e83ce6bcf0
All checks were successful
Build SilverMetal Enhanced - Windows ISO / build (pull_request) Successful in 5m0s
Live e2e: in the sm-bootstrap session the taskbar showed and Win/Start worked. - Keyboard Filter EXEMPTS administrators by default and sm-bootstrap is an admin, so Win/Start/Alt-Tab etc. were never blocked. Set WEKF_Settings DisableKeyboardFilterForAdministrators=false so the filter applies to it. - Auto-hide the taskbar (default-user StuckRects3, inherited by sm-bootstrap) so it doesn't peek over the fullscreen wizard. - TearDownAsync now Disable-LocalUser's sm-bootstrap in-session (immediate) so it's unusable at once; the deferred SYSTEM task still deletes it on next boot (SAM-confirmed the delete works now). Verified: Configure-Kiosk parses under Windows PowerShell 5.1 (ASCII-clean); welcome 29/29. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
windows/installer
The custom packed-ISO build pipeline. See ../iso-builder.md for the design.
| File | Role |
|---|---|
build.ps1 |
Pipeline orchestrator (7 stages). Run on Windows + Windows ADK. |
inputs.manifest.json |
Pinned inputs — base ISO SHA-256, driver-pack/Stack/tool versions. The Microsoft ISO is an input, never committed. |
autounattend/autounattend.xml |
OOBE automation — local account (no MSA), regional, BitLocker-ready disk layout, hands off to first-boot. |
oem/SetupComplete.cmd |
First-boot entry point — runs the shared ../hardening/ modules, then schedules Verify. |
Usage (M2+):
.\build.ps1 -SourceIso 'D:\Win11_IoT_Enterprise_LTSC_x64.iso'
Current status: M0 scaffold — stages 2–7 throw NotImplemented until M2/M3.