diff --git a/app/igneum-app/src/powertask.rs b/app/igneum-app/src/powertask.rs
index 5b71961e7..7b8ec78ad 100644
--- a/app/igneum-app/src/powertask.rs
+++ b/app/igneum-app/src/powertask.rs
@@ -439,6 +439,11 @@ mod tests {
         assert!(!s.contains("-Trigger"), "no trigger: only the app starts it");
         assert!(s.contains("-MultipleInstances IgnoreNew") && s.contains("-ExecutionTimeLimit"), "{s}");
         assert!(s.contains(&format!("-TaskName '{TASK_NAME}'")));
+        // no window at logon or at a start (the project lead, 7 October 2026, PC 2's Terminal window): the action is the app's own exe,
+        // a windows-subsystem program with no console, never powershell.exe, cmd.exe or a `start` of a batch file
+        assert!(s.contains("-Execute 'C:\\p\\igneum-app.exe' -Argument '--power-helper'") || s.contains("-Argument '--power-helper'"), "{s}");
+        assert!(!s.contains("powershell.exe") && !s.contains("cmd.exe") && !s.contains("cmd /c start"), "the task's action must be the exe itself: {s}");
+        assert!(s.contains("-Hidden"), "the task is hidden in the scheduler too");
         // the registered probe also wants the action's exe on disk and the task enabled (the stale-task class)
         let q = query_command();
         assert!(q.contains("Test-Path (($t.Actions[0].Execute).Trim") && q.contains("$t.State -ne 'Disabled'") && q.contains("exit 1"), "{q}");