diff --git a/scripts/package_release.sh b/scripts/package_release.sh
index 5eec5ba..f6149c3 100755
--- a/scripts/package_release.sh
+++ b/scripts/package_release.sh
@@ -129,14 +129,14 @@ fi
 
 # Copy Ventoy's runtime modules into the payload. The modsrc's GRUB
 # binary runs ventoy_check_official_device() at boot, which requires
-# `ventoy/ventoy.cpio` on the ESP. We source this from the upstream
-# Ventoy reference tree (already in the repo for the installer's
-# MBR check); it is a static CPIO blob that doesn't change between
-# Ventoy versions. Without this, the modsrc's GRUB halts with
-# "This is NOT a standard Ventoy device" before the menu ever renders.
+# `ventoy/ventoy.cpio` on the ESP. We vendor it under
+# `vendor/ventoy-runtime/` (sourced from upstream Ventoy 1.0.96, the
+# same version our modsrc is built from). Without this, the modsrc's
+# GRUB halts with "This is NOT a standard Ventoy device" before the
+# menu ever renders.
 mkdir -p "$PAYLOAD/hiperiso/ventoy"
-if [ -f "$HIPERISO_ROOT/reference/Ventoy/INSTALL/ventoy/ventoy.cpio" ]; then
-    cp "$HIPERISO_ROOT/reference/Ventoy/INSTALL/ventoy/ventoy.cpio" \
+if [ -f "$HIPERISO_ROOT/vendor/ventoy-runtime/ventoy.cpio" ]; then
+    cp "$HIPERISO_ROOT/vendor/ventoy-runtime/ventoy.cpio" \
        "$PAYLOAD/hiperiso/ventoy/ventoy.cpio"
 fi
 
diff --git a/vendor/ventoy-runtime/ventoy.cpio b/vendor/ventoy-runtime/ventoy.cpio
new file mode 100644
index 0000000..5b98223
Binary files /dev/null and b/vendor/ventoy-runtime/ventoy.cpio differ