diff --git a/.gitea/workflows/build-iso-windows.yaml b/.gitea/workflows/build-iso-windows.yaml
index 101a581..07545bf 100644
--- a/.gitea/workflows/build-iso-windows.yaml
+++ b/.gitea/workflows/build-iso-windows.yaml
@@ -95,8 +95,7 @@ jobs:
         run: |
           .\windows\installer\build.ps1 `
             -SourceIso '${{ steps.iso.outputs.path }}' `
-            -OutputIso "$env:RUNNER_TEMP\out\SilverMetal-Enhanced-Windows.iso" `
-            -SkipInputVerify
+            -OutputIso "$env:RUNNER_TEMP\out\SilverMetal-Enhanced-Windows.iso"
 
       - name: Validate baked payload (offline assertions)
         shell: pwsh
diff --git a/windows/installer/inputs.manifest.json b/windows/installer/inputs.manifest.json
index 90d8317..4b03910 100644
--- a/windows/installer/inputs.manifest.json
+++ b/windows/installer/inputs.manifest.json
@@ -6,7 +6,7 @@
   "baseImage": {
     "edition": "Windows 11 IoT Enterprise LTSC",
     "arch": "x64",
-    "isoSha256": "TODO-M2-pin-against-licensed-media",
+    "isoSha256": "2CEE70BD183DF42B92A2E0DA08CC2BB7A2A9CE3A3841955A012C0F77AEB3CB29",
     "wimImageName": "Windows 11 IoT Enterprise LTSC",
     "wimImageIndex": null
   },