# windows/installer

The custom packed-ISO build pipeline. See [`../iso-builder.md`](../iso-builder.md) for the design.

| File | Role |
|---|---|
| `build.ps1` | Pipeline orchestrator (7 stages). Run on Windows + Windows ADK. |
| `inputs.manifest.json` | Pinned inputs — base ISO SHA-256, driver-pack/Stack/tool versions. The Microsoft ISO is an **input, never committed**. |
| `autounattend/autounattend.xml` | OOBE automation — local account (no MSA), regional, BitLocker-ready disk layout, hands off to first-boot. |
| `oem/SetupComplete.cmd` | First-boot entry point — runs the shared `../hardening/` modules, then schedules `Verify`. |

**Usage (M2+):**
```powershell
.\build.ps1 -SourceIso 'D:\Win11_IoT_Enterprise_LTSC_x64.iso'
```

Current status: **M0 scaffold** — stages 2–7 throw `NotImplemented` until M2/M3.