café $HOME.md");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Editor fixture")), "the editor fixture heading", TimeSpan.FromSeconds(30));
+      string editor = ResolveEditorProbe();
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.EnterText("EditorPath", editor);
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.Equal(editor, settings.RootElement.GetProperty("ExternalEditor").GetString());
+      }
+      session.InvokeMenuItem("File", "OpenEditorMenuItem");
+      string resultPath = Path.Combine(session.DataDirectory, "editor-result.json");
+      session.WaitFor(() => File.Exists(resultPath) ? session.MainWindow : null, "the actual editor fixture's result file");
+      using var result = JsonDocument.Parse(File.ReadAllText(resultPath));
+      Assert.Equal(Path.Combine(session.DataDirectory, "notes & café $HOME.md"), Assert.Single(result.RootElement.GetProperty("Arguments").EnumerateArray()).GetString());
+      Assert.Equal(session.DataDirectory, result.RootElement.GetProperty("WorkingDirectory").GetString());
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Editor fixture")));
+      Assert.DoesNotContain("notes & café", session.ReadLogs(), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>A missing choice keeps the dialog open; cancel does not change saved settings.</summary>
+   [Fact]
+   public void Editor_InvalidExecutableAndCancel_DoesNotPersist()
+   {
+      using var session = new AppSession();
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.EnterText("EditorPath", Path.Combine(session.DataDirectory, "missing.exe"));
+      session.ClickButton("Save");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Enter the full path of an existing .exe file.")), "the editor validation error");
+      Assert.NotNull(session.FindInApp(cf => cf.ByAutomationId("EditorPath")));
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      Assert.DoesNotContain("missing.exe", session.ReadSettings(), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>An editor uninstalled after configuration reports the problem without launching anything.</summary>
+   [Fact]
+   public void Editor_MissingConfiguredExecutable_PreservesDocument()
+   {
+      using var session = new AppSession(document: "# Missing editor fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Missing editor fixture")), "the fixture heading", TimeSpan.FromSeconds(30));
+      string editor = Path.Combine(session.DataDirectory, "removed-editor.exe");
+      File.WriteAllText(editor, "Never executed; presence-only configuration fixture.");
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.EnterText("EditorPath", editor);
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      File.Delete(editor);
+      session.InvokeMenuItem("File", "OpenEditorMenuItem");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("The configured editor is missing. Use File → Settings → Editors to choose an installed executable.")), "the missing editor status");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Missing editor fixture")));
+   }
+
+
+
+   /// <summary>Saved editor identities/order choose actual file or parent-folder arguments through the native submenu.</summary>
+   [Fact]
+   public void Editor_ListFolderChoice_PersistsOrderAndLaunchesLiteralTargets()
+   {
+      using var session = new AppSession(document: "# Editor list fixture", editorProbe: true, documentFileName: "notes & café $HOME.md");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Editor list fixture")), "the editor list document", TimeSpan.FromSeconds(30));
+      string executable = ResolveEditorProbe();
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.EnterText("EditorName", "File editor");
+      session.EnterText("EditorPath", executable);
+      session.ClickElement("EditorAdd");
+      session.EnterText("EditorName", "Folder editor");
+      session.EnterText("EditorPath", executable);
+      session.WaitForElement("EditorFolder").Patterns.Toggle.Pattern.Toggle();
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using var initial = JsonDocument.Parse(session.ReadSettings());
+      JsonElement initialChoices = initial.RootElement.GetProperty("ConfiguredEditors");
+      Assert.Equal(2, initialChoices.GetArrayLength());
+      string fileId = initialChoices[0].GetProperty("Id").GetString()!;
+      string folderId = initialChoices[1].GetProperty("Id").GetString()!;
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.WaitForElement("EditorChoice:" + folderId).Patterns.SelectionItem.Pattern.Select();
+      Wait.UntilInputIsProcessed();
+      session.ClickElement("EditorUp");
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using var reordered = JsonDocument.Parse(session.ReadSettings());
+      JsonElement choices = reordered.RootElement.GetProperty("ConfiguredEditors");
+      Assert.Equal(folderId, choices[0].GetProperty("Id").GetString());
+      Assert.Equal(fileId, choices[1].GetProperty("Id").GetString());
+      Assert.True(choices[0].GetProperty("OpensFolder").GetBoolean());
+      using JsonDocument folderResult = LaunchConfiguredEditor(session, folderId);
+      Assert.Equal(session.DataDirectory, Assert.Single(folderResult.RootElement.GetProperty("Arguments").EnumerateArray()).GetString());
+      Assert.Equal(session.DataDirectory, folderResult.RootElement.GetProperty("WorkingDirectory").GetString());
+      File.Delete(Path.Combine(session.DataDirectory, "editor-result.json"));
+      using JsonDocument fileResult = LaunchConfiguredEditor(session, fileId);
+      Assert.Equal(Path.Combine(session.DataDirectory, "notes & café $HOME.md"), Assert.Single(fileResult.RootElement.GetProperty("Arguments").EnumerateArray()).GetString());
+      Assert.DoesNotContain("notes & café", session.ReadLogs(), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Draft add/remove changes cancel atomically; saving the final removal disables the native command without resurrection.</summary>
+   [Fact]
+   public void Editor_ListCancelAndLastRemoval_PreservesCommittedChoices()
+   {
+      using var session = new AppSession(document: "# Editor removal fixture");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Editor removal fixture")), "the removal fixture document", TimeSpan.FromSeconds(30));
+      string executable = Path.Combine(session.DataDirectory, "presence-only-editor.exe");
+      File.WriteAllText(executable, "Never executed; configuration presence fixture.");
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.EnterText("EditorName", "Original editor");
+      session.EnterText("EditorPath", executable);
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using var original = JsonDocument.Parse(session.ReadSettings());
+      string identity = Assert.Single(original.RootElement.GetProperty("ConfiguredEditors").EnumerateArray()).GetProperty("Id").GetString()!;
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.ClickElement("EditorAdd");
+      session.EnterText("EditorName", "Cancelled editor");
+      session.EnterText("EditorPath", executable);
+      session.ClickElement("EditorAdd");
+      session.WaitForElement("EditorChoice:" + identity).Patterns.SelectionItem.Pattern.Select();
+      Wait.UntilInputIsProcessed();
+      session.ClickElement("EditorRemove");
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using var cancelled = JsonDocument.Parse(session.ReadSettings());
+      Assert.Equal(identity, Assert.Single(cancelled.RootElement.GetProperty("ConfiguredEditors").EnumerateArray()).GetProperty("Id").GetString());
+      Assert.DoesNotContain("Cancelled editor", session.ReadSettings(), StringComparison.Ordinal);
+      OpenSettingsAction(session, "ConfigureEditorMenuItem", "SettingsEditorsTab");
+      session.ClickElement("EditorRemove");
+      session.ClickButton("Save");
+      session.WaitForElementGone("EditorPath");
+      CloseSettings(session);
+      using var removed = JsonDocument.Parse(session.ReadSettings());
+      Assert.Empty(removed.RootElement.GetProperty("ConfiguredEditors").EnumerateArray());
+      Assert.Equal("", removed.RootElement.GetProperty("ExternalEditor").GetString());
+      AutomationElement menu = session.WaitFor(() => session.FindInApp(cf => cf.ByControlType(FlaUI.Core.Definitions.ControlType.MenuItem).And(cf.ByName("File"))), "the native File menu");
+      menu.Patterns.ExpandCollapse.Pattern.Expand();
+      Assert.False(session.WaitForElement("OpenEditorMenuItem").IsEnabled);
+   }
+
+
+
+   /// <summary>Reads the actual owned probe process output after selecting a native editor submenu entry.</summary>
+   private static JsonDocument LaunchConfiguredEditor(AppSession session, string identity)
+   {
+      session.InvokeMenuItem("File", "OpenEditorChoices");
+      session.ClickElement("EditorLaunch:" + identity);
+      string path = Path.Combine(session.DataDirectory, "editor-result.json");
+      session.WaitFor(() => File.Exists(path) ? session.MainWindow : null, "the actual selected editor fixture launch");
+      return JsonDocument.Parse(File.ReadAllText(path));
+   }
+
+
+
+   /// <summary>Uses the solution's existing test-only executable, never a real user's editor.</summary>
+   private static string ResolveEditorProbe()
+   {
+      for(DirectoryInfo? current = new(AppContext.BaseDirectory); current is not null; current = current.Parent)
+      {
+         if(File.Exists(Path.Combine(current.FullName, "MarkdownViewr.Windows.slnx")))
+         {
+            string path = Path.Combine(current.FullName, "tests", "MarkdownViewr.Windows.UpdateProbe", "bin", "Debug", "net10.0-windows", "MarkdownViewr.Windows.UpdateProbe.exe");
+            return File.Exists(path) ? path : throw new FileNotFoundException("Build the solution's test-only editor probe first.", path);
+         }
+      }
+      throw new FileNotFoundException("Could not locate the solution's editor probe.");
+   }
+
+
    /// <summary>Splash: shows, then dismisses itself.</summary>
    [Fact]
    public void Splash_ShowsThenDismissesItself()
@@ -44,43 +234,37 @@ public class AppTests
       session.InvokeMenuItem("Help", "AboutMenuItem");
       AutomationElement version = session.WaitForElement("AboutVersionText");
       Assert.StartsWith("Version ", version.Name, StringComparison.Ordinal);
+      Assert.Contains("Darin Kelkhoff", session.WaitForElement("AboutOriginalRepository").Name, StringComparison.Ordinal);
+      Assert.Contains("kelkhoff.com", session.WaitForElement("AboutOriginalAuthorWebsite").Name, StringComparison.Ordinal);
+      Assert.True(session.WaitForElement("AboutOriginalRepository").Patterns.Invoke.IsSupported);
+      Assert.True(session.WaitForElement("AboutOriginalAuthorWebsite").Patterns.Invoke.IsSupported);
+      AutomationElement contributions = session.WaitForElement("AboutContributions");
+      Assert.NotNull(contributions.FindFirstDescendant(cf => cf.ByAutomationId("AboutOriginalRepository")));
+      Assert.NotNull(contributions.FindFirstDescendant(cf => cf.ByAutomationId("AboutOriginalAuthorWebsite")));
+      foreach(AboutComponent component in AboutComponents.OpenSource)
+      {
+         AutomationElement project = session.WaitForElement("AboutProject:" + component.Name);
+         AutomationElement license = session.WaitForElement("AboutLicense:" + component.Name);
+         Assert.True(project.Patterns.Invoke.IsSupported);
+         Assert.True(license.Patterns.Invoke.IsSupported);
+         Assert.Contains(component.Version, project.Name, StringComparison.Ordinal);
+         Assert.Contains(component.License, license.Name, StringComparison.Ordinal);
+      }
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("AboutDevelopmentTools")));
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("AboutProject:FlaUI.Core")));
       session.ClickButton("Close");
       session.WaitForElementGone("AboutVersionText");
    }
 
 
 
-   /// <summary>Crash net: an unhandled exception is logged and the app keeps running.</summary>
-   [Fact]
-   public void UnhandledException_IsLoggedAndTheAppSurvives()
-   {
-      using var session = new AppSession();
-      try
-      {
-         session.MouseClickElement("ThrowButton");
-         _output.WriteLine(session.LastMouseInput);
-         session.WaitFor(
-            () => session.ReadLogs().Contains("Deliberately unhandled exception from the template", StringComparison.Ordinal) ? session.MainWindow : null,
-            "the crash net's log entry");
-      }
-      catch(TimeoutException exception)
-      {
-         AutomationElement? status = session.FindInApp(cf => cf.ByAutomationId("StatusText"));
-         throw new TimeoutException($"{exception.Message} {session.LastMouseInput} Observed status: '{status?.Properties.Name.ValueOrDefault}'. App logs: {session.ReadLogs()}", exception);
-      }
-      Assert.False(session.App.HasExited);
-      Assert.Contains("Unhandled UI exception", session.ReadLogs(), StringComparison.Ordinal);
-   }
-
-
-
    /// <summary>Activity log: opens a window showing the log.</summary>
    [Fact]
    public void ActivityLog_OpensAWindowShowingTheLog()
    {
       using var session = new AppSession();
       session.InvokeMenuItem("Help", "ActivityLogMenuItem");
-      string title = AppIdentity.Info.DisplayName + " — Activity log";
+      string title = session.DisplayName + " — Activity log";
       session.WaitFor(
          () => session.TopLevelWindows().FirstOrDefault(window => string.Equals(window.Name, title, StringComparison.Ordinal)),
          "the activity log window");
@@ -110,6 +294,951 @@ public class AppTests
 
 
 
+   /// <summary>The original document themes persist independently and keep the displayed document intact.</summary>
+   [Fact]
+   public void DocumentTheme_ChangedChoice_PersistsAndRetainsDocument()
+   {
+      using var session = new AppSession(document: "# Theme acceptance");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Theme acceptance")), "the document heading", TimeSpan.FromSeconds(30));
+      WaitForDocumentColor(session, System.Drawing.Color.FromArgb(30, 30, 46));
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:GitHub Light");
+      session.WaitFor(
+         () => session.ReadSettings().Contains("\"DocumentTheme\": \"GitHub Light\"", StringComparison.Ordinal) ? session.MainWindow : null,
+         "the selected document theme to be saved");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Theme acceptance")), "the document after its theme changes");
+      WaitForDocumentColor(session, System.Drawing.Color.White);
+      _output.WriteLine(session.DescribeDocumentStatus());
+      Assert.DoesNotContain("\"Theme\": \"Light\"", session.ReadSettings(), StringComparison.Ordinal);
+   }
+
+
+   /// <summary>A named custom theme saves all editing controls and applies its CSS to the actual browser.</summary>
+   [Fact]
+   public void ThemeEditor_NewCustomTheme_SavesAndPaintsChanges()
+   {
+      using var session = new AppSession(document: "# Custom theme acceptance\n\n`sample code`");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Custom theme acceptance")), "the document heading", TimeSpan.FromSeconds(30));
+      OpenSettingsAction(session, "EditDocumentThemeMenu");
+      session.EnterText("ThemeEditorName", "My reading theme");
+      session.EnterText("ThemeEditorCodeFont", "Consolas");
+      session.WaitForElement("ThemeEditorCodeSize").Patterns.RangeValue.Pattern.SetValue(17);
+      session.EnterText("ThemeEditorColor:background", "#112233");
+      session.EnterText("ThemeEditorCss", "body { background: #223344; }");
+      session.ClickButton("Save theme");
+      session.WaitForElementGone("ThemeEditorName");
+      CloseSettings(session);
+      WaitForDocumentColor(session, System.Drawing.Color.FromArgb(34, 51, 68));
+      using var settings = JsonDocument.Parse(session.ReadSettings());
+      Assert.Equal("My reading theme", settings.RootElement.GetProperty("DocumentTheme").GetString());
+      using var theme = JsonDocument.Parse(Assert.Single(settings.RootElement.GetProperty("UserThemes").EnumerateArray()).GetString()!);
+      Assert.Equal("Consolas", theme.RootElement.GetProperty("fonts").GetProperty("code").GetString());
+      Assert.Equal(17, theme.RootElement.GetProperty("sizes").GetProperty("codeFontSize").GetDouble());
+      Assert.Equal("#112233", theme.RootElement.GetProperty("colors").GetProperty("background").GetString());
+      Assert.Equal("body { background: #223344; }", theme.RootElement.GetProperty("customCSS").GetString());
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Custom theme acceptance")));
+      _output.WriteLine(session.DescribeDocumentStatus());
+   }
+
+
+
+   /// <summary>Invalid colors keep the dialog open; cancellation cannot create a saved override.</summary>
+   [Fact]
+   public void ThemeEditor_InvalidColorAndCancel_DoesNotPersist()
+   {
+      using var session = new AppSession();
+      OpenSettingsAction(session, "EditDocumentThemeMenu");
+      session.EnterText("ThemeEditorColor:background", "invalid");
+      session.ClickButton("Save theme");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Theme colors must use six-digit hexadecimal notation.")), "the color validation error");
+      Assert.NotNull(session.FindInApp(cf => cf.ByAutomationId("ThemeEditorName")));
+      session.ClickButton("Cancel");
+      session.WaitForElementGone("ThemeEditorName");
+      CloseSettings(session);
+      Assert.DoesNotContain("invalid", session.ReadSettings(), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Restoring built-ins preserves the edited palette as a renamed custom copy and makes the original available.</summary>
