# Live-test report

Status: **Azure acceptance passed; Wix draft and publication pending**

This report records only results observed from the live Azure subscription on 29 August 2026. No session identifiers, Azure IDs, IP addresses, credentials, or raw deployment output are included.

## Passed Azure checks

- All eight PowerShell files passed AST parsing after the live-run fixes.
- Read-only Preflight passed and created no Azure resources or provider registration.
- `Microsoft.VirtualMachineImages` was absent initially and was registered only by Foundation.
- The three fixed workshop resource groups were created with matching workshop/session ownership tags.
- The Image Builder identity received Contributor only on the three workshop groups.
- The gallery definition is generalized, Gen2, and `TrustedLaunchSupported`.
- Image Builder version `1.0.0` completed customization, controlled restarts, non-preview Windows Update, in-VM validation, and distribution.
- Version `1.0.0` reached `Succeeded / Completed / 100%` in West Europe and North Europe.
- The private validation VM booted from exact `1.0.0`; IIS, release marker, patch manifest, Trusted Launch, Secure Boot, vTPM, and no-public-IP checks passed.
- Image Builder version `2.0.0` completed customization, updates, validation container exit code `0`, and distribution.
- Version `2.0.0` reached `Succeeded / Completed / 100%` in West Europe and North Europe.
- Immutable rollout replaced the VM from exact `2.0.0`; baseline revision 2 and the v2-only marker were verified.
- REST PATCH excluded v2 from `latest` and kept v1 eligible after the installed CLI rejected its missing convenience flag.
- Immutable rollback replaced the VM from exact `1.0.0`; baseline revision 1 returned and the v2-only marker was absent.
- Final validation reread both versions, the definition, VM, NIC, security profile, and latest/exclusion state and passed.
- Sanitized evidence export passed its identifier, IP, secret, and payload scan.
- Eleven real Portal/command-line screenshots were captured and cropped.

## Live-run fixes incorporated

- Kept Azure resource name `vm-golden-current` while using the Windows guest computer name `vm-golden-val` to satisfy the 15-character guest limit.
- Corrected the Compute Gallery replication response mapping to `replicationStatus.aggregatedState` and `replicationStatus.summary`.
- Replaced unsupported CLI `--exclude-from-latest` updates with Compute Gallery REST PATCH calls.
- Made the no-public-IP validator robust when Azure omits the absent property under PowerShell strict mode.
- Added the final Validation state field safely under strict mode.

## Pending publication checks

- Upload sanitized media and ZIP to Wix.
- Create and preview the unpublished Wix draft on desktop and mobile.
- Add and preview the Workshops tile after the Private Subnets/NAT Gateway workshop.
- Obtain action-time confirmation, publish the post and page, verify the live article, tile, and download, then clean up Azure.
