Milestone 1 Proto Driver Release — 0.1.0.11

This is the Milestone 1 Proto Driver Release of LuminalVGD, NortheBridge's first-party virtual display driver for LuminalShine, shipping as driver version 0.1.0.11 (build 11, DriverVer 0.1.0.11, handshake proto 0.3 build 11).

LuminalVGD is a Rust UMDF IddCx indirect-display driver purpose-built for game streaming: per-client virtual monitors with exact mode lists, a shared frame-ring transport consumed directly by the LuminalShine encoder (no OS capture API in the hot path), HDR10 end to end, a hardware-cursor plane composited at encode time, and a lease watchdog that guarantees displays are cleaned up if the host dies.

What's new since v0.1.0-alpha.1

• Working control-surface authorization (fixes the v0.1.0-alpha.1 regression where every control IOCTL was refused, breaking streaming on installed deployments):
  • Callers are authorized at IOCTL time under impersonation — SYSTEM or elevated Administrators only; filtered (non-elevated) admin tokens are refused; fail closed.
  • Token evaluation is a fallback ladder (OpenThreadToken both modes, then CheckTokenMembership) with every outcome ETW-traced (stage + error code) for one-capture diagnosis.
  • The INF now grants UmdfImpersonationLevel = Impersonation from the correct section, and the host client opens the control device with explicit security QoS.
• Diagnosability: new FFI vgd_last_error() surfaces the underlying Win32 error of any failed driver call in host logs.
• Documentation: install floor updated, post-mortem and INF placement rules recorded.

Requirements

• Windows 11 x64 (build 22000+); 24H2 (26100+) for full HDR support.
• LuminalShine 26.08.0-beta.2 or newer. Older LuminalShine builds (including 26.08.0-beta.1) cannot complete the control-device handshake with this driver.

Install

Unpack the zip and, from an elevated PowerShell in the unpacked folder:

powershell -ExecutionPolicy Bypass -File .\install-driver.ps1 -SeedTrustedPublisher

INSTALL.md inside the zip covers verification, upgrade, and removal. Verify the download against SHA256SUMS.