[AronAxe]

Root cause reproduced

The reported Failed to resolve Python.Runtime.Loader.Initialize was reproduced on an isolated GitHub-hosted Windows runner: the same Python.Runtime.dll imports successfully without a Zone.Identifier, fails with that exact error with ZoneId=3, then imports successfully after removing the mark. Reproduction: https://github.com/AronAxe/GraphPaper/actions/runs/38555426223 . Exact output and dependency versions are stored under docs/validation/v0.7.1. This identifies a reproduced failure mode matching the screenshot, not every possible cause on a user's installation.

Fix

• Before Python.NET initialization, verify the exact bundled runtime paths against per-build SHA-256 hashes embedded inside the executable.
• Detect Internet/Restricted-zone marks and ask through a native Yes/No dialog. No leaves DLL marks in place and exits before project storage opens. Yes removes only listed, checksum-matched DLL marks.
• Reject missing/mixed files, traversal and linked/junction-backed runtime files; recheck after consent. No recursive folder unblock, global .NET trust change, antivirus changes or source-document changes. Consistency hashes are not publisher authentication.
• Replace blanket WebView2 advice with error-specific guidance.
• Build and verify exact frozen-runtime hashes; disable UPX so packaged DLL bytes remain comparable.
• Retain v0.7.0's operational System One implementation unchanged.

Verified pre-merge

Successful release-candidate run: https://github.com/AronAxe/GraphPaper/actions/runs/38558967212 . Exact tested source: 1e04b48996f371f9dd54fcca820bd9ffe1eb6f36.

• 360 automated Windows tests passed, no skips/failures; all six geometry tests passed.
• All eight real-HTTP browser suites passed.
• 33 checks passed against the compiled Windows application in its ordinary package location.
• 36 checks passed against a fresh extraction of the actual release ZIP after 67 DLLs were marked as Internet downloads. Real native No/Yes commands were exercised. Declining kept marks and did not create a project database; approval repaired the ten verified window-runtime DLLs, while unrelated DLL and author-document sentinels retained their marks. The complete Graphify/Science/Polemic/voice/graph/System One/native-dialog/save-on-close suite then passed. No JavaScript or recursion errors.
• Independently downloaded and checked both native reports and Windows JUnit output. Tested candidate archive SHA-256: deb621264a4f8d6cb0ad9b67d55d91b2d4b64de648798cbf9517e511458edcef.
• Windows/Linux Python 3.12/3.13 quality matrix passed: https://github.com/AronAxe/GraphPaper/actions/runs/38558967317 .

The added tests exposed two fixture/harness issues: truncating a Windows file may remove its alternate streams, and TEMP may use a short-name alias. Fixtures now establish marked-file preconditions explicitly; archive containment resolves both sides and still rejects unsafe entries. The release gates were retained, not bypassed.

All work used a disposable working container and GitHub-hosted runners. No user-computer, private manuscript, sign-in or paid model access. Internet-zone marks were deliberately simulated; this is not a SmartScreen/all-antivirus/all-Windows-policy claim. Main-branch release publication remains gated on a fresh build and the same native tests.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-14T11:34:05.618219Z	b0361da	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.