My understanding is you need to re-certify in some form upon changing anything about the code. I'm not sure if it's the same process each time or if you can do

My understanding is you need to re-certify in some form upon changing anything about the code. I'm not sure if it's the same process each time or if you can do some kind of incremental re-certification for minor updates. Either way, Microsoft can afford to do that if they want to. But I would (naively) expect the rules to apply to anyone who wants to modify the code base, I don't think Microsoft has any privileged position when it comes to that.