Forum Discussion
Bookshelf search blocked by Smart App Control (unsigned GRZ runtime)
I am seeing GraphRAG Zero health checks and Bookshelf search fail on Windows 11 when Smart App Control is enabled. Environment - Discovery App: 0.15.14-preview - GRZ runtime: 0.9.0-ci.202608...
Yes, this is a known compatibility issue. Smart App Control (SAC) in Windows 11 blocks unsigned or low‑reputation runtime components, which explains why your GRZ runtime modules (_internal_socket.pyd, _internal_ctypes.pyd, grz-worker.exe) are being denied. You may try using signed builds or enterprise‑grade App Control policies (WDAC/App Control for Business) instead of disabling SAC entirely.
https://textslashplain.com/2026/04/28/smart-app-control/