Microsoft Store certification: MSIX app with external recording tools and an in-process DLL

Hello,

We are planning a Win32 desktop utility, packaged as MSIX with runFullTrust, that exports video clips from local Counter-Strike 2 demo replays. It is intended for previously recorded matches, not live online gameplay.

After installation, on first run and with the user's consent, the app would download version-pinned HLAE and FFmpeg releases from their official distribution sources, verify SHA-256 hashes, and store the tools in the user's app-data folder. These dependencies would be disclosed at the beginning of the Store description. Updates to the MSIX app itself would be delivered through Microsoft Store.

HLAE would launch CS2 with -insecure for local demo playback and load its recording component into the game process. The MSIX would also include our own DLL, which HLAE would load into CS2 for that recording session. Our DLL would intercept selected Windows calls for window visibility, focus, cursor control and display-mode reporting, to support background recording and portrait output.

We have reviewed Store policies 10.2.2-10.2.4, 10.2.8 and 10.6, together with the runFullTrust capability documentation. What certification requirements and supporting evidence apply to this distribution model? In particular, should the external tools be bundled in the MSIX instead of downloaded on first run, and what should the certification notes and runFullTrust justification disclose about the injected components and Windows API hooks?

We are asking for guidance before registering a Store developer account, not advance certification approval. If this scenario requires another official review channel, please direct us to it.

Thank you.