On Windows, syncing a read-only directory handle fails with Access is denied after a pending attestation has been saved. This prevents immediate attestation publication and also makes plaintext credential saves report failure after replacing the file.
Share platform-specific directory sync between the attestation and credential writers. Unix still syncs directory entries and reports failures; Windows skips the unsupported directory flush after file contents have been flushed.
Native Windows runtime verification remains outstanding.