release: CA-O 2.2.14 con punto de restauracion obligatorio pre-overclock

- Las 3 vias de escritura crean si o si el punto del sistema; si falla, cero writes
- 6 tests de la puerta; suite 1860 passed, 0 failed; pipeline 4/4 exit 0

Author: Pyromesis

CHANGELOG.md

@@ -3,6 +3,11 @@
 Formato basado en [Keep a Changelog](https://keepachangelog.com/es-ES/1.1.0/).
 
 ## [Unreleased]
+## [2.2.14] - 2026-10-13
+### Anadido
+- **Punto de restauracion obligatorio antes de overclock.** Las tres vias de escritura (perfil, tuning por knob, automatico) crean si o si un punto de restauracion del sistema (`SystemRestore` por WMI) antes de tocar nada; si no se puede crear, no se escribe (ni journal, ni checkpoints, ni driver). Vale tambien ante cancelacion o error.
+### Probado
+- Suite 1860 passed, 0 failed (Security 274, Benchmark 17, Infrastructure 202, Core 931, UI 376, Integration 60). 6 tests nuevos de la puerta.
 ## [2.2.13] - 2026-10-13
 ### Anadido
 - **Overclock automatico con propuesta.** Boton en la tarjeta 00 PERFIL que recorre cada control escribible con biseccion hasta su techo (mismo `TuningEngine`, checkpoints, recovery D4 y puerta anti-cheat; se detiene si hay anti-cheat o ajustes pendientes). Al terminar PROPONE el perfil validado y el usuario pulsa Aplicar: nunca muta silicio sin confirmacion.

README.md

@@ -1,12 +1,12 @@
 <Project>
   <!-- Single source of truth for versioning (FASE 28). All other files derive from here. -->
   <PropertyGroup>
-    <Version>2.2.13</Version>
-    <AssemblyVersion>2.2.13.0</AssemblyVersion>
-    <FileVersion>2.2.13.0</FileVersion>
-    <PackageVersion>2.2.13</PackageVersion>
-    <ProductVersion>2.2.13</ProductVersion>
-    <InformationalVersion>2.2.13+$(GHTag)</InformationalVersion>
+    <Version>2.2.14</Version>
+    <AssemblyVersion>2.2.14.0</AssemblyVersion>
+    <FileVersion>2.2.14.0</FileVersion>
+    <PackageVersion>2.2.14</PackageVersion>
+    <ProductVersion>2.2.14</ProductVersion>
+    <InformationalVersion>2.2.14+$(GHTag)</InformationalVersion>
   </PropertyGroup>
 </Project>
 

Version.props

@@ -114,7 +114,7 @@ Nunca se registran secretos, credenciales ni contenido de entrada del usuario (s
 - **i18n**: diccionario tipado es-ES/en-US (`Localizer`); migración a `.resw` planificada sin cambiar llamadas (`Localizer.Get(key)`).
 - **HAGS/VBS/MPO/etc.**: nunca tratados como ganancias universales; HAGS es WorkloadDependent+Conditional+RequiresReboot, VBS es Critical+SecurityTradeoff+ExpertOnly.
 
-## Pruebas (1854 passed, 0 failed — Release)
+## Pruebas (1860 passed, 0 failed — Release)
 
 | Suite | Cubre | Count |
 |---|---|---|
@@ -123,5 +123,5 @@ Nunca se registran secretos, credenciales ni contenido de entrada del usuario (s
 | `CA-O.Integration.Tests` | `E2EFlowsTests` 9 pruebas (8 casos numerados + benchmark: Abrir→Analizar→Persistir→Vanguard→Restore→Benchmark) + `TransactionJournalRecovery` + contrato docs + `PrivilegedServicePackagingTests` (payload self-contained) | 60 |
 | `CA-O.Infrastructure.Tests` | `HistoryRobustness` (malformed), `SnapshotRepository` (TX identity), `SystemContextCache` dual-TTL | 202 |
 | `CA-O.Benchmark.Tests` | `SystemBenchmarkRunner` (suelo 3%, mediana) | 17 |
-| `CA-O.UI.Tests` | `ViewModelTests` (Analyze/Dashboard con `SystemAnalysisService` + `Correlation`), Overclock (filas visuales + mood de tuning), tours por pagina (83 pasos, destinos verificados), auto-tuning con propuesta | 370 |
-| **Total** | **Gates 1-5 `verify.ps1` + `build-release` con `gui-installer`** | **1854** |
+| `CA-O.UI.Tests` | `ViewModelTests` (Analyze/Dashboard con `SystemAnalysisService` + `Correlation`), Overclock (filas visuales + mood de tuning), tours por pagina (83 pasos, destinos verificados), auto-tuning con propuesta, puerta de restore point | 376 |
+| **Total** | **Gates 1-5 `verify.ps1` + `build-release` con `gui-installer`** | **1860** |

docs/ARCHITECTURE.md

@@ -3,7 +3,7 @@
 ; (lee la versión de BuildConstants.cs y firma con CAO_SIGN_THUMBPRINT si existe)
 