+   [Fact]
+   public void ThemeEditor_BuiltInOverride_RestoresOriginalPalette()
+   {
+      using var session = new AppSession(document: "# Theme restore acceptance");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Theme restore acceptance")), "the document heading", TimeSpan.FromSeconds(30));
+      OpenSettingsAction(session, "EditDocumentThemeMenu");
+      session.EnterText("ThemeEditorColor:background", "#112233");
+      session.ClickButton("Save theme");
+      session.WaitForElementGone("ThemeEditorName");
+      CloseSettings(session);
+      WaitForDocumentColor(session, System.Drawing.Color.FromArgb(17, 34, 51));
+      OpenSettingsAction(session, "RestoreDocumentThemesMenu");
+      session.ClickButton("Restore themes");
+      CloseSettings(session);
+      WaitForSavedDocumentTheme(session, "Catppuccin Mocha (2)");
+      WaitForDocumentColor(session, System.Drawing.Color.FromArgb(17, 34, 51));
+      using var settings = JsonDocument.Parse(session.ReadSettings());
+      Assert.Equal("Catppuccin Mocha (2)", settings.RootElement.GetProperty("DocumentTheme").GetString());
+      string json = Assert.Single(settings.RootElement.GetProperty("UserThemes").EnumerateArray()).GetString()!;
+      using var copy = JsonDocument.Parse(json);
+      Assert.Equal("Catppuccin Mocha (2)", copy.RootElement.GetProperty("name").GetString());
+      Assert.Equal("#112233", copy.RootElement.GetProperty("colors").GetProperty("background").GetString());
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:Catppuccin Mocha");
+      WaitForDocumentColor(session, System.Drawing.Color.FromArgb(30, 30, 46));
+   }
+
+
+   /// <summary>The real reading surface switches between hidden, metadata-table and Markdown frontmatter modes.</summary>
+   [Fact]
+   public void Frontmatter_ChangeModes_UpdatesSurfaceAndSavesChoice()
+   {
+      using var session = new AppSession(document: "---\n**Visible metadata**\n---\n# Frontmatter body");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Frontmatter body")), "the document body", TimeSpan.FromSeconds(30));
+      Assert.Null(session.FindInApp(cf => cf.ByName("Visible metadata")));
+      session.InvokeMenuItem("View", "FrontmatterMenu");
+      session.ClickElement("FrontmatterMetadata");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Visible metadata")), "the metadata table value");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByControlType(FlaUI.Core.Definitions.ControlType.Table)), "the frontmatter table");
+      session.InvokeMenuItem("View", "FrontmatterMenu");
+      session.ClickElement("FrontmatterMarkdown");
+      try
+      {
+         session.WaitFor(
+               () => session.ReadSettings().Contains("\"Frontmatter\": \"Markdown\"", StringComparison.Ordinal) ? session.MainWindow : null,
+               "the Markdown frontmatter choice to be saved");
+         AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByControlType(FlaUI.Core.Definitions.ControlType.Table)), "the metadata table after switching to Markdown");
+      }
+      catch(TimeoutException exception)
+      {
+         throw new TimeoutException($"{exception.Message} Input: {session.LastInvocation} {session.LastMouseInput} Settings: {session.ReadSettings()} Logs: {session.ReadLogs()} Native tree: {session.DescribeDocumentStatus()}", exception);
+      }
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Visible metadata")), "the rendered frontmatter heading");
+      session.InvokeMenuItem("View", "FrontmatterMenu");
+      session.ClickElement("FrontmatterHide");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Reloaded document.md")), "the hidden-mode reload status");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Visible metadata")), "the hidden metadata");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Frontmatter body")));
+   }
+
+
+   /// <summary>Source remains literal and read-only, follows committed reloads and persists its visibility.</summary>
+   [Fact]
+   public void Source_ShowReloadAndHide_PreservesLiteralSnapshot()
+   {
+      const string Markdown = "---\nsecret: literal metadata\n---\n# Source acceptance\n\n<script>document.body.textContent='Executed source';</script>\n\n```html\n<button onclick='evil()'>Literal code</button>\n```";
+      using var session = new AppSession(document: Markdown);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Source acceptance")), "the document heading", TimeSpan.FromSeconds(30));
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("SourceText")));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source;
+      try
+      {
+         source = session.WaitForElement("SourceText");
+      }
+      catch(TimeoutException exception)
+      {
+         throw new TimeoutException($"{exception.Message} Settings: {session.ReadSettings()} Logs: {session.ReadLogs()} Native tree: {session.DescribeDocumentStatus()}", exception);
+      }
+      Assert.True(source.Patterns.Value.Pattern.IsReadOnly.Value);
+      string value = source.Patterns.Value.Pattern.Value.Value.ReplaceLineEndings("\n");
+      Assert.Equal(Markdown, value);
+      using(var settings = JsonDocument.Parse(session.ReadSettings()))
+      {
+         Assert.True(settings.RootElement.GetProperty("ShowSource").GetBoolean());
+         AssertEqualSourcePanes(session);
+      }
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), "# Source replacement\n\n**New literal text**");
+      session.WaitFor(() => source.Patterns.Value.Pattern.Value.Value.Contains("**New literal text**", StringComparison.Ordinal) ? source : null, "the source snapshot after reload");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Source replacement")), "the rendered replacement heading");
+      double initialWidth = source.BoundingRectangle.Width;
+      AutomationElement divider = session.WaitForElement("SourceDivider");
+      DragSourceDivider(session, divider, -70);
+      session.WaitFor(() => source.BoundingRectangle.Width > initialWidth + 50 ? source : null, "the actual source pane growing after a70px physical drag");
+      divider.Focus();
+      SendReadingKey(VirtualKeyShort.HOME);
+      AssertEqualSourcePanes(session);
+      double equalWidth = source.BoundingRectangle.Width;
+      SendReadingKey(VirtualKeyShort.LEFT);
+      session.WaitFor(() => source.BoundingRectangle.Width > equalWidth + 15 ? source : null, "the focused divider growing source through the Left arrow key");
+      session.InvokeMenuItem("View", "SourceToggle");
+      session.WaitForElementGone("SourceText");
+      using var hidden = JsonDocument.Parse(session.ReadSettings());
+      Assert.False(hidden.RootElement.GetProperty("ShowSource").GetBoolean());
+      session.InvokeMenuItem("View", "SourceToggle");
+      AssertEqualSourcePanes(session);
+      _output.WriteLine(session.DescribeDocumentStatus());
+   }
+
+
+   /// <summary>Actual reader jumps, native source scrollbar scrolling and physical source wheel input synchronize both viewports.</summary>
+   [Fact]
+   public void Source_BidirectionalScroll_AlignsActualHeadingViewports()
+   {
+      string body = string.Join("\n\n", Enumerable.Range(0, 80).Select(index => "Source sync paragraph " + index));
+      using var session = new AppSession(document: "# Source sync root\n\n" + body + "\n\n## Source sync middle\n\n" + body + "\n\n## Source sync last\n\n" + body);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Source sync root")), "the source sync document", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source = session.WaitForElement("SourceText");
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.ClickElement("OutlineHeading:2");
+      WaitForSourceHeadingAlignment(session, source, "## Source sync last");
+      session.MouseClickElement("SourceText");
+      WaitForSourceHeadingAlignment(session, source, "## Source sync last");
+      ScrollSourceHeadingToTop(session, source, "## Source sync middle");
+      WaitForSourceHeadingAlignment(session, source, "## Source sync middle");
+      WaitForBrowserHeadingAlignment(session, "mv-heading-1");
+      session.MouseClickElement("OutlineHeading:2");
+      WaitForBrowserHeadingAlignment(session, "mv-heading-2");
+      WaitForSourceHeadingAlignment(session, source, "## Source sync last");
+      AutomationElement browserScroller = FindDocumentScroller(session);
+      double previous = browserScroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value;
+      session.MouseClickElement("SourceText");
+      Mouse.Scroll(-3);
+      Wait.UntilInputIsProcessed();
+      WaitForReaderScroll(session, browserScroller, value => value > previous + 0.2, "physical source-wheel scrolling mirrored in the reader");
+      Assert.Contains("## Source sync middle", source.Patterns.Value.Pattern.Value.Value, StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Actual nested collapse mirrors source, search reveals original content and reload/expansion retains independent choices.</summary>
+   [Fact]
+   public void Source_CollapseFindReload_PreservesCanonicalSnapshot()
+   {
+      const string Markdown = "# Source fold root\n\nRoot body\n\n## Source fold child\n\nChild body\n\n### Source fold grandchild\n\nGrand body\n\n```md\n# Fence pseudo heading\n```\n\nSource fold peer\n----------------\nPeer body\n\n# Source fold last\nTail";
+      using var session = new AppSession(document: Markdown);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Source fold root")), "the source folding document", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source = session.WaitForElement("SourceText");
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.WaitForElement("OutlineDepth").AsComboBox().Select(2);
+      session.ClickElement("OutlineHeading:2");
+      session.ClickElement("ToggleSection");
+      WaitForSourceValue(session, source, value => !value.Contains("Grand body", StringComparison.Ordinal) && !value.Contains("# Fence pseudo", StringComparison.Ordinal) && value.Contains("### Source fold grandchild", StringComparison.Ordinal), "the folded native grandchild body and fence");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      WaitForSourceValue(session, source, value => !value.Contains("### Source fold grandchild", StringComparison.Ordinal) && value.ReplaceLineEndings("\n").Contains("Source fold peer\n----------------", StringComparison.Ordinal), "the folded parent and retained Setext peer");
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.EnterText("FindText", "Grand body");
+      WaitForFindCount(session, "1 of 1");
+      Assert.Equal("Grand body", ReadSourceSelection(source));
+      WaitForSourceValue(session, source, value => value.Contains("# Fence pseudo heading", StringComparison.Ordinal), "literal fenced source revealed for find");
+      session.ClickElement("FindCloseButton");
+      WaitForSourceValue(session, source, value => !value.Contains("Grand body", StringComparison.Ordinal) && !value.Contains("### Source fold grandchild", StringComparison.Ordinal), "pre-search source folds restored");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      WaitForSourceValue(session, source, value => value.Contains("Child body", StringComparison.Ordinal) && value.Contains("### Source fold grandchild", StringComparison.Ordinal) && !value.Contains("Grand body", StringComparison.Ordinal), "expanded parent with independently folded child");
+      string replacement = Markdown.Replace("Grand body", "Grand body reloaded", StringComparison.Ordinal);
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), replacement);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Reloaded document.md")), "the committed source folding reload");
+      session.ClickElement("OutlineHeading:2");
+      session.ClickElement("ToggleSection");
+      WaitForSourceValue(session, source, value => value.Contains("Grand body reloaded", StringComparison.Ordinal), "the reloaded canonical body after expansion");
+      Assert.Equal(replacement, source.Patterns.Value.Pattern.Value.Value.ReplaceLineEndings("\n"));
+   }
+
+
+
+   /// <summary>Raw multiline/same-line HTML headings retain literal source provenance through real outline, find, folding and watched reload.</summary>
+   [Fact]
+   public void Source_RawHtmlHeadingProvenance_PreservesFoldFindAndReload()
+   {
+      string rootBody = string.Join("\n\n", Enumerable.Range(0, 40).Select(index => "Raw root body " + index));
+      string childBody = string.Join("\n\n", Enumerable.Range(0, 40).Select(index => "Raw child body " + index));
+      string tailBody = string.Join("\n\n", Enumerable.Range(0, 40).Select(index => "Raw tail body " + index));
+      string markdown = "---\ntitle: Raw fixture\n---\n<div><h1>Raw root</h1></div>\n\n" + rootBody
+         + "\n\nIntro <H2\n title='metadata'>Raw child\n</H2>\n\n" + childBody
+         + "\n\n<div><h3>Raw first peer</h3><h3>Raw second peer</h3></div>\n\nPeer body\n\n```html\n<h2>Fence pseudo heading</h2>\n```\n\n# Raw last\n\n" + tailBody;
+      using var session = new AppSession(document: markdown);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Raw root")), "the raw HTML fixture", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source = session.WaitForElement("SourceText");
+      Assert.Equal(markdown, source.Patterns.Value.Pattern.Value.Value.ReplaceLineEndings("\n"));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.WaitForElement("OutlineDepth").AsComboBox().Select(5);
+      session.WaitForElement("OutlineHeading:3");
+      Assert.Equal("Raw first peer", session.WaitForElement("OutlineHeading:2").Name);
+      Assert.Equal("Raw second peer", session.WaitForElement("OutlineHeading:3").Name);
+      foreach((int index, string text) in new[] { (2, "<h3>Raw first peer"), (3, "<h3>Raw second peer") })
+      {
+         session.ClickElement("OutlineHeading:" + index);
+         WaitForBrowserHeadingAlignment(session, "mv-heading-" + index);
+         WaitForSourceHeadingAlignment(session, source, text);
+      }
+      session.ClickElement("OutlineHeading:1");
+      WaitForBrowserHeadingAlignment(session, "mv-heading-1");
+      WaitForSourceHeadingAlignment(session, source, "<H2");
+      session.ClickElement("ToggleSection");
+      WaitForSourceValue(session, source, value => !value.Contains("Raw child body", StringComparison.Ordinal)
+         && !value.Contains("Raw first peer", StringComparison.Ordinal) && value.Contains("# Raw last", StringComparison.Ordinal)
+         && value.ReplaceLineEndings("\n").Contains("<H2\n title='metadata'>Raw child\n</H2>", StringComparison.Ordinal), "literal source folded at raw HTML heading boundaries");
+      session.WaitForElementGone("mv-heading-2");
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.EnterText("FindText", "Raw child body 0");
+      WaitForFindCount(session, "1 of 1");
+      Assert.Equal("Raw child body 0", ReadSourceSelection(source));
+      WaitForSourceValue(session, source, value => value.Contains("<h3>Raw first peer</h3><h3>Raw second peer</h3>", StringComparison.Ordinal), "both unchanged same-line source headings revealed for find");
+      session.ClickElement("FindCloseButton");
+      WaitForSourceValue(session, source, value => !value.Contains("Raw child body", StringComparison.Ordinal), "raw HTML fold restored after find");
+      string replacement = markdown.Replace("Raw child body 0", "Raw child body reloaded", StringComparison.Ordinal);
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), replacement);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Reloaded document.md")), "the watched raw HTML reload");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      WaitForSourceValue(session, source, value => value.Contains("Raw child body reloaded", StringComparison.Ordinal), "the new canonical raw HTML body after expansion");
+      Assert.Equal(replacement, source.Patterns.Value.Pattern.Value.Value.ReplaceLineEndings("\n"));
+      RetainDocumentWindow(session, session.MainWindow, "raw-html-source-provenance");
+   }
+
+
+
+   /// <summary>Drives physical source-wheel input, measuring its native movement and aligning from actual glyph geometry.</summary>
+   private void ScrollSourceHeadingToTop(AppSession session, AutomationElement source, string text)
+   {
+      string value = source.Patterns.Value.Pattern.Value.Value;
+      int index = value.IndexOf(text, StringComparison.Ordinal);
+      Assert.True(index >= 0);
+      AutomationElement scrollbar = session.WaitFor(() => source.FindFirstDescendant(cf => cf.ByAutomationId("VerticalScrollBar")), "the source's native vertical scrollbar");
+      IRangeValuePattern scroll = scrollbar.Patterns.RangeValue.Pattern;
+      double maximum = scroll.Maximum.Value;
+      Assert.True(maximum > 0);
+      double before = scroll.Value.Value;
+      double requested = maximum * index / value.Length;
+      Mouse.Scroll(1);
+      Wait.UntilInputIsProcessed();
+      session.WaitFor(() => scroll.Value.Value < before - 0.5 ? source : null, "physical wheel movement of the actual source viewport");
+      double current = WaitForSourceScrollRest(session, source, scroll);
+      double pixelsPerClick = before - current;
+      Assert.True(double.IsFinite(pixelsPerClick) && pixelsPerClick > 0);
+      for(int attempt = 0; attempt < 12 && Math.Abs(current - requested) > 0.5; attempt++)
+      {
+         // Native wheel handling caps a single large event at about one viewport.
