# ANDDAV OS 1.0 — matching source and build material

Target image: build-20261022T235821Z-ZkCnJ2, SHA-256 `f0525d8588d60858575553edee70a00e814c55a39c850a3bd576147f123ec842`.

The source archive contains original Debian source packages: signed `.dsc` descriptors and the tarballs/patch archives they identify. The inventory includes sources for installed packages, Built-Using/Static-Built-Using references and ISO boot components. File inventories record origin URLs, exact versions and SHA-256 values.

To inspect a package, extract the outer source archive, install Debian's `dpkg-dev` tools, and run `dpkg-source -x path/to/package_version.dsc`. Install its declared build dependencies in a suitable Debian 13 build environment before building. Consult each package's `debian/rules`, `debian/control`, source format and documentation. Building individual packages is distinct from building the ANDDAV live ISO.

The release configuration archive contains the actual `config/` used by live-build, including ANDDAV scripts, artwork, hooks, defaults and package lists. The accompanying `anddav-build.sh`, build log, package manifest and build-tool version record describe the ISO process. Build in a separate Debian environment with sufficient disk space; hooks run as root. Do not run the build on a production system or replace your existing configuration accidentally.

This is the material for the tested image, not a guarantee of bit-for-bit reproducibility. Repository contents, timestamps and tool versions affect a later build. The configuration and build script retain their recorded paths; review these before adapting them to another machine.

Firmware source packages may include redistributable proprietary firmware binaries and packaging rather than unavailable upstream source. Each component's licence remains applicable. ANDDAV branding does not acquire a public reuse licence through this archive.

The source download must remain available alongside the ISO. Do not publish the ISO alone while withholding the matching source/customisation material. This download arrangement is used instead of making an unfulfilled promise to supply source later.