 #ifndef AppVersion
-  #define AppVersion "2.2.13"
+  #define AppVersion "2.2.14"
 #endif
 #ifndef RepoRoot
   #define RepoRoot ".."

installer/CA-O.iss

@@ -5,7 +5,7 @@
 // Instalador CA-O de un solo exe: ventana con progreso (sin consola).
 // Descarga el paquete, deriva al setup gráfico bonito y sale; si no hay
 // GUI, instala por aquí con la misma ventana de progreso.
-var productVersion = System.Reflection.Assembly.GetExecutingAssembly().GetName().Version?.ToString(3) ?? "2.2.13";
+var productVersion = System.Reflection.Assembly.GetExecutingAssembly().GetName().Version?.ToString(3) ?? "2.2.14";
 var logFile = Path.Combine(Path.GetTempPath(), "CA-O-Setup.log");
 try { File.AppendAllText(logFile, $"\n[{DateTime.Now:O}] Setup iniciado\n"); } catch { }
 

src/CA-O.Setup/Program.cs

@@ -11,10 +11,10 @@ namespace CAO.Shared.Constants;
 public static class BuildConstants
 {
     // Version - SINGLE SOURCE OF TRUTH
-    public const string ProductVersion = "2.2.13";
+    public const string ProductVersion = "2.2.14";
     public const string ProductVersionMajor = "2";
     public const string ProductVersionMinor = "2";
-    public const string ProductVersionPatch = "13";
+    public const string ProductVersionPatch = "14";
 
     // Product Identity
     public const string ProductName = "CA-O";

src/CA-O.Shared/Constants/BuildConstants.cs

@@ -200,6 +200,8 @@ public static class Localizer
         ["overclock-profile-note"] = "Los presets aplican valores del catalogo; solo un ajuste guiado produce un perfil validado.",
         ["overclock-profile-applying"] = "Aplicando perfil...",
         ["overclock-profile-restoring"] = "Restaurando valores...",
+        ["overclock-restore-point-creating"] = "Creando punto de restauración...",
+        ["overclock-restore-point-blocked"] = "Sin punto de restauración no se escribe nada: {0}",
         ["overclock-row-timed-out"] = "El backend no contesto a tiempo; la fila quedo sin leer.",
         ["overclock-gpu-driver-blocked"] = "Este driver no implementa el ajuste. Actualiza el driver de NVIDIA para habilitarlo.",
         ["overclock_gpu_write_limits"] = "Rango seguro segun el driver",
@@ -653,6 +655,8 @@ public static class Localizer
         ["overclock-profile-note"] = "Presets apply catalog values; only a guided tuning run produces a validated profile.",
         ["overclock-profile-applying"] = "Applying profile...",
         ["overclock-profile-restoring"] = "Restoring previous values...",
+        ["overclock-restore-point-creating"] = "Creating a restore point...",
+        ["overclock-restore-point-blocked"] = "No restore point, no writes: {0}",
         ["overclock-row-timed-out"] = "The backend did not answer in time; the row was left unread.",
         ["overclock-gpu-driver-blocked"] = "This driver does not implement the tuning. Update the NVIDIA driver to enable it.",
         ["overclock_gpu_write_limits"] = "Safe range per the driver",

src/CA-O.UI/Resources/Localizer.cs

@@ -1,6 +1,7 @@
 using System.Collections.ObjectModel;
 using System.Globalization;
 using System.Text;
+using CAO.Core.Abstractions;
 using CAO.Core.Overclock;
 using CAO.Core.Overclock.Reporting;
 using CAO.Core.Overclock.Stability;
@@ -11,6 +12,7 @@
 using CAO.Infrastructure.Overclock;
 using CAO.Infrastructure.Overclock.Reporting;
 using CAO.Infrastructure.Persistence;
+using CAO.Infrastructure.SystemInterop;
 using CAO.Shared;
 using System;
 using System.Collections.Generic;
@@ -133,6 +135,7 @@ public sealed partial class OverclockViewModel : ObservableObject
     private IValidatedProfileStore? _profileStore;
     private ITuningCheckpointStore? _checkpointStore;
     private IOverclockJournal? _journal;
+    private IRestorePointService? _restorePointService;
     internal static readonly TimeSpan DefaultRowTimeout = TimeSpan.FromSeconds(30);
 
     internal const string RowTimedOutReasonKey = "overclock-row-timed-out";
@@ -158,7 +161,8 @@ public OverclockViewModel(
         IValidatedProfileStore? profileStore = null,
         ITuningCheckpointStore? checkpointStore = null,
         IOverclockJournal? journal = null,
-        TimeSpan? rowTimeout = null)
+        TimeSpan? rowTimeout = null,
+        IRestorePointService? restorePointService = null)
     {
         _registry = registry;
         _backends = backends;
@@ -172,6 +176,7 @@ public OverclockViewModel(
         _profileStore = profileStore;
         _checkpointStore = checkpointStore;
         _journal = journal;
+        _restorePointService = restorePointService;
     }
 