+         Mouse.Scroll(Math.Clamp((current - requested) / pixelsPerClick, -4, 4));
+         Wait.UntilInputIsProcessed();
+         double next = WaitForSourceScrollRest(session, source, scroll);
+         if(Math.Abs(next - current) < 0.5)
+         {
+            break;
+         }
+         current = next;
+      }
+      AutomationElement visible;
+      try
+      {
+         visible = session.WaitFor(() =>
+         {
+            FlaUI.Core.ITextRange range = source.Patterns.Text.Pattern.DocumentRange.FindText(text, backward: false, ignoreCase: false);
+            return range.GetBoundingRectangles().Length > 0 ? source : null;
+         }, "the source heading's actual visible native glyph");
+      }
+      catch(TimeoutException)
+      {
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         throw;
+      }
+      FlaUI.Core.ITextRange heading = visible.Patterns.Text.Pattern.DocumentRange.FindText(text, backward: false, ignoreCase: false);
+      double adjustment = heading.GetBoundingRectangles()[0].Top - source.BoundingRectangle.Top - 12;
+      Mouse.Scroll(-adjustment / pixelsPerClick);
+      Wait.UntilInputIsProcessed();
+      WaitForSourceScrollRest(session, source, scroll);
+   }
+
+
+
+   /// <summary>Measures completed native wheel movement rather than calibrating from an intermediate animation frame.</summary>
+   private static double WaitForSourceScrollRest(AppSession session, AutomationElement source, IRangeValuePattern scroll)
+   {
+      double previous = double.NaN;
+      int stable = 0;
+      session.WaitFor(() =>
+      {
+         double current = scroll.Value.Value;
+         stable = double.IsFinite(previous) && Math.Abs(current - previous) < 0.5 ? stable + 1 : 0;
+         previous = current;
+         return stable >= 2 ? source : null;
+      }, "the actual native source wheel movement to settle");
+      return previous;
+   }
+
+
+
+   /// <summary>Checks actual source-provider glyph rectangles against the owned viewport, retaining exact geometry on failure.</summary>
+   private void WaitForSourceHeadingAlignment(AppSession session, AutomationElement source, string text)
+   {
+      try
+      {
+         session.WaitFor(() =>
+         {
+            FlaUI.Core.ITextRange range = source.Patterns.Text.Pattern.DocumentRange.FindText(text, backward: false, ignoreCase: false);
+            System.Drawing.Rectangle[] rectangles = range.GetBoundingRectangles();
+            return rectangles.Length > 0 && rectangles[0].Top - source.BoundingRectangle.Top is >= -2 and <= 36 ? source : null;
+         }, "the actual native source heading aligned with its viewport");
+      }
+      catch(TimeoutException)
+      {
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         try
+         {
+            FlaUI.Core.ITextRange range = source.Patterns.Text.Pattern.DocumentRange.FindText(text, backward: false, ignoreCase: false);
+            _output.WriteLine("Source alignment: viewport=" + source.BoundingRectangle + "; glyph rectangles=" + string.Join("; ", range.GetBoundingRectangles().Select(rectangle => rectangle.ToString())));
+         }
+         catch(System.ComponentModel.Win32Exception exception)
+         {
+            _output.WriteLine("Native source geometry was unavailable: " + exception.Message);
+         }
+         throw;
+      }
+   }
+
+
+
+   /// <summary>Checks the generated browser heading's actual viewport location, never a mirrored application property.</summary>
+   private void WaitForBrowserHeadingAlignment(AppSession session, string identity)
+   {
+      try
+      {
+         session.WaitFor(() =>
+         {
+            AutomationElement? heading = session.FindInApp(cf => cf.ByAutomationId(identity));
+            double top = session.WaitForElement("DocumentView").BoundingRectangle.Top;
+            return heading is not null && heading.BoundingRectangle.Top - top is >= -2 and <= 36 ? heading : null;
+         }, "the actual reader heading aligned after native source scrolling");
+      }
+      catch(TimeoutException)
+      {
+         _output.WriteLine(session.LastMouseInput);
+         _output.WriteLine(session.LastInvocation);
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         throw;
+      }
+   }
+
+
+
+   /// <summary>Reads the native source value until the expected real presentation arrives, retaining owned fixture evidence.</summary>
+   private void WaitForSourceValue(AppSession session, AutomationElement source, Func<string, bool> matches, string description)
+   {
+      try
+      {
+         session.WaitFor(() => matches(source.Patterns.Value.Pattern.Value.Value) ? source : null, description);
+      }
+      catch(TimeoutException)
+      {
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         throw;
+      }
+   }
+
+
+
+   /// <summary>Ctrl+F accepts physical typing and pairs the actual source selection with wrapping browser occurrences.</summary>
+   [Fact]
+   public void Find_PairedMatches_UpdatesCounterAndSourceSelection()
+   {
+      using var session = new AppSession(document: "# Find acceptance\n\n**Alpha** first alpha\n\nLast ALPHA");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Find acceptance")), "the document heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source = session.WaitForElement("SourceText");
+      session.MainWindow.SetForeground();
+      session.WaitForElement("DocumentView").Focus();
+      FlaUI.Core.Input.Keyboard.TypeSimultaneously(FlaUI.Core.WindowsAPI.VirtualKeyShort.CONTROL, FlaUI.Core.WindowsAPI.VirtualKeyShort.KEY_F);
+      try
+      {
+         session.WaitForElement("FindText");
+      }
+      catch(TimeoutException)
+      {
+         AutomationElement focused = session.Automation.FocusedElement();
+         _output.WriteLine($"Find shortcut focus: Id={focused.Properties.AutomationId.ValueOrDefault}; Type={focused.Properties.ControlType.ValueOrDefault}; PID={focused.Properties.ProcessId.ValueOrDefault}.");
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         throw;
+      }
+      FlaUI.Core.Input.Keyboard.Type("alpha");
+      WaitForFindCount(session, "1 of 3");
+      Assert.Equal("Alpha", ReadSourceSelection(source));
+      session.ClickElement("FindNextButton");
+      WaitForFindCount(session, "2 of 3");
+      Assert.Equal("alpha", ReadSourceSelection(source));
+      session.ClickElement("FindPreviousButton");
+      WaitForFindCount(session, "1 of 3");
+      session.ClickElement("FindPreviousButton");
+      WaitForFindCount(session, "3 of 3");
+      Assert.Equal("ALPHA", ReadSourceSelection(source));
+      session.ClickElement("FindNextButton");
+      WaitForFindCount(session, "1 of 3");
+      _output.WriteLine(session.DescribeDocumentStatus());
+      session.ClickElement("FindCloseButton");
+      session.WaitForElementGone("FindText");
+      Assert.Equal("", ReadSourceSelection(source));
+      _output.WriteLine(session.DescribeDocumentStatus());
+   }
+
+
+
+   /// <summary>Find reveals collapsed text, moves the real browser viewport and restores prior section choices on close.</summary>
+   [Fact]
+   public void Find_CollapsedLongDocument_MovesViewportAndRestoresSections()
+   {
+      string paragraphs = string.Join("\n\n", Enumerable.Range(0, 100).Select(index => "Find filler paragraph " + index));
+      using var session = new AppSession(document: "# Find root\n\nFirst needle occurrence\n\n" + paragraphs + "\n\n## Find tail\n\nLast needle occurrence");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Find root")), "the root heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Last needle occurrence")), "the collapsed tail content");
+      session.ClickElement("OutlineHeading:0");
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.EnterText("FindText", "needle");
+      WaitForFindCount(session, "1 of 2");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Last needle occurrence")), "the revealed tail match");
+      session.ClickElement("FindNextButton");
+      WaitForFindCount(session, "2 of 2");
+      AutomationElement scroller = FindDocumentScroller(session);
+      session.WaitFor(() => scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value > 70 ? scroller : null, "the browser viewport at the last find match");
+      session.ClickElement("FindNextButton");
+      WaitForFindCount(session, "1 of 2");
+      session.WaitFor(() => scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value < 10 ? scroller : null, "the browser viewport after wrapping to the first match");
+      session.ClickElement("FindCloseButton");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Last needle occurrence")), "the restored collapsed tail content");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Find root")));
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      WaitForFindCount(session, "1 of 2");
+      session.ClickElement("ExpandSections");
+      session.ClickElement("FindCloseButton");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Last needle occurrence")), "the explicit expansion retained after closing find");
+   }
+
+
+
+   /// <summary>Hostile-looking terms stay literal and the current query is recomputed for the newly committed reload snapshot.</summary>
+   [Fact]
+   public void Find_LiteralQueryAndReload_KeepsDocumentSafeAndRefreshesCount()
+   {
+      const string Query = "');document.body.textContent='unsafe';//";
+      using var session = new AppSession(document: "# Literal find\n\n`a.*[x]`\n\n```text\n" + Query + "\n```");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Literal find")), "the document heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement source = session.WaitForElement("SourceText");
+      session.InvokeMenuItem("Edit", "FindMenuItem");
+      session.EnterText("FindText", "a.*[x]");
+      WaitForFindCount(session, "1 of 1");
+      Assert.Equal("a.*[x]", ReadSourceSelection(source));
+      session.EnterText("FindText", Query);
+      WaitForFindCount(session, "1 of 1");
+      session.WaitFor(() => string.Equals(ReadSourceSelection(source), Query, StringComparison.Ordinal) ? source : null, "the literal hostile-looking query selection");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Literal find")));
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), "# Reloaded find\n\n```text\n" + Query + "\n" + Query + "\n```");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Reloaded find")), "the reloaded document heading");
+      WaitForFindCount(session, "1 of 2");
+      Assert.Equal(Query, ReadSourceSelection(source));
+      session.EnterText("FindText", "absent literal query");
+      WaitForFindCount(session, "0 of 0");
+      Assert.False(session.WaitForElement("FindNextButton").IsEnabled);
+      Assert.False(session.WaitForElement("FindPreviousButton").IsEnabled);
+      Assert.Equal("", ReadSourceSelection(source));
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Reloaded find")));
+   }
+
+
+
+   /// <summary>Waits for real native results, retaining fixture-only surface/log evidence on timeout.</summary>
+   private static void WaitForFindCount(AppSession session, string count)
+   {
+      try
+      {
+         session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("FindCountText").And(cf.ByName(count))), "the paired find count " + count);
+      }
+      catch(TimeoutException exception)
+      {
+         throw new TimeoutException($"{exception.Message} Logs: {session.ReadLogs()} Native tree: {session.DescribeDocumentStatus()}", exception);
+      }
+   }
+
+
+
+   /// <summary>Reads the native text provider's actual selected range, rather than a mirrored application property.</summary>
+   private static string ReadSourceSelection(AutomationElement source)
