• Adds diagnostics export privacy mode with preview manifest and bundled redaction-report.json.\n- Redacts webhook URLs, proxy hosts, mapped-drive UNC paths, SSIDs, MACs, adapter names, and local paths when privacy mode is enabled.\n- Adds Pester coverage for redaction, privacy-off behavior, and preview manifest formatting.

• App interface guards now persist program path plus allowed adapter for drift repair.\n- Startup, NetworkChange, and manual Refresh Guards reconcile missing or stale NetForge-owned firewall rules.\n- Adds Pester coverage for persisted guard policies, added adapters, removed adapters, and unchanged topology.

Changed: Discord webhook URLs now migrate from plaintext settings to current-user DPAPI-protected storage.
Added: Pester coverage for protected webhook storage, legacy migration, missing secret, and invalid protected data cases.
Verification: .\tools\Test-NetForge.ps1 passed with 84 tests. Artifact SHA256: 079fa29e0f6741489fa6b3238d5d0b982ff05267e7a16f358ecd8f606a50038f.

Added Network Tools app interface guard for restricting a selected executable to one allowed adapter using Windows Firewall/WFP interface filters. Added apply, remove, refresh, and list controls for NetForge-owned per-app interface rules. Added Pester coverage for app interface guard validation, firewall rule naming, and rule row formatting.

Added optional Discord webhook notifications after successful profile applies from GUI, tray, scheduled, auto-apply, RDP, and CLI paths. Added Diagnostics endpoint-policy controls for saving the webhook URL with token-redacted logging. Added Pester coverage for Discord webhook URL validation, redacted endpoint output, and profile payload generation.

Added an integrated reachability wizard for DNS, gateway, route, TCP/firewall, and MTU checks from Network Tools. Network diagnostics actions now wrap on smaller windows to keep all tools reachable. Added Pester coverage for reachability target parsing and report formatting.

Added a Network Tools RDP launch workflow that applies a saved profile, starts mstsc.exe, and monitors the client process. Added automatic network-state revert when the RDP client exits, plus manual RDP profile revert. Added Pester coverage for conservative RDP host and .rdp file launch-plan parsing.

Added CLI profile apply with -ApplyProfile, optional -AdapterName, and -Silent for scripting. CLI applies profiles through the same validation, rollback snapshot, DNS, IP, and environment-action path as GUI and tray applies. Added Pester coverage for CLI profile and adapter resolution.

Added profile QR export/import as PNG using bundled QRCoder and ZXing.Net libraries. Added versioned compressed NetForge profile QR payloads with duplicate-safe import. Added Pester coverage for QR payload round-trips and non-NetForge payload rejection.

Added persistent compact laptop mode with reduced window minimums, density scaling for captured WPF spacing/font metrics, and compact helper tests. SHA256: b228fc21d32eaf170b73b86175c7768e4f59482c4f0cb2c4842fccce244b1154