docs(windows): record 0.6.8 viewer smoke

docs/WINDOWS.md

@@ -5,10 +5,11 @@ PeerSpeak v0.6.7 at commit `7217015d` passed a fresh Windows 10 22H2/build 19045
 VM smoke test on 2026-08-22 for install/upgrade, launch, GUI/settings render,
 device selection and persistence, microphone capture startup, WASAPI playback
 pacing, room create/leave, and the missing-PixelPass guard. The v0.6.8 candidate
-adds the matching viewer-only PixelPass helper to the installer: Windows can
-watch Linux-hosted shares, while Windows capture/hosting remains intentionally
-unavailable. The build environment is **not** the Windows VM; current Windows
-binaries are built from Linux with the GNU target environment.
+at commit `437c9538` passed its installer/helper/UI smoke on the same VM and adds
+the matching viewer-only PixelPass helper: Windows can watch Linux-hosted shares,
+while Windows capture/hosting remains intentionally unavailable. The build
+environment is **not** the Windows VM; current Windows binaries are built from
+Linux with the GNU target environment.
 
 The Windows runtime still trails Linux in a few important areas. See the Claude
 handoff file `windows-parity-audit.md` for the full audit and task breakdown.
@@ -119,6 +120,40 @@ Still manual or two-party: current-build Linux↔Windows audio in both direction
 chimes, chat/files/music/recording, friends/presence, game detection, audible
 probe quality, and uninstall/firewall cleanup.
 
+## v0.6.8 viewer/installer smoke — 2026-08-22
+
+Built from committed PeerSpeak source `437c9538` and committed PixelPass source
+`ca3122b`:
+
+- `peerspeak.exe`: 80,997,180 bytes, SHA-256
+  `952e77a0693d0e12390c8f39c5fbc3233b19eb069a31f49a922954692b2705e8`
+- `pixelpass.exe`: 13,165,056 bytes, SHA-256
+  `3eabd9f0dcd8565136a5c87a79470eceedd426cea5708904d7492a6fa37b3c49`
+- `peerspeak-0.6.8-setup.exe`: 22,273,495 bytes, SHA-256
+  `8e23f26d758bd803748dee6d8316f617e0a7b8e31fa1b21ca754eeae846d819f`
+
+Proven in this run:
+
+- The installer transferred to Windows with an exact matching hash, upgraded
+  the existing install in place, and installed both payload binaries with hashes
+  matching the staged build artifacts.
+- The title screen reported `PeerSpeak v0.6.8 (437c9538)`. A solo room created
+  and left cleanly, and the log recorded the matching version/hash.
+- Windows displayed **Sharing unavailable** instead of attempting capture. Its
+  explainer accurately said the bundled helper can watch Linux-hosted shares and
+  that Windows hosting is not available yet.
+- The installer left exactly one enabled inbound `PeerSpeak` rule and one
+  enabled inbound `PeerSpeak PixelPass` rule, each pointing at its installed
+  binary. The rules cover Domain, Private, and Public profiles, matching the
+  existing installer policy.
+- The installed helper reported the viewer-only capability envelope, completed
+  `--doctor` with exit 0, and refused `--host` with exit 1.
+- The exact PixelPass payload hash above had already consumed a fresh ticket
+  from a live Linux PixelPass host and rendered the Linux desktop in VLC. Closing
+  VLC reaped the viewer and notified the host. This proves the helper/wire/player
+  path; the final in-room PeerSpeak **Watch** click and a human audio check remain
+  separate manual gates.
+
 ## Known gaps
 
 | Item | Status |
@@ -127,7 +162,7 @@ probe quality, and uninstall/firewall cleanup.
 | Screen share | Viewing Linux-hosted shares is implemented with the bundled PixelPass helper. Windows capture/hosting remains pending. |
 | Device persistence | Uses cpal friendly names as keys. These can duplicate or change across Windows driver/profile changes; stable WASAPI endpoint IDs are still needed. |
 | Release hygiene | Keep `.iss` and installer output in sync with `Cargo.toml`; rebuild Windows artifacts during each release. |
-| Runtime coverage | The current 0.6.7 build passed the bounded Windows 10 smoke above; the remaining two-party and feature-specific rows still need coverage. |
+| Runtime coverage | The 0.6.8 candidate passed the bounded installer/helper/UI smoke above; the remaining two-party and feature-specific rows still need coverage. |
 
 ## Current smoke checklist
 
@@ -147,5 +182,5 @@ v0.6.7 at `7217015d`; screen-share rows track the v0.6.8 candidate separately:
 - [ ] Test Steam and non-Steam game detection on a real Windows Steam install.
 - [x] Run the Windows PixelPass viewer against a live Linux PixelPass host; video rendered and the viewer exited when VLC closed.
 - [ ] Watch a Linux-hosted share through the installed PeerSpeak UI; confirm video and audio on real Windows hardware.
-- [ ] Confirm Windows clearly refuses screen-share hosting while Watch remains available.
-- [ ] Install/upgrade/uninstall through the Inno installer, including firewall rule cleanup. Clean install and idempotent upgrade passed; uninstall remains.
+- [x] Confirm Windows clearly refuses screen-share hosting without treating the bundled helper as missing.
+- [ ] Install/upgrade/uninstall through the Inno installer, including firewall rule cleanup. Clean install and idempotent 0.6.8 upgrade passed; uninstall remains.