+      => string.Concat(source.Patterns.Text.Pattern.GetSelection().Select(range => range.GetText(-1)));
+
+
+   /// <summary>The native depth choice filters exact headings and a real divider drag saves its new width.</summary>
+   [Fact]
+   public void Outline_DepthAndResize_PersistsNativeChoices()
+   {
+      using var session = new AppSession(document: "# Root outline\n\n## Child outline\n\n#### Deep outline");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Root outline")), "the document heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.WaitForElement("OutlineHeading:1");
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("OutlineHeading:2")));
+      session.WaitForElement("OutlineDepth").AsComboBox().Select(0);
+      session.WaitForElementGone("OutlineHeading:1");
+      session.WaitForElement("OutlineDepth").AsComboBox().Select(3);
+      session.WaitForElement("OutlineHeading:2");
+      session.WaitForElement("OutlineDepth").Patterns.ExpandCollapse.Pattern.Collapse();
+      AutomationElement divider = session.WaitForElement("OutlineDivider");
+      session.MainWindow.SetForeground();
+      Assert.True(divider.TryGetClickablePoint(out System.Drawing.Point start));
+      Assert.Equal(session.App.ProcessId, session.Automation.FromPoint(start).Properties.ProcessId.ValueOrDefault);
+      Assert.Equal("OutlineDivider", session.Automation.FromPoint(start).Properties.AutomationId.ValueOrDefault);
+      NativeMouse.MoveTo(start);
+      FlaUI.Core.Input.Wait.UntilInputIsProcessed();
+      FlaUI.Core.Input.Mouse.Down(FlaUI.Core.Input.MouseButton.Left);
+      FlaUI.Core.Input.Wait.UntilInputIsProcessed();
+      NativeMouse.MoveTo(new System.Drawing.Point(start.X + 70, start.Y));
+      FlaUI.Core.Input.Wait.UntilInputIsProcessed();
+      FlaUI.Core.Input.Mouse.Up(FlaUI.Core.Input.MouseButton.Left);
+      FlaUI.Core.Input.Wait.UntilInputIsProcessed();
+      try
+      {
+         session.WaitFor(
+            () =>
+            {
+               using var settings = JsonDocument.Parse(session.ReadSettings());
+               return settings.RootElement.GetProperty("OutlineWidth").GetDouble() > 240 ? session.MainWindow : null;
+            },
+            "the resized outline width to be saved");
+      }
+      catch(TimeoutException exception)
+      {
+         throw new TimeoutException($"{exception.Message} Divider: {divider.BoundingRectangle}; pointer: {FlaUI.Core.Input.Mouse.Position}; logs: {session.ReadLogs()}; settings: {session.ReadSettings()}; tree: {session.DescribeDocumentStatus()}", exception);
+      }
+      using var saved = JsonDocument.Parse(session.ReadSettings());
+      Assert.True(saved.RootElement.GetProperty("ShowOutline").GetBoolean());
+      Assert.Equal(4, saved.RootElement.GetProperty("OutlineDepth").GetInt32());
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.WaitForElementGone("OutlineHeading:0");
+      _output.WriteLine(session.DescribeDocumentStatus());
+   }
+
+
+
+   /// <summary>Native menu/toolbar and physical Ctrl shortcuts scale actual reader glyphs and survive document reload.</summary>
+   [Fact]
+   public void Zoom_MenuToolbarKeysAndReload_ScalesActualHeadingGlyphs()
+   {
+      const string Title = "Reading zoom fixture";
+      using var session = new AppSession(document: "# " + Title + "\n\nZoom body with `inline code`.\n\n## Zoom child\nMore body");
+      AutomationElement heading = session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-0")), "the actual zoom fixture heading", TimeSpan.FromSeconds(30));
+      double original = heading.BoundingRectangle.Height;
+      Assert.True(original > 0);
+      session.InvokeMenuItem("View", "ZoomInMenu");
+      WaitForZoomGlyph(session, original * 1.1);
+      session.ClickElement("ZoomOutButton");
+      WaitForZoomGlyph(session, original);
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.OEM_PLUS);
+      WaitForZoomGlyph(session, original * 1.1);
+      session.InvokeMenuItem("File", "ReloadMenuItem");
+      WaitForZoomGlyph(session, original * 1.1);
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.OEM_MINUS);
+      WaitForZoomGlyph(session, original);
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.SHIFT, VirtualKeyShort.OEM_PLUS);
+      WaitForZoomGlyph(session, original * 1.1);
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_0);
+      WaitForZoomGlyph(session, original);
+      session.ClickElement("ZoomInButton");
+      WaitForZoomGlyph(session, original * 1.1);
+      session.ClickElement("ZoomResetButton");
+      WaitForZoomGlyph(session, original);
+      Assert.NotNull(session.FindInApp(cf => cf.ByName(Title)));
+      _output.WriteLine(session.DescribeDocumentStatus());
+   }
+
+
+
+   /// <summary>Accepts only actual browser glyph height after the matching native zoom controls are ready.</summary>
+   private static void WaitForZoomGlyph(AppSession session, double expectedHeight)
+   {
+      try
+      {
+         session.WaitFor(() =>
+         {
+            AutomationElement? heading = session.FindInApp(cf => cf.ByAutomationId("mv-heading-0"));
+            return heading is not null && Math.Abs(heading.BoundingRectangle.Height - expectedHeight) <= 1 && session.WaitForElement("ZoomResetButton").IsEnabled ? heading : null;
+         }, "the actual rendered heading glyph at the requested zoom");
+      }
+      catch(TimeoutException exception)
+      {
+         AutomationElement? heading = session.FindInApp(cf => cf.ByAutomationId("mv-heading-0"));
+         AutomationElement? reset = session.FindInApp(cf => cf.ByAutomationId("ZoomResetButton"));
+         throw new TimeoutException(FormattableString.Invariant($"{exception.Message} Expected height={expectedHeight}; actual heading={heading?.BoundingRectangle}; reset={reset?.Name}; enabled={reset?.IsEnabled}. Logs: {session.ReadLogs()}. Native tree: {session.DescribeDocumentStatus()}"), exception);
+      }
+   }
+
+
+
+   /// <summary>Physical vim keys move the actual browser by lines, half-pages and document ends.</summary>
+   [Fact]
+   public void ReadingKeys_ScrollCommands_MoveActualBrowserViewport()
+   {
+      string body = string.Join("\n\n", Enumerable.Range(0, 180).Select(index => "Vim scrolling paragraph " + index));
+      using var session = new AppSession(document: "# Vim scroll fixture\n\n" + body);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Vim scroll fixture")), "the vim heading", TimeSpan.FromSeconds(30));
+      AutomationElement scroller = FindDocumentScroller(session);
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.KEY_J);
+      WaitForReaderScroll(session, scroller, value => value > 0.001, "j scrolling one line");
+      SendReadingKey(VirtualKeyShort.KEY_K);
+      WaitForReaderScroll(session, scroller, value => value < 0.01, "k returning one line");
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_D);
+      WaitForReaderScroll(session, scroller, value => value > 0.1, "Ctrl+D scrolling half a viewport");
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_U);
+      WaitForReaderScroll(session, scroller, value => value < 0.01, "Ctrl+U returning half a viewport");
+      SendReadingKey(VirtualKeyShort.SHIFT, VirtualKeyShort.KEY_G);
+      WaitForReaderScroll(session, scroller, value => value > 99, "G reaching the document end");
+      SendReadingKey(VirtualKeyShort.CONTROL, VirtualKeyShort.KEY_B);
+      WaitForReaderScroll(session, scroller, value => value < 99, "Ctrl+B returning a viewport");
+      Keyboard.Type(VirtualKeyShort.KEY_G, VirtualKeyShort.KEY_G);
+      Wait.UntilInputIsProcessed();
+      WaitForReaderScroll(session, scroller, value => value < 0.01, "gg returning to the document start");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Vim scroll fixture")));
+   }
+
+
+
+   /// <summary>Slash opens native find; n/N wrap matches while real typing remains in the query control.</summary>
+   [Fact]
+   public void ReadingKeys_FindAndTextFocus_PreserveLiteralInput()
+   {
+      string body = string.Join("\n\n", Enumerable.Range(0, 100).Select(index => "Vim find filler " + index));
+      using var session = new AppSession(document: "# Vim find fixture\n\nFirst needle\n\n" + body + "\n\nLast needle");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Vim find fixture")), "the vim find heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "SourceToggle");
+      AutomationElement scroller = FindDocumentScroller(session);
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.OEM_2);
+      session.WaitForElement("FindText");
+      session.EnterText("FindText", "needle");
+      WaitForFindCount(session, "1 of 2");
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.KEY_N);
+      WaitForFindCount(session, "2 of 2");
+      WaitForReaderScroll(session, scroller, value => value > 80, "n moving to the final native match");
+      SendReadingKey(VirtualKeyShort.SHIFT, VirtualKeyShort.KEY_N);
+      WaitForFindCount(session, "1 of 2");
+      WaitForReaderScroll(session, scroller, value => value < 10, "N moving to the first native match");
+      SendReadingKey(VirtualKeyShort.OEM_2);
+      AutomationElement query = session.WaitForElement("FindText");
+      query.Focus();
+      SendReadingKey(VirtualKeyShort.KEY_J);
+      SendReadingKey(VirtualKeyShort.KEY_K);
+      SendReadingKey(VirtualKeyShort.KEY_G);
+      Assert.Equal("jkg", query.AsTextBox().Text);
+      WaitForFindCount(session, "0 of 0");
+      Assert.True(scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value < 10);
+      FocusBrowser(session);
+      SendReadingKey(VirtualKeyShort.ESCAPE);
+      session.WaitForElementGone("FindText");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Vim find fixture")));
+   }
+
+
+
+   /// <summary>Heading sequences move between actual visible headings and skip a collapsed nested descendant.</summary>
+   [Fact]
+   public void ReadingKeys_HeadingSequences_SkipCollapsedDescendant()
+   {
+      string body = string.Join("\n\n", Enumerable.Range(0, 60).Select(index => "Vim heading filler " + index));
+      using var session = new AppSession(document: "# Vim root\n\n" + body + "\n\n## Vim middle\n\nMiddle body\n\n### Hidden vim child\n\n" + body + "\n\n## Vim end\n\n" + body);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Vim root")), "the vim root heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-2")), "the collapsed nested vim heading");
+      AutomationElement scroller = FindDocumentScroller(session);
+      FocusBrowser(session);
+      Keyboard.Type(VirtualKeyShort.KEY_G, VirtualKeyShort.KEY_G);
+      Wait.UntilInputIsProcessed();
+      WaitForReaderScroll(session, scroller, value => value < 0.01, "gg starting visible-heading navigation");
+      Keyboard.Type(VirtualKeyShort.OEM_6, VirtualKeyShort.OEM_6);
+      Wait.UntilInputIsProcessed();
+      WaitForReaderScroll(session, scroller, value => value > 0.001, "the first visible heading");
+      Keyboard.Type(VirtualKeyShort.OEM_6, VirtualKeyShort.OEM_6);
+      Wait.UntilInputIsProcessed();
+      WaitForReaderScroll(session, scroller, value => value > 20, "the middle visible heading");
+      double middle = scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value;
+      Keyboard.Type(VirtualKeyShort.OEM_6, VirtualKeyShort.OEM_6);
+      Wait.UntilInputIsProcessed();
+      WaitForReaderScroll(session, scroller, value => value > middle + 0.01, "the final heading after skipping its hidden predecessor");
+      Assert.Null(session.FindInApp(cf => cf.ByAutomationId("mv-heading-2")));
+      AutomationElement finalHeading = session.WaitForElement("mv-heading-3");
+      double viewportTop = session.WaitForElement("DocumentView").BoundingRectangle.Top;
+      // The pinned document stylesheet retains its 1rem (16px) heading scroll inset.
