GARRY USB SECURITY SUITE - 2026-09-23

Adds Garry Physical Access Check, Garry Updates, local computer-security review,
and visible boot/recovery menu options to the supported Garry Space USB.

This release does not unlock Windows accounts or reveal their passwords.
Its physical-access check can demonstrate a fixed Windows OS-file read while
Windows is offline. An optional harmless owner-created demo token can make the
finding easy to show. It never resets passwords, changes Windows files, unlocks
BitLocker, extracts credentials or collects private documents.

Preferred: install Garry Updates once from
https://garryhq.duckdns.org/garry-usb/ONLINE_UPDATES.html
Then Check for updates > Download update > Install for next restart.
Updates require internet and a supported FAT Garry boot USB with writable full
persistence on the same device. Nothing restarts or installs automatically.

Offline kit from a working PC (Python 3.9 or later):
  python install_update.py --media-root E:\
Use the actual Garry USB letter, then review the dry run. Apply explicitly:
  python install_update.py --media-root E:\ --apply --confirm-root E:\
No formatting or repartitioning. A mounted ISO/DVD is not a writable USB.
Base image and existing menu integrity must match; stop on verification errors.
Never run the offline installer against Garry's currently running live medium.

After restarting Garry, open Garry Physical Access Check. Pick one internal
Windows partition and confirm its full device path. Start with a spare owned
computer. Dirty, hibernated or unsupported volumes are not repaired and do not
count as protected. Encryption detected means access was not tested.

Optional demo marker and full instructions:
https://garryhq.duckdns.org/garry-usb/PHYSICAL_ACCESS.html

Software/isolated VM validation is not a physical test of your USB or Windows PC.
The signed online update refuses replacement of an active SquashFS image.
