# Microsoft MXC native assets

This directory contains only the seven release-reviewed executables needed by
XENO's containment adapter and Windows host preparation. They were extracted from the integrity-pinned
`@microsoft/mxc-sdk@0.7.0` npm artifact recorded in `package.json`.

XENO does not execute or redistribute that package's JavaScript wrapper or its
`node-pty`, `node-addon-api`, or `semver` dependency graph. Every executable is
checked against both this manifest and the compiled XENO trust table before it
can be probed or launched.

The two `wxc-host-prep.exe` assets are invoked only by the explicit
`prepareMxcWindowsHost()` setup API. They apply MXC's idempotent
`prepare-system-drive` and `prepare-null-device` operations from an elevated
host setup context; normal agent execution never attempts to elevate. Windows
11 on Arm runs the reviewed x64 host-preparation helper through the operating
system's x64 emulation layer because these operations are architecture-neutral
and MXC's ARM64 helper can stall while applying the system-drive metadata ACEs.
The containment runtime itself remains the native ARM64 `wxc-exec.exe`.

The original Microsoft MIT license is preserved in
`LICENSE.microsoft-mxc-sdk.md`. Presence of these assets is not containment
certification: XENO still requires a candidate-bound, platform-bound, signed
certification and independent reviewer approval before advertising or using
`contained` execution.