+      Assert.InRange(finalHeading.BoundingRectangle.Top - viewportTop, 14, 18);
+      Keyboard.Type(VirtualKeyShort.OEM_4, VirtualKeyShort.OEM_4);
+      Wait.UntilInputIsProcessed();
+      WaitForReaderScroll(session, scroller, value => Math.Abs(value - middle) < 0.1, "the previous visible middle heading");
+   }
+
+
+
+   /// <summary>A real click establishes WinUI reading focus; UIA SetFocus alone left the logical focus empty or on an outline button.</summary>
+   private static void FocusBrowser(AppSession session)
+   {
+      session.MainWindow.SetForeground();
+      AutomationElement browser = session.WaitForElement("DocumentView");
+      System.Drawing.Rectangle bounds = browser.BoundingRectangle;
+      var point = new System.Drawing.Point(bounds.Left + bounds.Width / 2, bounds.Top + bounds.Height / 2);
+      Assert.True(bounds.Contains(point) && session.MainWindow.BoundingRectangle.Contains(point));
+      NativeMouse.MoveTo(point);
+      Wait.UntilInputIsProcessed();
+      AutomationElement hit = session.Automation.FromPoint(point);
+      Assert.True(hit.Equals(browser) || browser.FindAllDescendants().Any(element => element.Equals(hit)), "Reading focus must begin with a physical click inside the owned browser provider.");
+      Mouse.Down(MouseButton.Left);
+      Wait.UntilInputIsProcessed();
+      Mouse.Up(MouseButton.Left);
+      Wait.UntilInputIsProcessed();
+   }
+
+
+
+   /// <summary>Uses actual Windows keydown/up messages, including simultaneous modifiers.</summary>
+   private static void SendReadingKey(params VirtualKeyShort[] keys)
+   {
+      Keyboard.TypeSimultaneously(keys);
+      Wait.UntilInputIsProcessed();
+   }
+
+
+
+   /// <summary>Retains the owned fixture's focus/provider/viewport evidence when a physical reading key fails.</summary>
+   private void WaitForReaderScroll(AppSession session, AutomationElement scroller, Func<double, bool> matches, string description)
+   {
+      try
+      {
+         session.WaitFor(() => matches(scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value) ? scroller : null, description);
+      }
+      catch(TimeoutException)
+      {
+         AutomationElement focused = session.Automation.FocusedElement();
+         _output.WriteLine($"Reading focus Id={focused.Properties.AutomationId.ValueOrDefault}; Type={focused.Properties.ControlType.ValueOrDefault}; PID={focused.Properties.ProcessId.ValueOrDefault}; viewport={scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value}.");
+         _output.WriteLine(session.ReadLogs());
+         _output.WriteLine(session.DescribeDocumentStatus());
+         throw;
+      }
+   }
+
+
+   /// <summary>A physical local-fragment click reveals a hidden generated heading without loading another page.</summary>
+   [Fact]
+   public void Outline_LocalFragmentClick_RevealsCollapsedTarget()
+   {
+      using var session = new AppSession(document: "[Jump to target](#target-heading)\n\n# Fragment root\n\nRoot body\n\n## Target heading\n\nTarget body");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Fragment root")), "the root heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.ClickElement("OutlineHeading:0");
+      session.ClickElement("ToggleSection");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-1").And(cf.ByName("Target heading"))), "the heading inside its collapsed ancestor");
+      AutomationElement link = session.WaitFor(() => session.MainWindow.FindFirstDescendant(cf => cf.ByControlType(FlaUI.Core.Definitions.ControlType.Hyperlink).And(cf.ByName("Jump to target"))), "the local fragment link");
+      ClickDocumentLink(session, link);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-1").And(cf.ByName("Target heading"))), "the fragment's revealed target heading");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Target body")), "the revealed target body");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Fragment root")));
+      session.ClickElement("ToggleSection");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-1")), "the target collapsed a second time");
+      ClickDocumentLink(session, link);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("mv-heading-1").And(cf.ByName("Target heading"))), "the same fragment's revealed target after recollapse");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Target body")), "the target body revealed by the repeated link click");
+   }
+
+
+   /// <summary>Clicks the exact link bounds through its owned composed provider, retaining physical input checks.</summary>
+   private void ClickDocumentLink(AppSession session, AutomationElement link)
+   {
+      session.MainWindow.SetForeground();
+      Assert.True(link.TryGetClickablePoint(out System.Drawing.Point point));
+      Assert.True(session.MainWindow.BoundingRectangle.Contains(point));
+      NativeMouse.MoveTo(point);
+      FlaUI.Core.Input.Wait.UntilInputIsProcessed();
+      AutomationElement hit = session.Automation.FromPoint(point);
+      bool exactLink = hit.Equals(link) || hit.Parent.Equals(link);
+      bool browserHost = hit.Equals(session.WaitForElement("DocumentView"));
+      bool withinLink = link.BoundingRectangle.Contains(FlaUI.Core.Input.Mouse.Position);
+      if(!exactLink && !browserHost || !withinLink)
+      {
+         _output.WriteLine($"Fragment point={point}; mouse={FlaUI.Core.Input.Mouse.Position}; link={link.Properties.BoundingRectangle.ValueOrDefault}; hit Id={hit.Properties.AutomationId.ValueOrDefault}; Type={hit.Properties.ControlType.ValueOrDefault}; PID={hit.Properties.ProcessId.ValueOrDefault}; bounds={hit.Properties.BoundingRectangle.ValueOrDefault}; parent Type={hit.Parent.Properties.ControlType.ValueOrDefault}; bounds={hit.Parent.Properties.BoundingRectangle.ValueOrDefault}.");
+         _output.WriteLine(session.DescribeDocumentStatus());
+      }
+      Assert.True(withinLink, "The physical pointer must stay within the exact document link bounds.");
+      Assert.True(exactLink || browserHost, "The pointer must belong to the owned browser provider or the exact link/text child.");
+      FlaUI.Core.Input.Mouse.Down(FlaUI.Core.Input.MouseButton.Left);
+      FlaUI.Core.Input.Wait.UntilInputIsProcessed();
+      FlaUI.Core.Input.Mouse.Up(FlaUI.Core.Input.MouseButton.Left);
+      FlaUI.Core.Input.Wait.UntilInputIsProcessed();
+   }
+
+
+
+   /// <summary>A heading selection moves the actual browser viewport and all-section operations change displayed content.</summary>
+   [Fact]
+   public void Outline_HeadingJumpAndCollapse_UpdatesActualDocument()
+   {
+      string paragraphs = string.Join("\n\n", Enumerable.Range(0, 100).Select(index => "Long outline paragraph " + index));
+      using var session = new AppSession(document: "# Start outline\n\n" + paragraphs + "\n\n## Target outline\n\nTarget section content\n\n## Peer outline\n\nPeer section content");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Start outline")), "the initial heading", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.ClickElement("OutlineHeading:1");
+      session.WaitFor(
+         () =>
+         {
+            AutomationElement scroller = FindDocumentScroller(session);
+            return scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value > 70 ? scroller : null;
+         },
+         "the actual browser to jump to the target heading");
+      session.ClickElement("ToggleSection");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Target section content")), "the collapsed target body");
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Peer section content")));
+      session.ClickElement("ToggleSection");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Target section content")), "the expanded target body");
+      session.ClickElement("CollapseSections");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Peer section content")), "all collapsed section content");
+      session.ClickElement("ExpandSections");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Target section content")), "all expanded sections");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Peer section content")), "the expanded peer section");
+      _output.WriteLine(session.DescribeDocumentStatus());
+   }
+
+
+
+   /// <summary>Expanding a parent retains a collapsed child, and theme/reload retain the same hierarchy's collapse state.</summary>
+   [Fact]
+   public void Outline_NestedCollapse_RetainsStateAcrossThemeAndReload()
+   {
+      using var session = new AppSession(document: "# Parent outline\n\nParent body\n\n## Child outline\n\nHidden child body\n\n## Peer outline\n\nVisible peer body");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Parent body")), "the original body", TimeSpan.FromSeconds(30));
+      session.InvokeMenuItem("View", "OutlineToggle");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Hidden child body")), "the collapsed child");
+      session.ClickElement("OutlineHeading:0");
+      session.ClickElement("ToggleSection");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Visible peer body")), "the collapsed parent");
+      session.ClickElement("ToggleSection");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Visible peer body")), "the expanded parent");
+      _output.WriteLine(session.ReadLogs());
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Hidden child body")), "the retained collapsed child accessibility peer");
+      session.InvokeMenuItem("View", "DocumentThemesMenu");
+      session.ClickElement("DocumentTheme:GitHub Light");
+      WaitForDocumentColor(session, System.Drawing.Color.White);
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Hidden child body")), "the retained collapsed child accessibility peer");
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), "# Parent outline\n\nParent body\n\n## Child outline\n\nUpdated child body\n\n## Peer outline\n\nUpdated peer body");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Updated peer body")), "the new snapshot");
+      AppSession.WaitUntilGone(() => session.FindInApp(cf => cf.ByName("Updated child body")), "the retained collapsed reloaded child accessibility peer");
+      session.ClickElement("OutlineHeading:1");
+      session.ClickElement("ToggleSection");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Updated child body")), "the expanded reloaded child");
+   }
+
+
    /// <summary>Updates: a build that was not installed by Velopack says updates need an install.</summary>
    [Fact]
    public void CheckForUpdates_InALooseBuild_SaysUpdatesNeedAnInstall()
@@ -124,33 +1253,198 @@ public class AppTests
 
 
 
-   /// <summary>Example feature: greeting a name shows the greeting and saves the name.</summary>
+   /// <summary>The launched document appears in the actual browser accessibility tree.</summary>
    [Fact]
-   public void Greet_ShowsTheGreetingAndSavesTheName()
+   public void OpenDocument_GfmDocument_ShowsRenderedContent()
    {
-      using var session = new AppSession();
-      session.EnterText("NameBox", "Ada");
-      session.ClickElement("GreetButton");
-      string? observedGreeting = null;
+      using var session = new AppSession(document: "# Reader acceptance\n\n| Column | Value |\n| --- | --- |\n| One | Two |\n\n- [x] Finished\n\n<script>document.body.textContent='UNSAFE EXECUTION'</script>");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Reader acceptance")), "the rendered document heading", TimeSpan.FromSeconds(30));
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Two")), "the rendered table cell");
+      Assert.Null(session.FindInApp(cf => cf.ByName("UNSAFE EXECUTION")));
+      Assert.Contains("Opened a Markdown document.", session.ReadLogs(), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Reload uses the actual source file again instead of preserving an obsolete rendered snapshot.</summary>
+   [Fact]
+   public void Reload_ChangedDocument_ShowsNewContent()
+   {
+      using var session = new AppSession(document: "# Before reload");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Before reload")), "the initial heading", TimeSpan.FromSeconds(30));
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), "# After reload");
+      session.InvokeMenuItem("File", "ReloadMenuItem");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("After reload")), "the reloaded heading");
+      Assert.Null(session.FindInApp(cf => cf.ByName("Before reload")));
+   }
+
+   /// <summary>Saving through a replacement file updates the real browser without invoking Reload.</summary>
+   [Fact]
+   public void LiveReload_AtomicReplacement_ShowsNewContent()
+   {
+      using var session = new AppSession(document: "# Before automatic reload");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Before automatic reload")), "the initial heading", TimeSpan.FromSeconds(30));
+      string replacement = Path.Combine(session.DataDirectory, "replacement.tmp");
+      File.WriteAllText(replacement, "# After automatic reload");
+      File.Move(replacement, Path.Combine(session.DataDirectory, "document.md"), overwrite: true);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("After automatic reload")), "the automatically reloaded heading");
+      Assert.Contains("Reloaded a Markdown document.", session.ReadLogs(), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>A missing file preserves the displayed snapshot and recovers when the path reappears.</summary>
+   [Fact]
+   public void LiveReload_DeletedThenRecreated_PreservesAndRecovers()
+   {
+      using var session = new AppSession(document: "# Last readable version");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Last readable version")), "the initial heading", TimeSpan.FromSeconds(30));
       try
       {
-         session.WaitFor(
-            () =>
-            {
-               AutomationElement? text = session.FindInApp(cf => cf.ByAutomationId("GreetingText"));
-               observedGreeting = text?.Properties.Name.ValueOrDefault;
-               return observedGreeting?.EndsWith(", Ada!", StringComparison.Ordinal) == true ? text : null;
-            },
-            "the greeting");
+         session.WaitFor(() => session.FindInApp(cf => cf.ByAutomationId("StatusText").And(cf.ByName("Opened document.md"))), "the accessible initial document status");
       }
       catch(TimeoutException exception)
       {
-         throw new TimeoutException($"{exception.Message} Observed greeting: '{observedGreeting}'. App logs: {session.ReadLogs()}", exception);
+         throw new TimeoutException($"{exception.Message} Native tree: {session.DescribeDocumentStatus()}", exception);
       }
-      session.WaitFor(
-         () => session.ReadSettings().Contains("\"LastName\": \"Ada\"", StringComparison.Ordinal) ? session.MainWindow : null,
-         "settings.json to record the name");
+      string path = Path.Combine(session.DataDirectory, "document.md");
+      File.Delete(path);
+      try
+      {
+         session.WaitFor(
+            () => session.FindInApp(cf => cf.ByName("The document is missing. Showing the last version; it will reload when restored.")),
