BZ-B Tool Kit v3.1.3 Architecture
=================================

                     Technician / RMM
                           |
                           v
                    BZB-ToolKit.ps1
                           |
       +-------------------+-------------------+
       |                   |                   |
       v                   v                   v
 Smart Diagnose       Service Session      Remediation Engine
 (read-only)          Evidence Binding     (approval gated)
       |                   |                   |
       +-------------------+-------------------+
                           |
                           v
        Logs / Reports / Snapshots / Transactions
                           |
                           v
                 Ticket Documentation

CORE WORKFLOW
  Detect
    -> Recommend
    -> Capture State
    -> Approve
    -> Execute
    -> Validate
    -> Roll Back when exact rollback is supported and needed
    -> Document

SAFETY BOUNDARIES
  * Smart Diagnose never authorizes a change.
  * Silent changes require explicit -Force.
  * Medium-risk interactive changes require typed approval.
  * RDP disconnect and domain-controller risks have explicit guards.
  * Rollback support is action-specific, not universal.
  * Windows Update and RDP rollback use transaction-specific recorded state.
  * Public PC lockdown retains its mature independent Assigned Access backup/
    rollback system.

COMPATIBILITY
  BZ-B remains Windows PowerShell 5.1 compatible. Historical BZ-B migration module
  filenames are retained where changing them could break existing packages or
  operational workflows.
