mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-11-01 08:19:44 +00:00
Oliver Kieselbach
74d489b51e
IME checks an app right after its installer; only that check's verdict reaches the ESP and
Intune. The agent now reports its result as its own informational event (D-392):
- IME-POST-INSTALL-DETECTION marks the check ("expected to have enforcement state:
Detected", logged only for the app just installed); the app's next detection result line
becomes app_post_install_detection (postInstallDetection, afterReboot) and detectionResult
stays the check before the install.
- After an exit code mapped to SoftReboot/HardReboot the check right after the install is not
reported; IME-POST-REBOOT-DETECTION (InProgressPendingReboot -> Success) marks the check
after the restart instead.
- The mark is transient and the marker action app-mutating, so a marker from a previous
enrollment's log or without its result line never turns a later check into this one. No
state transition, no decision signal; historic replay is suppressed like DO telemetry.
- Install Progress, the timeline, the diagnosis tile (DiagnosisCulprit.PostInstallDetection)
and the MCP event catalog show the check.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>