+            "the missing-file status");
+      }
+      catch(TimeoutException exception)
+      {
+         AutomationElement? status = session.FindInApp(cf => cf.ByAutomationId("StatusText"));
+         throw new TimeoutException($"{exception.Message} Observed status: '{status?.Properties.Name.ValueOrDefault}'. Logs: {session.ReadLogs()} Native tree: {session.DescribeDocumentStatus()}", exception);
+      }
+      Assert.NotNull(session.FindInApp(cf => cf.ByName("Last readable version")));
+      File.WriteAllText(path, "# Recovered document");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Recovered document")), "the recreated document heading");
    }
+
+
+
+   /// <summary>The application retries a brief exclusive editor lock instead of dropping its pending save.</summary>
+   [Fact]
+   public void LiveReload_EditorTemporarilyLocksFile_Retries()
+   {
+      using var session = new AppSession(document: "# Before editor lock");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Before editor lock")), "the initial heading", TimeSpan.FromSeconds(30));
+      using(var file = new FileStream(Path.Combine(session.DataDirectory, "document.md"), FileMode.Create, FileAccess.Write, FileShare.None))
+      {
+         using var writer = new StreamWriter(file);
+         writer.Write("# After editor lock");
+         writer.Flush();
+         Thread.Sleep(800);
+      }
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("After editor lock")), "the unlocked save");
+   }
+
+
+
+   /// <summary>A prolonged external save lock reports the stale view and offers Reload until another save succeeds.</summary>
+   [Fact]
+   public void LiveReload_LockedSave_ShowsStaleSnapshotAndRecovers()
+   {
+      using var session = new AppSession(document: "# Previous readable snapshot");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Previous readable snapshot")), "the original readable snapshot", TimeSpan.FromSeconds(30));
+      string path = Path.Combine(session.DataDirectory, "document.md");
+      using(var locked = new FileStream(path, FileMode.Open, FileAccess.ReadWrite, FileShare.None))
+      {
+         byte[] bytes = System.Text.Encoding.UTF8.GetBytes("# Locked external replacement");
+         locked.SetLength(0);
+         locked.Write(bytes);
+         locked.Flush(flushToDisk: true);
+         session.WaitFor(() => session.FindInApp(cf => cf.ByName("The document could not be reloaded. Showing the previous version; use File → Reload.")), "the visible stale-snapshot/manual-reload instruction");
+         Assert.NotNull(session.FindInApp(cf => cf.ByName("Previous readable snapshot")));
+         Assert.Null(session.FindInApp(cf => cf.ByName("Locked external replacement")));
+      }
+      File.WriteAllText(path, "# Recovered automatic snapshot");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Recovered automatic snapshot")), "automatic recovery after a later readable save");
+      Assert.Null(session.FindInApp(cf => cf.ByName("Previous readable snapshot")));
+      Assert.Contains("Reloaded a Markdown document.", session.ReadLogs(), StringComparison.Ordinal);
+   }
+
+
+
+   /// <summary>Reload retains relative position when a save changes the document's total height.</summary>
+   [Fact]
+   public void LiveReload_HeightChanges_RetainsRelativeScroll()
+   {
+      string paragraphs = string.Join("\n\n", Enumerable.Range(0, 200).Select(index => $"Paragraph {index}: a document long enough to scroll."));
+      using var session = new AppSession(document: "# Scroll before\n\n" + paragraphs);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Scroll before")), "the initial heading", TimeSpan.FromSeconds(30));
+      AutomationElement scroller = FindDocumentScroller(session);
+      scroller.Patterns.Scroll.Pattern.SetScrollPercent(-1, 80);
+      session.WaitFor(
+         () => scroller.Patterns.Scroll.Pattern.VerticalScrollPercent.Value > 75 ? scroller : null,
+         "the document to scroll");
+      File.WriteAllText(Path.Combine(session.DataDirectory, "document.md"), "# Scroll after\n\n" + paragraphs + "\n\n" + paragraphs);
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Scroll after")), "the reloaded heading");
+      session.WaitFor(
+         () =>
+         {
+            AutomationElement updated = FindDocumentScroller(session);
+            return updated.Patterns.Scroll.Pattern.VerticalScrollPercent.Value > 75 ? updated : null;
+         },
+         "relative scroll restoration");
+   }
+
+
+
+   /// <summary>Remote image markup cannot connect to a listening server even when the parser retains its URL.</summary>
+   [Fact]
+   public void OpenDocument_RemoteImage_DoesNotConnect()
+   {
+      using var listener = new TcpListener(IPAddress.Loopback, 0);
+      listener.Start();
+      int port = ((IPEndPoint)listener.LocalEndpoint).Port;
+      using var session = new AppSession(document: $"# Network boundary\n\n![remote image](http://127.0.0.1:{port}/remote.png)");
+      session.WaitFor(() => session.FindInApp(cf => cf.ByName("Network boundary")), "the rendered document heading", TimeSpan.FromSeconds(30));
+      Thread.Sleep(1500);
+      Assert.False(listener.Pending(), "The document attempted to fetch its remote image.");
+   }
+
+
+
+   /// <summary>Samples the actual owned browser reading gutter, excluding glyphs, find marks and native dividers.</summary>
+   private static void WaitForDocumentColor(AppSession session, System.Drawing.Color expected)
+   {
+      session.WaitFor(
+         () =>
+         {
+            AutomationElement view = session.WaitForElement("DocumentView");
+            using System.Drawing.Bitmap image = view.Capture();
+            return image.GetPixel(Math.Min(8, image.Width - 1), Math.Min(8, image.Height - 1)).ToArgb() == expected.ToArgb() ? view : null;
+         },
+         "the rendered document background " + expected);
+   }
+
+
+   /// <summary>Finds the browser's actual scroll provider, which is separate from the native window.</summary>
+   private static AutomationElement FindDocumentScroller(AppSession session)
+   {
+      AutomationElement browser = session.WaitForElement("DocumentView");
+      try
+      {
+         return session.WaitFor(
+            () => browser.FindAllDescendants().Prepend(browser).FirstOrDefault(element =>
+               element.Patterns.Scroll.TryGetPattern(out IScrollPattern? scroll) && scroll.VerticallyScrollable.Value),
+            "the owned browser scroll provider");
+      }
+      catch(TimeoutException exception)
+      {
+         string providers = string.Join(Environment.NewLine, browser.FindAllDescendants().Prepend(browser).Take(40).Select(element =>
+            "Id=" + element.Properties.AutomationId.ValueOrDefault + "; Type=" + element.Properties.ControlType.ValueOrDefault +
+            "; Scroll=" + element.Patterns.Scroll.IsSupported + "; Bounds=" + element.BoundingRectangle));
+         throw new TimeoutException(exception.Message + "; Browser providers: " + providers + "; Native tree: " + session.DescribeDocumentStatus(), exception);
+      }
+   }
+
+
 }
 
 
diff --git a/tests/MarkdownViewr.Windows.UiTests/DocumentFilesTests.cs b/tests/MarkdownViewr.Windows.UiTests/DocumentFilesTests.cs
new file mode 100644
index 0000000..f5a0eb1
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/DocumentFilesTests.cs
@@ -0,0 +1,211 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Diagnostics;
+using System.Text;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Exercises bounded snapshots and physical resource containment without launching the GUI.</summary>
+public sealed class DocumentFilesTests : IDisposable
+{
+   private readonly string _root = Path.Combine(Path.GetTempPath(), "markdownviewr-files-" + Guid.NewGuid().ToString("N"));
+
+
+
+   /// <summary>Creates a private document folder and a sibling outside the resource boundary.</summary>
+   public DocumentFilesTests()
+   {
+      Directory.CreateDirectory(Path.Combine(_root, "document"));
+      Directory.CreateDirectory(Path.Combine(_root, "outside"));
+   }
+
+
+
+   /// <summary>Timestamp and byte length belong to the loaded handle, and remain unchanged when the file is replaced later.</summary>
+   [Fact]
+   public void Open_ModifiedDocument_RetainsLoadedSnapshotMetadata()
+   {
+      string path = Path.Combine(_root, "document", "timestamp.md");
+      File.WriteAllText(path, "# Original", Encoding.UTF8);
+      DateTime timestamp = new(2026, 1, 2, 3, 4, 6, DateTimeKind.Utc);
+      File.SetLastWriteTimeUtc(path, timestamp);
+      var before = new FileInfo(path);
+      var snapshot = DocumentFiles.Open(path);
+      Assert.Equal(before.LastWriteTimeUtc, snapshot.ModifiedUtc);
+      Assert.Equal(before.Length, snapshot.ByteLength);
+      File.WriteAllText(path, "# A different longer snapshot", Encoding.UTF8);
+      File.SetLastWriteTimeUtc(path, timestamp.AddMinutes(2));
+      var current = DocumentFiles.Open(path);
+      Assert.Equal("# Original", snapshot.Markdown);
+      Assert.Equal(timestamp, snapshot.ModifiedUtc);
+      Assert.NotEqual(snapshot.ModifiedUtc, current.ModifiedUtc);
+      Assert.NotEqual(snapshot.ByteLength, current.ByteLength);
+   }
+
+
+
+   /// <summary>File loading honors the BOM and reads the selected document snapshot.</summary>
+   [Fact]
+   public void Open_UnicodeDocument_ReadsTheSnapshot()
+   {
+      string path = Path.Combine(_root, "document", "read me.md");
+      File.WriteAllText(path, "# Café", Encoding.Unicode);
+      var files = DocumentFiles.Open(path);
+      Assert.Equal("# Café", files.Markdown);
+   }
+
+
+
+   /// <summary>A loaded snapshot does not keep the source file open or hide its subsequent deletion.</summary>
+   [Fact]
+   public void Open_DeletedSource_ThrowsFileNotFound()
+   {
+      string path = Path.Combine(_root, "document", "read.md");
+      File.WriteAllText(path, "# Snapshot");
+      var files = DocumentFiles.Open(path);
+      File.Delete(path);
+      Assert.Equal("# Snapshot", files.Markdown);
+      Assert.Throws<FileNotFoundException>(() => DocumentFiles.Open(path));
+   }
+
+
+
+   /// <summary>A linked document is read from the checked handle, and its inherited folder scope still applies to later reads.</summary>
+   [Fact]
+   public void Open_LinkedDocumentScope_RetainsInsideReadsAndRejectsOutside()
+   {
+      DocumentFiles source = CreateDocument();
+      string child = source.ResolveDocumentLink("child.md");
+      File.WriteAllText(child, "# Child snapshot");
+      Assert.Equal("# Child snapshot", DocumentFiles.Open(child, source.PhysicalRoot).Markdown);
+      File.WriteAllText(child, "# Child replacement");
+      Assert.Equal("# Child replacement", DocumentFiles.Open(child, source.PhysicalRoot).Markdown);
+      string outside = Path.Combine(_root, "outside", "private.md");
+      File.WriteAllText(outside, "# Outside content must not be read");
+      Assert.Throws<IOException>(() => DocumentFiles.Open(outside, source.PhysicalRoot));
+   }
+
+
+
+   /// <summary>A document link cannot use a directory junction to bypass its parent reader's physical folder grant.</summary>
+   [Fact]
+   public void Open_LinkedDocumentJunction_RejectsBeforeReading()
+   {
+      DocumentFiles source = CreateDocument();
+      string link = Path.Combine(_root, "document", "linked");
+      File.WriteAllText(Path.Combine(_root, "outside", "private.md"), "# Outside content must not be read");
+      var start = new ProcessStartInfo("cmd.exe") { UseShellExecute = false, CreateNoWindow = true };
+      start.ArgumentList.Add("/c");
+      start.ArgumentList.Add("mklink");
+      start.ArgumentList.Add("/J");
+      start.ArgumentList.Add(link);
+      start.ArgumentList.Add(Path.Combine(_root, "outside"));
+      using Process process = Process.Start(start)!;
+      Assert.True(process.WaitForExit(10000), "Junction creation did not finish.");
+      Assert.Equal(0, process.ExitCode);
+      try
+      {
+         Assert.Throws<IOException>(() => DocumentFiles.Open(source.ResolveDocumentLink("linked/private.md"), source.PhysicalRoot));
+      }
+      finally
+      {
+         Directory.Delete(link);
+      }
+   }
+
+
+
+   /// <summary>Ordinary relative images inside the selected folder retain their exact bytes.</summary>
+   [Fact]
+   public void ReadImage_InsideDocumentFolder_ReturnsExactBytes()
+   {
+      DocumentFiles files = CreateDocument();
+      byte[] expected = [1, 2, 3, 4];
+      File.WriteAllBytes(Path.Combine(_root, "document", "image.png"), expected);
+      Assert.Equal(expected, files.ReadImage("image.png"));
+   }
+
+
+
+   /// <summary>Physical containment also rejects traversal if a caller bypasses the earlier URI policy.</summary>
+   [Fact]
+   public void ReadImage_OutsideDocumentFolder_ThrowsBeforeReading()
+   {
+      DocumentFiles files = CreateDocument();
+      File.WriteAllBytes(Path.Combine(_root, "outside", "secret.png"), [1, 2, 3]);
+      Assert.Throws<IOException>(() => files.ReadImage(Path.Combine("..", "outside", "secret.png")));
+   }
+
+
+
+   /// <summary>An allowed-looking image path cannot use a directory junction to escape the document root.</summary>
+   [Fact]
+   public void ReadImage_JunctionOutsideDocumentFolder_ThrowsBeforeReading()
+   {
+      DocumentFiles files = CreateDocument();
+      string link = Path.Combine(_root, "document", "images");
+      File.WriteAllBytes(Path.Combine(_root, "outside", "secret.png"), [1, 2, 3]);
+      var start = new ProcessStartInfo("cmd.exe") { UseShellExecute = false, CreateNoWindow = true };
+      start.ArgumentList.Add("/c");
+      start.ArgumentList.Add("mklink");
+      start.ArgumentList.Add("/J");
+      start.ArgumentList.Add(link);
+      start.ArgumentList.Add(Path.Combine(_root, "outside"));
+      using Process process = Process.Start(start)!;
+      Assert.True(process.WaitForExit(10000), "Junction creation did not finish.");
+      Assert.Equal(0, process.ExitCode);
+      try
+      {
+         Assert.Throws<IOException>(() => files.ReadImage(Path.Combine("images", "secret.png")));
+      }
+      finally
+      {
+         Directory.Delete(link);
+      }
+   }
+
+
+
+   /// <summary>A document above the parser's bound is rejected before parsing.</summary>
+   [Fact]
+   public void Open_OverCharacterLimit_Throws()
+   {
+      string path = Path.Combine(_root, "document", "large.md");
+      File.WriteAllText(path, new string('x', Core.Documents.MarkdownRenderer.MaximumCharacters + 1));
+      Assert.Throws<IOException>(() => DocumentFiles.Open(path));
+   }
+
+
+
+   /// <summary>Oversized images do not allocate an unbounded browser response.</summary>
+   [Fact]
+   public void ReadImage_OverByteLimit_Throws()
+   {
+      DocumentFiles files = CreateDocument();
+      string path = Path.Combine(_root, "document", "large.png");
+      using(var stream = new FileStream(path, FileMode.CreateNew))
+      {
+         stream.SetLength(16 * 1024 * 1024 + 1);
+      }
+      Assert.Throws<IOException>(() => files.ReadImage("large.png"));
+   }
+
+
+
+   /// <summary>Creates the source file and returns its established physical resource capability.</summary>
