update details about windows

README.md

@@ -32,7 +32,7 @@ All traffic is end-to-end encrypted via the Noise protocol. The local CA is only
 curl -fsSL https://git.ssh.surf/snxraven/holesail-browser/raw/branch/main/scripts/web-installer.sh | bash
 ```
 
-### Windows
+### Windows (Windows 11 latest)
 
 Download and run the PowerShell installer:
 
@@ -191,7 +191,7 @@ The built extension will be in `releases/Holesail-Browser-*.zip` and `.xpi`. Pla
 | macOS | Intel (x64) | `darwin-x64` |
 | Linux | x64 | `linux-x64` |
 | Linux | ARM64 | `linux-arm64` |
-| Windows | x64 | `win32-x64` (.exe) |
+| Windows 11 (latest) | x64 | `win32-x64` (.exe) |
 
 ## Documentation
 

docs/CONTRIBUTING.md

@@ -7,6 +7,7 @@ This document covers the development workflow, build system, project structure,
 - [Node.js](https://nodejs.org/) v18 or later (for build scripts and dev tooling)
 - [Bare](https://github.com/nicolo-ribaudo/bare) runtime — the native host runs under Bare, not Node.js
 - A Chromium-based browser or Firefox for testing the extension
+- **Windows:** Development and running the native host on Windows requires Windows 11 (latest)
 
 Install root-level dev dependencies:
 

docs/INSTALLATION.md

@@ -10,6 +10,8 @@ curl -fsSL https://git.ssh.surf/snxraven/holesail-browser/raw/branch/main/script
 
 ### Windows (PowerShell)
 
+**Requirements:** Windows 11 (latest). The native host is built and tested on Windows 11 only.
+
 ```powershell
 irm https://git.ssh.surf/snxraven/holesail-browser/raw/branch/main/scripts/install.ps1 | iex
 ```

docs/SECURITY.md

@@ -46,7 +46,7 @@ Certificates are generated on the first HTTPS connection to a new wildcard paren
 |----------|--------|----------------|
 | macOS | `security add-trusted-cert -r trustRoot -p ssl -k ~/Library/Keychains/login.keychain-db` | No |
 | Linux | `pkexec` + `cp` to `/usr/local/share/ca-certificates/` + `update-ca-certificates` | Yes (PolicyKit GUI prompt) |
-| Windows | `certutil -addstore -f ROOT` | Yes (admin) |
+| Windows 11 (latest) | `certutil -addstore -f ROOT` | Yes (admin) |
 
 On macOS, the CA is installed to the user's login keychain with the SSL trust policy. Chrome evaluates TLS trust using the SSL policy against all user keychains, so this is sufficient without admin privileges.
 

docs/SSH.md

@@ -232,7 +232,7 @@ SSH connections are stored in `state.json` under `sshConnections`. If a password
 - The `ssh` binary must be installed on the machine running the native host
   - macOS: included with the OS
   - Linux: install `openssh-client`
-  - Windows: install OpenSSH via Windows Optional Features or Git for Windows
+  - Windows 11 (latest): install OpenSSH via Windows Optional Features or Git for Windows
 - The remote host must be running an SSH daemon accessible via a Holesail `hs://` key
 
 ---
@@ -245,7 +245,7 @@ The remote peer may be offline or the `hs://` key may be wrong. Check `~/.holesa
 
 **`ssh: command not found`**
 
-The `ssh` binary is not in the PATH seen by the native host. Install OpenSSH or ensure `ssh` is in `/usr/bin/ssh` (macOS/Linux) or available in `PATH` (Windows).
+The `ssh` binary is not in the PATH seen by the native host. Install OpenSSH or ensure `ssh` is in `/usr/bin/ssh` (macOS/Linux) or available in `PATH` (Windows 11).
 
 **Permission denied (publickey,password)**