diff --git a/.claude/worktrees/agent-a0b3704687c5d0876 b/.claude/worktrees/agent-a0b3704687c5d0876
new file mode 160000
index 0000000..826961a
--- /dev/null
+++ b/.claude/worktrees/agent-a0b3704687c5d0876
@@ -0,0 +1 @@
+Subproject commit 826961ad26c7936427d78b3943ba95dce84f5e1d
diff --git a/.claude/worktrees/agent-a29df459f63568ed8 b/.claude/worktrees/agent-a29df459f63568ed8
new file mode 160000
index 0000000..d7fa3e7
--- /dev/null
+++ b/.claude/worktrees/agent-a29df459f63568ed8
@@ -0,0 +1 @@
+Subproject commit d7fa3e7b516399a184b75778022260bd433c8fb9
diff --git a/.claude/worktrees/agent-a304f853c4ef28acc b/.claude/worktrees/agent-a304f853c4ef28acc
new file mode 160000
index 0000000..4fdf94d
--- /dev/null
+++ b/.claude/worktrees/agent-a304f853c4ef28acc
@@ -0,0 +1 @@
+Subproject commit 4fdf94da4b7162566368f3a6132d6a8a2ab6dc41
diff --git a/.claude/worktrees/agent-a889fae99e2c827e4 b/.claude/worktrees/agent-a889fae99e2c827e4
new file mode 160000
index 0000000..2782b72
--- /dev/null
+++ b/.claude/worktrees/agent-a889fae99e2c827e4
@@ -0,0 +1 @@
+Subproject commit 2782b72ead5fa1db924f0412ffd0217bb50f6a96
diff --git a/.claude/worktrees/agent-aeb7695cc1b294236 b/.claude/worktrees/agent-aeb7695cc1b294236
new file mode 160000
index 0000000..fa31c2f
--- /dev/null
+++ b/.claude/worktrees/agent-aeb7695cc1b294236
@@ -0,0 +1 @@
+Subproject commit fa31c2f74119732ea178893b223e6a7646a90fa9
diff --git a/kickstart/veilor-os.ks b/kickstart/veilor-os.ks
index 58eec10..d97ab5c 100644
--- a/kickstart/veilor-os.ks
+++ b/kickstart/veilor-os.ks
@@ -173,6 +173,9 @@ ls -la "$SRC/assets" "$SRC/scripts" 2>&1 || echo "[ERR] assets/scripts missing i
 cp -a "$SRC/assets" "$DEST/usr/share/veilor-os/" || echo "[ERR] assets cp failed: $?"
 cp -a "$SRC/scripts" "$DEST/usr/share/veilor-os/" || echo "[ERR] scripts cp failed: $?"
 ls -la "$DEST/usr/share/veilor-os/" 2>&1 || echo "[ERR] dest dir missing post-cp"
+# Force root ownership on everything we copied — `cp -a` preserves
+# CI runner uid (1001), which makes sudo refuse to read /etc/sudoers.d.
+chown -R 0:0 "$DEST/etc" "$DEST/usr/share/veilor-os" "$DEST/usr/local/bin" "$DEST/usr/local/sbin" 2>&1 || echo "[WARN] chown failed"
 set +x
 
 # Persist nochroot log into installed system for diagnostics
diff --git a/overlay/etc/os-release.d/veilor b/overlay/etc/os-release.d/veilor
index 2966ef4..6946c2f 100644
--- a/overlay/etc/os-release.d/veilor
+++ b/overlay/etc/os-release.d/veilor
@@ -1,5 +1,5 @@
 NAME="veilor-os"
-PRETTY_NAME="veilor-os 0.1 (Fedora 43 base)"
+PRETTY_NAME="veilor-os 0.1"
 ID=veilor
 ID_LIKE=fedora
 VERSION="0.1"