+   private DocumentFiles CreateDocument()
+   {
+      string path = Path.Combine(_root, "document", "read.md");
+      File.WriteAllText(path, "# Document");
+      return DocumentFiles.Open(path);
+   }
+
+
+
+   /// <summary>Deletes only the unique temporary folder owned by this test instance.</summary>
+   public void Dispose() => Directory.Delete(_root, recursive: true);
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/DocumentWatcherTests.cs b/tests/MarkdownViewr.Windows.UiTests/DocumentWatcherTests.cs
new file mode 100644
index 0000000..d3f7e22
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/DocumentWatcherTests.cs
@@ -0,0 +1,137 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Threading.Channels;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Checks the real directory subscription without reserving or launching a desktop window.</summary>
+public sealed class DocumentWatcherTests : IDisposable
+{
+   private readonly string _root = Path.Combine(Path.GetTempPath(), "markdownviewr-watcher-" + Guid.NewGuid().ToString("N"));
+   private readonly Channel<byte> _events = Channel.CreateUnbounded<byte>();
+
+
+
+   /// <summary>Creates a unique filesystem fixture for each watcher scenario.</summary>
+   public DocumentWatcherTests()
+   {
+      Directory.CreateDirectory(_root);
+      File.WriteAllText(DocumentPath, "# Before");
+   }
+
+
+
+   /// <summary>The selected path whose replacement must remain observable.</summary>
+   private string DocumentPath => Path.Combine(_root, "document.md");
+
+
+
+   /// <summary>Regular save notifications reach the selected document subscription.</summary>
+   [Fact]
+   public async Task Watch_OrdinarySave_Notifies()
+   {
+      using DocumentWatcher watcher = CreateWatcher();
+      File.WriteAllText(DocumentPath, "# After");
+      await NextEventAsync();
+      Assert.Equal("# After", File.ReadAllText(DocumentPath));
+   }
+
+
+
+   /// <summary>Write-then-rename saves replace the file without losing the subscription.</summary>
+   [Fact]
+   public async Task Watch_AtomicReplacement_ContinuesNotifying()
+   {
+      using DocumentWatcher watcher = CreateWatcher();
+      string replacement = Path.Combine(_root, "replacement.tmp");
+      File.WriteAllText(replacement, "# Replaced");
+      File.Move(replacement, DocumentPath, overwrite: true);
+      await NextEventAsync();
+      Assert.Equal("# Replaced", File.ReadAllText(DocumentPath));
+      File.WriteAllText(DocumentPath, "# Next save");
+      await NextEventAsync();
+      Assert.Equal("# Next save", File.ReadAllText(DocumentPath));
+   }
+
+
+
+   /// <summary>Watching the directory permits recovery when the selected file is deleted and recreated.</summary>
+   [Fact]
+   public async Task Watch_DeletionAndRecreation_NotifiesBoth()
+   {
+      using DocumentWatcher watcher = CreateWatcher();
+      File.Delete(DocumentPath);
+      await NextEventAsync();
+      Assert.False(File.Exists(DocumentPath));
+      File.WriteAllText(DocumentPath, "# Restored");
+      await NextEventAsync();
+      Assert.Equal("# Restored", File.ReadAllText(DocumentPath));
+   }
+
+
+
+   /// <summary>Moving the original file away and renaming another file into its place are both observed.</summary>
+   [Fact]
+   public async Task Watch_RenameAwayAndBack_NotifiesBoth()
+   {
+      using DocumentWatcher watcher = CreateWatcher();
+      string backup = Path.Combine(_root, "backup.md");
+      File.Move(DocumentPath, backup);
+      await NextEventAsync();
+      File.Move(backup, DocumentPath);
+      await NextEventAsync();
+      Assert.True(File.Exists(DocumentPath));
+   }
+
+
+
+   /// <summary>Unrelated files do not make the selected document reload.</summary>
+   [Fact]
+   public async Task Watch_UnrelatedFile_DoesNotNotify()
+   {
+      using DocumentWatcher watcher = CreateWatcher();
+      File.WriteAllText(Path.Combine(_root, "other.md"), "# Other");
+      await Task.Delay(750);
+      Assert.False(_events.Reader.TryRead(out _));
+      File.WriteAllText(DocumentPath, "# Selected");
+      await NextEventAsync();
+   }
+
+
+
+   /// <summary>Disposal cancels pending debounce work and further directory events.</summary>
+   [Fact]
+   public async Task Dispose_PendingSave_DoesNotNotify()
+   {
+      DocumentWatcher watcher = CreateWatcher();
+      File.WriteAllText(DocumentPath, "# Changed");
+      watcher.Dispose();
+      await Task.Delay(750);
+      Assert.False(_events.Reader.TryRead(out _));
+   }
+
+
+
+   /// <summary>Callbacks use a private event channel and never touch GUI input.</summary>
+   private DocumentWatcher CreateWatcher()
+   {
+      return new DocumentWatcher(DocumentPath, () => _events.Writer.TryWrite(0), () => _events.Writer.TryComplete(new IOException("Watcher error.")));
+   }
+
+
+
+   /// <summary>Waits for the authoritative event, with a bounded failure deadline.</summary>
+   private async Task NextEventAsync()
+   {
+      await _events.Reader.ReadAsync().AsTask().WaitAsync(TimeSpan.FromSeconds(10));
+   }
+
+
+
+   /// <summary>Deletes only this fixture's unique explicitly created temporary root.</summary>
+   public void Dispose() => Directory.Delete(_root, recursive: true);
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/FileTypeRegistrationTests.cs b/tests/MarkdownViewr.Windows.UiTests/FileTypeRegistrationTests.cs
new file mode 100644
index 0000000..42df9f6
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/FileTypeRegistrationTests.cs
@@ -0,0 +1,184 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.Win32;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Real isolated registry readbacks verify quoting, default preservation, update ownership and channel-safe uninstall.</summary>
+public sealed class FileTypeRegistrationTests
+{
+   /// <summary>Each channel is discoverable and removing stable leaves dev, other viewers and the user's chosen defaults unchanged.</summary>
+   [Fact]
+   public void Register_ChannelsAndUninstall_PreservesDefaultAndSibling()
+   {
+      using var fixture = new RegistryFixture();
+      using RegistryKey extension = fixture.Root.CreateSubKey("Software\\Classes\\.md");
+      extension.SetValue("", "Other.Markdown");
+      using RegistryKey other = extension.CreateSubKey("OpenWithProgids");
+      other.SetValue("Other.Markdown", "");
+      using RegistryKey choice = fixture.Root.CreateSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.md\\UserChoice");
+      choice.SetValue("ProgId", "Other.Markdown");
+      choice.SetValue("Hash", "unchanged-user-hash");
+      string exe = Path.Combine(Path.GetTempPath(), "viewer spaces & café", "current", "MarkdownViewr.Windows.exe");
+      var stable = new FileTypeRegistration(fixture.Root, exe, "stable");
+      var dev = new FileTypeRegistration(fixture.Root, exe, "dev");
+      Assert.NotEqual(stable.ProgId, dev.ProgId, StringComparer.Ordinal);
+      stable.Register();
+      dev.Register();
+      AssertRegistered(fixture.Root, stable.ProgId, exe);
+      AssertRegistered(fixture.Root, dev.ProgId, exe);
+      stable.Register();
+      stable.Unregister();
+      stable.Unregister();
+      Assert.Null(fixture.Root.OpenSubKey("Software\\Classes\\" + stable.ProgId));
+      AssertRegistered(fixture.Root, dev.ProgId, exe);
+      Assert.Equal("Other.Markdown", extension.GetValue(""));
+      Assert.Equal("Other.Markdown", choice.GetValue("ProgId"));
+      Assert.Equal("unchanged-user-hash", choice.GetValue("Hash"));
+      Assert.Contains(dev.ProgId, other.GetValueNames(), StringComparer.Ordinal);
+      Assert.Contains("Other.Markdown", other.GetValueNames(), StringComparer.Ordinal);
+      Assert.DoesNotContain(stable.ProgId, other.GetValueNames(), StringComparer.Ordinal);
+      dev.Unregister();
+      Assert.Equal(new[] { "Other.Markdown" }, other.GetValueNames());
+   }
+
+
+
+   /// <summary>Advertising an installation is not choosing it; an unavailable query and a retargeted command cannot report a selected default.</summary>
+   [Fact]
+   public void DefaultMarkdownStatus_EffectiveSelection_RequiresExactRegisteredOwner()
+   {
+      using var fixture = new RegistryFixture();
+      var registration = new FileTypeRegistration(fixture.Root, Path.Combine(Path.GetTempPath(), "current", "MarkdownViewr.Windows.exe"), "stable");
+      Assert.False(registration.IsDefaultMarkdownViewer(registration.ProgId));
+      registration.Register();
+      Assert.False(registration.IsDefaultMarkdownViewer("Other.Markdown"));
+      Assert.False(registration.IsDefaultMarkdownViewer(""));
+      Assert.Null(registration.IsDefaultMarkdownViewer(null));
+      Assert.True(registration.IsDefaultMarkdownViewer(registration.ProgId));
+      Assert.True(registration.IsDefaultMarkdownViewer(registration.ProgId.ToLowerInvariant()));
+      var dev = new FileTypeRegistration(fixture.Root, Path.Combine(Path.GetTempPath(), "current", "MarkdownViewr.Windows.exe"), "dev");
+      dev.Register();
+      Assert.False(registration.IsDefaultMarkdownViewer(dev.ProgId));
+      using RegistryKey command = fixture.Root.OpenSubKey("Software\\Classes\\" + registration.ProgId + "\\shell\\open\\command", writable: true)!;
+      command.SetValue("", "another deliberately selected command");
+      Assert.False(registration.IsDefaultMarkdownViewer(registration.ProgId));
+   }
+
+
+
+   /// <summary>An external retarget of an owned ProgID is preserved rather than erased on uninstall.</summary>
+   [Fact]
+   public void Unregister_RetargetedCommand_LeavesRegistrationUntouched()
+   {
+      using var fixture = new RegistryFixture();
+      var registration = new FileTypeRegistration(fixture.Root, Path.Combine(Path.GetTempPath(), "current", "MarkdownViewr.Windows.exe"), "stable");
+      registration.Register();
+      using RegistryKey command = fixture.Root.OpenSubKey("Software\\Classes\\" + registration.ProgId + "\\shell\\open\\command", writable: true)!;
+      command.SetValue("", "another deliberately selected command");
+      registration.Unregister();
+      Assert.Equal("another deliberately selected command", command.GetValue(""));
+      using RegistryKey applications = fixture.Root.OpenSubKey("Software\\RegisteredApplications")!;
+      Assert.NotNull(applications.GetValue(registration.ProgId));
+   }
+
+
+
+   /// <summary>Paths or channel names cannot inject registry keys/command-line quoting; separate installations have separate ownership.</summary>
+   [Fact]
+   public void Registration_InvalidAndDistinctInstallations_EnforcesIdentityBoundary()
+   {
+      using var fixture = new RegistryFixture();
+      Assert.Throws<ArgumentException>(() => new FileTypeRegistration(fixture.Root, "relative.exe", "stable"));
+      Assert.Throws<ArgumentException>(() => new FileTypeRegistration(fixture.Root, "C:\\bad\"path.exe", "stable"));
+      Assert.Throws<ArgumentException>(() => new FileTypeRegistration(fixture.Root, "C:\\good.exe", "unknown"));
+      var first = new FileTypeRegistration(fixture.Root, Path.Combine(Path.GetTempPath(), "first", "current", "MarkdownViewr.Windows.exe"), "stable");
+      var second = new FileTypeRegistration(fixture.Root, Path.Combine(Path.GetTempPath(), "second", "current", "MarkdownViewr.Windows.exe"), "stable");
+      Assert.NotEqual(first.ProgId, second.ProgId, StringComparer.Ordinal);
+      first.Register();
+      second.Register();
+      first.Unregister();
+      AssertRegistered(fixture.Root, second.ProgId, Path.Combine(Path.GetTempPath(), "second", "current", "MarkdownViewr.Windows.exe"));
+   }
+
+
+
+   /// <summary>The deep link targets the actual registered value, preserves channel identity and never selects a default itself.</summary>
+   [Fact]
+   public void DefaultAppsUri_RegisteredInstall_UsesExactRegisteredApplication()
+   {
+      using var fixture = new RegistryFixture();
+      string executable = Path.Combine(Path.GetTempPath(), "viewer spaces & café", "current", "MarkdownViewr.Windows.exe");
+      var stable = new FileTypeRegistration(fixture.Root, executable, "stable");
+      var dev = new FileTypeRegistration(fixture.Root, executable, "dev");
+      Assert.Null(stable.GetDefaultAppsUri(supportsAppPage: true));
+      stable.Register();
+      dev.Register();
+      Uri stableTarget = Assert.IsType<Uri>(stable.GetDefaultAppsUri(supportsAppPage: true));
+      Uri devTarget = Assert.IsType<Uri>(dev.GetDefaultAppsUri(supportsAppPage: true));
+      Assert.Equal("ms-settings", stableTarget.Scheme);
+      Assert.Equal("defaultapps", stableTarget.AbsolutePath);
+      Assert.Equal("?registeredAppUser=" + Uri.EscapeDataString(stable.ProgId), stableTarget.Query);
+      Assert.Equal("?registeredAppUser=" + Uri.EscapeDataString(dev.ProgId), devTarget.Query);
+      Assert.NotEqual(stableTarget, devTarget);
+      Assert.Equal(new Uri("ms-settings:defaultapps"), stable.GetDefaultAppsUri(supportsAppPage: false));
+      using RegistryKey applications = fixture.Root.OpenSubKey("Software\\RegisteredApplications")!;
+      Assert.Equal(2, applications.ValueCount);
+      using RegistryKey extension = fixture.Root.OpenSubKey("Software\\Classes\\.md")!;
+      Assert.DoesNotContain("", extension.GetValueNames(), StringComparer.Ordinal);
+      Assert.Null(fixture.Root.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.md\\UserChoice"));
+      stable.Unregister();
+      Assert.Null(stable.GetDefaultAppsUri(supportsAppPage: true));
+      Assert.Equal(devTarget, dev.GetDefaultAppsUri(supportsAppPage: true));
+   }
+
+
+
+   /// <summary>A missing, retargeted or altered capabilities entry must not route the user to another installation's settings.</summary>
+   [Fact]
+   public void DefaultAppsUri_ChangedOwnership_DeclinesRoute()
+   {
+      using var fixture = new RegistryFixture();
+      var registration = new FileTypeRegistration(fixture.Root, Path.Combine(Path.GetTempPath(), "current", "MarkdownViewr.Windows.exe"), "stable");
+      registration.Register();
+      using RegistryKey applications = fixture.Root.OpenSubKey("Software\\RegisteredApplications", writable: true)!;
+      object expected = applications.GetValue(registration.ProgId)!;
+      applications.SetValue(registration.ProgId, "Software\\Other\\Capabilities");
+      Assert.Null(registration.GetDefaultAppsUri(supportsAppPage: true));
+      applications.DeleteValue(registration.ProgId);
+      Assert.Null(registration.GetDefaultAppsUri(supportsAppPage: false));
+      applications.SetValue(registration.ProgId, expected);
+      using RegistryKey command = fixture.Root.OpenSubKey("Software\\Classes\\" + registration.ProgId + "\\shell\\open\\command", writable: true)!;
+      command.SetValue("", "another deliberately selected command");
+      Assert.Null(registration.GetDefaultAppsUri(supportsAppPage: true));
+      command.DeleteValue("");
+      Assert.Null(registration.GetDefaultAppsUri(supportsAppPage: false));
+   }
+
+
+
+   /// <summary>Readbacks cover the actual command/icon and every advertised type, plus native Default Apps capability discovery.</summary>
