🐞 Windows 11 Smart App Control blocks unsigned Edge0 executables — request for supported installation method #207

# Title

🐞 Windows 11 Smart App Control blocks unsigned Edge0 executables — request for supported installation method

### Platform / backend
Windows 11 x64 / NVIDIA CUDA 13.5

### Model tier
Edge0-145B Q3_K (intended model; inference not yet started)

### Hardware / chip
NVIDIA GeForce RTX 5080, 16 GB VRAM

### RAM / unified memory
32 GB system RAM

### OS version
Windows 11 Pro 25H2

### Engine build
- Edge0 release downloaded: v0.2.0 Windows x64
- Source repository cloned with submodules.
- Strata CUDA build completed successfully.
- Build output: `[179/179] Linking CXX executable strata.exe`
- `strata.exe` exists.
- Authenticode status: `NotSigned`.
- `edge0-infer info` could not be obtained because the packaged executable was blocked before it could run.
- Exact source commit and engine version: Not yet available.

### How are you running it?
Attempting a native Windows installation using the official Windows release and a source-built CUDA Strata engine.

No inference session has started.

### Routing / LoRA options
Not applicable. The engine has not started, so routing and LoRA options have not been tested.

### What happened?

I am attempting to run Edge0-145B Q3_K natively on Windows 11 using an RTX 5080.

The official Edge0 Windows v0.2.0 release contains unsigned executables. Windows Smart App Control is enabled and blocks `edge0-infer.exe`.

I subsequently cloned the official repository, downloaded the pinned llama.cpp dependency, configured CUDA and successfully compiled the Strata target.

However, the resulting `strata.exe` is also unsigned.

Windows Code Integrity logs show:
- Event ID 3077: executable blocked by Code Integrity.
- Event ID 3033: executable did not meet Enterprise signing-level requirements.
- Event ID 3118: Smart App Control block details.
- Policy ID: `{0283ac0f-fff1-49ae-ada1-8a933130cad6}`

I want to run Edge0 entirely on native Windows without disabling Smart App Control, installing another operating system, or using WSL2.

**Expected behaviour:**

An officially supported Windows installation method that works with Smart App Control enabled, ideally through publisher-signed binaries.

### Steps to reproduce

1. Install Windows 11 Pro 25H2 with Smart App Control enabled.
2. Download the official Edge0 v0.2.0 Windows x64 release.
3. Attempt to run `edge0-infer.exe`.
4. Observe the Windows Application Control block.
5. Clone the official Edge0 repository with submodules.
6. Download the pinned llama.cpp dependency.
7. Configure the CUDA build using CUDA 13.5.
8. Run `cmake --build build --target strata`.
9. Observe successful compilation and linking.
10. Check the resulting executable using `Get-AuthenticodeSignature`.
11. Observe `Status: NotSigned`.

### Logs / stack trace / output

Build output:

`[179/179] Linking CXX executable strata.exe`

Authenticode:

`Status: NotSigned`

Code Integrity:
- Event 3077
- Event 3033
- Event 3118

Smart App Control state:

`On`

### Questions for maintainers

1. Do you provide Authenticode-signed Windows executables?
2. Is there a supported native Windows installation method compatible with Smart App Control?
3. Can you provide signed builds of both `edge0-infer.exe` and `strata.exe`?
4. Is there an officially supported way to use the source-built Strata engine with the Edge0 inference launcher without disabling Windows security?
5. Are signed Windows releases planned for future versions?

I would appreciate specific installation guidance for this configuration.