ec82cae981
The Windows client pinned the relay host route before opening TAP, but only verified that Windows was actually using that host route after TAP activation. If an existing route or pinning failure prevented the host route from becoming the active relay path, the client could discover that only after touching TAP route policy. Verify the pinned host route immediately after installing/reusing it, before opening the TAP adapter. Keep the existing after-activation verification as the runtime guard against TAP route takeover, and document the new expected startup log line in the MVP guide. Test Plan: - cargo fmt --check - cargo test -p lanparty-client-win - cargo test --workspace - cargo clippy --workspace --all-targets -- -D warnings - cargo check -p lanparty-client-route --target x86_64-pc-windows-msvc - git diff --check - git diff --cached --check Windows-target check attempted: - cargo check -p lanparty-client-win --target x86_64-pc-windows-msvc With LLVM tools configured, that still stops inside ring on this Linux host because the Windows C headers are unavailable, starting with assert.h. Refs: MVP relay-route protection