+   private static void AssertRegistered(RegistryKey root, string identity, string executable)
+   {
+      using RegistryKey program = root.OpenSubKey("Software\\Classes\\" + identity)!;
+      Assert.Equal(RegistryValueKind.None, program.GetValueKind("AllowSilentDefaultTakeOver"));
+      Assert.Empty(Assert.IsType<byte[]>(program.GetValue("AllowSilentDefaultTakeOver")));
+      using RegistryKey command = program.OpenSubKey("shell\\open\\command")!;
+      Assert.Equal("\"" + executable + "\" \"%1\"", command.GetValue(""));
+      using RegistryKey icon = program.OpenSubKey("DefaultIcon")!;
+      Assert.Equal("\"" + executable + "\",0", icon.GetValue(""));
+      using RegistryKey applications = root.OpenSubKey("Software\\RegisteredApplications")!;
+      string capabilitiesPath = Assert.IsType<string>(applications.GetValue(identity));
+      using RegistryKey capabilities = root.OpenSubKey(capabilitiesPath + "\\FileAssociations")!;
+      foreach(string extension in new[] { ".md", ".markdown", ".mdown", ".mkd", ".txt" })
+      {
+         Assert.Equal(identity, capabilities.GetValue(extension));
+         using RegistryKey openWith = root.OpenSubKey("Software\\Classes\\" + extension + "\\OpenWithProgids")!;
+         Assert.Contains(identity, openWith.GetValueNames(), StringComparer.Ordinal);
+      }
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/MarkdownViewr.Windows.UiTests.csproj b/tests/MarkdownViewr.Windows.UiTests/MarkdownViewr.Windows.UiTests.csproj
index 7f74347..6aa1a97 100644
--- a/tests/MarkdownViewr.Windows.UiTests/MarkdownViewr.Windows.UiTests.csproj
+++ b/tests/MarkdownViewr.Windows.UiTests/MarkdownViewr.Windows.UiTests.csproj
@@ -5,7 +5,8 @@
         project. Build the solution first (dotnet build MarkdownViewr.Windows.slnx -p:Platform=x64), or
         point K22_UITEST_EXE at the exe to test. -->
    <PropertyGroup>
-      <TargetFramework>net10.0-windows</TargetFramework>
+      <TargetFramework>net10.0-windows10.0.19041.0</TargetFramework>
+      <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
    </PropertyGroup>
 
    <ItemGroup>
@@ -29,4 +30,15 @@
       <Using Include="MarkdownViewr.Windows.Core" />
    </ItemGroup>
 
+   <ItemGroup>
+      <!-- Exercise the actual native file adapter without loading WinUI or reserving the desktop. -->
+      <Compile Include="..\..\src\MarkdownViewr.Windows\DocumentFiles.cs" Link="WindowsAdapters\DocumentFiles.cs" />
+      <Compile Include="..\..\src\MarkdownViewr.Windows\DocumentWatcher.cs" Link="WindowsAdapters\DocumentWatcher.cs" />
+      <Compile Include="..\..\src\MarkdownViewr.Windows\FileTypeRegistration.cs" Link="WindowsAdapters\FileTypeRegistration.cs" />
+      <Compile Include="..\..\src\MarkdownViewr.Windows\ShellFileAssociations.cs" Link="WindowsAdapters\ShellFileAssociations.cs" />
+      <Compile Include="..\..\src\MarkdownViewr.Windows\ActivationRequest.cs" Link="WindowsAdapters\ActivationRequest.cs" />
+      <Compile Include="..\..\src\MarkdownViewr.Windows\ActivationJsonContext.cs" Link="WindowsAdapters\ActivationJsonContext.cs" />
+      <Compile Include="..\..\src\MarkdownViewr.Windows\ActivationInbox.cs" Link="WindowsAdapters\ActivationInbox.cs" />
+   </ItemGroup>
+
 </Project>
diff --git a/tests/MarkdownViewr.Windows.UiTests/NativeClipboard.cs b/tests/MarkdownViewr.Windows.UiTests/NativeClipboard.cs
new file mode 100644
index 0000000..add2b92
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/NativeClipboard.cs
@@ -0,0 +1,98 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.Runtime.InteropServices;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Reads the actual Windows Unicode clipboard without writing fixture values or introducing rich-text formats.</summary>
+internal static partial class NativeClipboard
+{
+   /// <summary>Returns null while another owner holds the clipboard; callers poll the specific real copy result.</summary>
+   public static string? ReadText()
+   {
+      if(!OpenClipboard(0))
+      {
+         return null;
+      }
+      try
+      {
+         nint memory = GetClipboardData(13);
+         if(memory == 0)
+         {
+            return null;
+         }
+         nint pointer = GlobalLock(memory);
+         if(pointer == 0)
+         {
+            return null;
+         }
+         try
+         {
+            return Marshal.PtrToStringUni(pointer);
+         }
+         finally
+         {
+            GlobalUnlock(memory);
+         }
+      }
+      finally
+      {
+         CloseClipboard();
+      }
+   }
+
+
+
+   /// <summary>Checks native registered format presence so syntax colors cannot contaminate plain source copying.</summary>
+   public static bool HasRichText() => IsClipboardFormatAvailable(RegisterClipboardFormat("Rich Text Format")) || IsClipboardFormatAvailable(RegisterClipboardFormat("HTML Format"));
+
+
+
+   /// <summary>Opens only the current clipboard for a bounded native read.</summary>
+   [LibraryImport("user32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   private static partial bool OpenClipboard(nint owner);
+
+
+
+   /// <summary>Releases the clipboard after every read, including absent data and errors.</summary>
+   [LibraryImport("user32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   private static partial bool CloseClipboard();
+
+
+
+   /// <summary>Retrieves existing Unicode text data without replacing it.</summary>
+   [LibraryImport("user32.dll")]
+   private static partial nint GetClipboardData(uint format);
+
+
+
+   /// <summary>Locks native clipboard memory only while the clipboard is open.</summary>
+   [LibraryImport("kernel32.dll")]
+   private static partial nint GlobalLock(nint memory);
+
+
+
+   /// <summary>Releases the native memory lock after marshaling the selected source.</summary>
+   [LibraryImport("kernel32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   private static partial bool GlobalUnlock(nint memory);
+
+
+
+   /// <summary>Resolves Windows format identifiers without creating clipboard data.</summary>
+   [LibraryImport("user32.dll", EntryPoint = "RegisterClipboardFormatW", StringMarshalling = StringMarshalling.Utf16)]
+   private static partial uint RegisterClipboardFormat(string name);
+
+
+
+   /// <summary>Observes whether a rich format is actually present in the current clipboard.</summary>
+   [LibraryImport("user32.dll")]
+   [return: MarshalAs(UnmanagedType.Bool)]
+   private static partial bool IsClipboardFormatAvailable(uint format);
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/NativeMouse.cs b/tests/MarkdownViewr.Windows.UiTests/NativeMouse.cs
new file mode 100644
index 0000000..c74e926
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/NativeMouse.cs
@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using System.ComponentModel;
+using System.Drawing;
+using System.Runtime.InteropServices;
+using FlaUI.Core.WindowsAPI;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Injects pointer movement through the same Windows input queue used for button events.</summary>
+internal static class NativeMouse
+{
+   /// <summary>Uses absolute virtual-desktop coordinates; cursor warping alone did not deliver outline movement in hosted traces.</summary>
+   public static void MoveTo(Point point)
+   {
+      int left = User32.GetSystemMetrics(SystemMetric.SM_XVIRTUALSCREEN);
+      int top = User32.GetSystemMetrics(SystemMetric.SM_YVIRTUALSCREEN);
+      int width = User32.GetSystemMetrics(SystemMetric.SM_CXVIRTUALSCREEN);
+      int height = User32.GetSystemMetrics(SystemMetric.SM_CYVIRTUALSCREEN);
+      if(width <= 0 || height <= 0 || point.X < left || point.X >= left + width || point.Y < top || point.Y >= top + height)
+      {
+         throw new InvalidOperationException("The native mouse target is outside the virtual desktop.");
+      }
+      var mouse = new MOUSEINPUT
+      {
+         dx = (int)(((long)(point.X - left) * 65536 + 32768) / width),
+         dy = (int)(((long)(point.Y - top) * 65536 + 32768) / height),
+         dwFlags = MouseEventFlags.MOUSEEVENTF_MOVE | MouseEventFlags.MOUSEEVENTF_ABSOLUTE | MouseEventFlags.MOUSEEVENTF_VIRTUALDESK,
+      };
+      var input = INPUT.MouseInput(mouse);
+      if(User32.SendInput(1, [input], INPUT.Size) != 1)
+      {
+         throw new Win32Exception(Marshal.GetLastWin32Error(), "Windows did not accept the native mouse move.");
+      }
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/RegistryFixture.cs b/tests/MarkdownViewr.Windows.UiTests/RegistryFixture.cs
new file mode 100644
index 0000000..bdadf4d
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/RegistryFixture.cs
@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.Win32;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Registry adapters operate beneath an isolated UUID subtree, never the user's real Classes/default-app keys.</summary>
+internal sealed class RegistryFixture : IDisposable
+{
+   private readonly string _path = "Software\\KofTwentyTwo\\MarkdownViewr.Windows.Tests\\" + Guid.NewGuid().ToString("N");
+
+
+
+   /// <summary>Creates the owned isolated root using the same Windows registry implementation as production.</summary>
+   internal RegistryFixture() => Root = Registry.CurrentUser.CreateSubKey(_path);
+
+
+
+   /// <summary>The adapter uses relative registry keys beneath this fixture.</summary>
+   internal RegistryKey Root { get; }
+
+
+
+   /// <summary>Deletes only the fixed-prefix UUID subtree created by this fixture.</summary>
+   public void Dispose()
+   {
+      Root.Dispose();
+      Registry.CurrentUser.DeleteSubKeyTree(_path, throwOnMissingSubKey: false);
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/ShellFileAssociationsTests.cs b/tests/MarkdownViewr.Windows.UiTests/ShellFileAssociationsTests.cs
new file mode 100644
index 0000000..6675829
--- /dev/null
+++ b/tests/MarkdownViewr.Windows.UiTests/ShellFileAssociationsTests.cs
@@ -0,0 +1,27 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.Win32;
+
+
+namespace MarkdownViewr.Windows.UiTests;
+
+/// <summary>Actual Windows association reads are bounded and never replace the current user's selections.</summary>
+public sealed class ShellFileAssociationsTests
+{
+   /// <summary>The standard text-file association exercises the real API; Markdown reads leave the existing choice untouched.</summary>
+   [Fact]
+   public void QueryProgId_CurrentWindowsAssociations_ReadsWithoutChangingChoice()
+   {
+      using RegistryKey? choice = Registry.CurrentUser.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.md\\UserChoice");
+      object? before = choice?.GetValue("ProgId");
+      string? text = ShellFileAssociations.QueryProgId(".txt");
+      Assert.False(string.IsNullOrWhiteSpace(text));
+      Assert.InRange(text!.Length, 1, 1023);
+      Assert.DoesNotContain(text, char.IsControl);
+      _ = ShellFileAssociations.QueryProgId(".md");
+      Assert.Equal(before, choice?.GetValue("ProgId"));
+   }
+}
diff --git a/tests/MarkdownViewr.Windows.UiTests/packages.lock.json b/tests/MarkdownViewr.Windows.UiTests/packages.lock.json
index f5b18a1..2e549fd 100644
--- a/tests/MarkdownViewr.Windows.UiTests/packages.lock.json
+++ b/tests/MarkdownViewr.Windows.UiTests/packages.lock.json
@@ -1,7 +1,7 @@
 {
   "version": 2,
   "dependencies": {
-    "net10.0-windows7.0": {
+    "net10.0-windows10.0.19041": {
       "FlaUI.UIA3": {
         "type": "Direct",
         "requested": "[5.0.0, )",
@@ -45,6 +45,19 @@
         "resolved": "4.0.0",
         "contentHash": "kzLFyBYUnoidpGOXvpNOfIo8C92gVgVR6X8ncHwhcrDYugiOut5rrhDkr0L3cWHd7J2pKXf6LgaeXoBBDlx1ag=="
       },
+      "AngleSharp": {
+        "type": "Transitive",
+        "resolved": "1.7.2",
+        "contentHash": "r1rb5Qo/0KPzmP0nbSiXPDVfh4Ctu0B+y1RyyUq73g4sgAmEW7q10RDyTq2ZsILwtO9O2LAvMrUles7eD4zz1g=="
+      },
+      "AngleSharp.Css": {
+        "type": "Transitive",
+        "resolved": "1.0.2",
+        "contentHash": "XeBxh0h/73+MWFsGfeMwiK7xbzAK3YeHFdUIrMH1P90amIrDFD/vUDIrPlF3CixqaMH5MRIUvT6Ux+2zvhJ3SA==",
+        "dependencies": {
+          "AngleSharp": "[1.5.0, 2.0.0)"
+        }
+      },
       "FlaUI.Core": {
         "type": "Transitive",
         "resolved": "5.0.0",
@@ -188,21 +201,32 @@
       "markdownviewr.windows.core": {
         "type": "Project",
         "dependencies": {
-          "CommunityToolkit.Mvvm": "[8.4.2, )",
-          "KofTwentyTwo.AppKit": "[0.1.0, )"
+          "HtmlSanitizer": "[9.2.1039, )",
+          "KofTwentyTwo.AppKit": "[0.1.0, )",
+          "Markdig": "[1.4.0, )"
         }
       },
-      "CommunityToolkit.Mvvm": {
+      "HtmlSanitizer": {
         "type": "CentralTransitive",
-        "requested": "[8.4.2, )",
-        "resolved": "8.4.2",
-        "contentHash": "WadCzGEc2U+3e20avRLng4qNtt4zoOGWrdUISqJWrHe3/FSnrYjuM5Sb4yQb09LhkBXrrI4Zt3dLKgRMbItsrg=="
+        "requested": "[9.2.1039, )",
+        "resolved": "9.2.1039",
+        "contentHash": "PKxy1hYknAij8YlHCC2a9GSqzUd4bh3IvY+abJBvOH1FKcZpbyafEHtdFcXQBt12Y7hNPkNEOP6Qa7uKNSs/yA==",
+        "dependencies": {
+          "AngleSharp": "1.7.2",
+          "AngleSharp.Css": "1.0.2"
+        }
       },
       "KofTwentyTwo.AppKit": {
         "type": "CentralTransitive",
         "requested": "[0.1.0, )",
         "resolved": "0.1.0",
         "contentHash": "+ymM8DxPel+C527Cp7lrhhdu0xnGHb6fl4/5vAlzsd0iiyW8u+UiOfQl1paNxA26iQZTbxQ8fMLQsUnaOA8GcQ=="
+      },
+      "Markdig": {
+        "type": "CentralTransitive",
+        "requested": "[1.4.0, )",
+        "resolved": "1.4.0",
+        "contentHash": "lLhaiI/mNDTNzgLqnmknhf4LjgTqOAyjx5+GNz0X3AxYMxUhmFppF2WVMdER+SDqwhE5wUF1pzs/cuLwFxs7xA=="
       }
     }
   }
diff --git a/tests/MarkdownViewr.Windows.UpdateProbe/Program.cs b/tests/MarkdownViewr.Windows.UpdateProbe/Program.cs
index b0b318c..33d856c 100644
--- a/tests/MarkdownViewr.Windows.UpdateProbe/Program.cs
+++ b/tests/MarkdownViewr.Windows.UpdateProbe/Program.cs
@@ -18,6 +18,10 @@ internal static class Program
    /// <summary>Records the installed channel, update offer and requests; optionally downloads and applies it.</summary>
    private static async Task<int> Main(string[] args)
    {
+      if(Environment.GetEnvironmentVariable("MARKDOWNVIEWR_EDITOR_PROBE_RESULT") is { Length: > 0 } editorResult)
+      {
+         return WriteEditorResult(editorResult, args);
+      }
       VelopackStartup.Run();
       if(args.Length != 3 || args[2] is not ("check" or "apply"))
       {
@@ -73,4 +77,18 @@ internal static class Program
       }
       return 0;
    }
+
+
+
+   /// <summary>Records only the owned fixture's actual process arguments; it never opens or reads the document.</summary>
+   private static int WriteEditorResult(string resultPath, string[] args)
+   {
+      if(args.Length != 1)
+      {
+         throw new ArgumentException("The editor fixture expects one literal document argument.", nameof(args));
+      }
+      File.WriteAllText(resultPath + ".tmp", JsonSerializer.Serialize(new { Arguments = args, WorkingDirectory = Environment.CurrentDirectory }));
+      File.Move(resultPath + ".tmp", resultPath, overwrite: true);
+      return 0;
+   }
 }