{
  "_comment": "Standalone per-ISO override for Windows 11. Windows 11 requires a virtual TPM (swtpm) and Secure Boot, more RAM, and nested-virtualization CPU flags. This can be merged into hiperiso.json under iso_overrides or kept as a separate override file under config/iso_overrides/.",

  "match": "*./windows11*.iso",

  "override": {
    "ram": 4096,
    "cpus": 4,
    "tpm": true,
    "secure_boot": true,
    "cpu_features": ["vmx"],
    "trace_level": "detailed",

    "qemu_extra_args": [
      "-chardev", "socket,id=chrtpm,path=/run/swtpm.sock",
      "-tpmdev", "emulator,id=tpm0,chardev=chrtpm",
      "-device", "tpm-tis,tpmdev=tpm0"
    ]
  }
}