     /// <summary>
@@ -218,6 +223,59 @@ public OverclockViewModel(
     private IOverclockJournal JournalFor(Guid runId) =>
         _journal ?? new TransactionOverclockJournal(new FileTransactionJournal(), runId);
 
+    /// <summary>
+    /// The real WMI service, built on first use like every other hardware door:
+    /// constructing the page must never pay for a restore point nobody asked
+    /// for. Injectable so tests drive the gate without touching WMI.
+    /// </summary>
+    private IRestorePointService RestorePoints =>
+        _restorePointService ??= new WmiRestorePointService();
+
+    /// <summary>
+    /// Puerta única de escritura: sin punto de restauración no se escribe nada.
+    /// Orden del operador: crear SÍ O SÍ el punto antes de cualquier escritura
+    /// de overclock; si no se puede crear, las tres vías (perfil, knob, auto)
+    /// vuelven con mensaje y cero escrituras. Un timeout o una cancelación es
+    /// un fallo, no un permiso: también bloquea.
+    /// </summary>
+    internal async Task<bool> EnsureRestorePointAsync(CancellationToken ct)
+    {
+        StatusLine = Localizer.Get("overclock-restore-point-creating");
+        CrashLog.Step("overclock.restore-point-start");
+        try
+        {
+            var (success, reason) = await RestorePoints
+                .CreateAsync("CA-O overclock: punto previo a escritura", ct)
+                .ConfigureAwait(true);
+            if (success)
+            {
+                CrashLog.Step("overclock.restore-point-done");
+                return true;
+            }
+
+            StatusLine = Localizer.Format("overclock-restore-point-blocked", reason);
+            CrashLog.Step("overclock.restore-point-blocked");
+            return false;
+        }
+        catch (OperationCanceledException)
+        {
+            StatusLine = Localizer.Format(
+                "overclock-restore-point-blocked", Localizer.Get("overclock_cancelled"));
+            CrashLog.Step("overclock.restore-point-cancelled");
+            return false;
+        }
+        catch (Exception ex)
+        {
+            // El servicio real ya traga sus internals WMI; si algo llega aquí
+            // es plomería, y su mensaje no sale al usuario.
+            CrashLog.Write(ex);
+            StatusLine = Localizer.Format(
+                "overclock-restore-point-blocked", Localizer.Get("overclock_probe_failed"));
+            CrashLog.Step("overclock.restore-point-failed");
+            return false;
+        }
+    }
+
     // Single source of truth: the registry decides the composition, the
     // ViewModel never re-lists the backends by hand (that divergence is
     // exactly how the CPU backend went missing once already).
@@ -1169,6 +1227,15 @@ private async Task StartTuningAsync(string knobId, CancellationToken ct)
         IsBusy = true;
         try
         {
+            // Sin punto no hay bisección: el motor escribe checkpoints, journal
+            // y valores del driver desde el primer punto.
+            if (!await EnsureRestorePointAsync(ct).ConfigureAwait(true))
+            {
+                SetMood(MoodForTuning(false, null));
+                CrashLog.Step("tuning.blocked-no-restore-point");
+                return;
+            }
+
             StatusLine = Localizer.Get("overclock-tuning-running");
             SetMood(MoodForTuning(true, null));
             var progress = new Progress<TuningProgress>(p =>
@@ -1402,6 +1469,17 @@ private async Task StartAutoTuningAsync(CancellationToken ct)
                 return;
             }
 
+            // Después de las puertas locales (recovery, anti-cheat, accionables):
+            // crear un punto para una pasada que ya está bloqueada sería pagar
+            // minutos de WMI para no escribir nada. Sigue garantizando cero
+            // escrituras si falla, porque ningún write corre antes de aquí.
+            if (!await EnsureRestorePointAsync(ct).ConfigureAwait(true))
+            {
+                ApplySummary = StatusLine;
+                CrashLog.Step("auto.blocked-no-restore-point");
+                return;
+            }
+
             StatusLine = Localizer.Get("overclock-auto-running");
             SetMood(MoodForTuning(true, null));
             CrashLog.Step("auto.start");
@@ -1587,6 +1665,15 @@ private async Task ApplyProfileAsync(CancellationToken ct)
         CrashLog.Step("refresh.apply-start");
         try
         {
+            // Sin punto no hay apply: ExecuteApplyAsync abre el journal, guarda
+            // checkpoints y escribe en el driver desde el primer knob.
+            if (!await EnsureRestorePointAsync(ct).ConfigureAwait(true))
+            {
+                ApplySummary = StatusLine;
+                CrashLog.Step("refresh.apply-blocked-no-restore-point");
+                return;
+            }
+
             var work = CollectApplyWork(profile);
             if (work.Count == 0)
             {