build: add checked Windows desktop archive packaging

docs/ROADMAP.md

@@ -49,6 +49,11 @@ Status: implementation started; no production release yet. Windows VM tests use
 - [ ] Isolated extraction workers with timeouts and resource ceilings.
 
 ## 5. Release gates
+- [x] Windows desktop archive packager includes explicit runtime/helper files
+  and notices, checks architecture and records per-file checksums; excludes
+  model caches and user data. Controlled packaging regression tests pass.
+- [ ] Verify embedded-frontend Release archive launch outside the source tree,
+  clean-machine prerequisites, GPU dependencies, upgrades and signing.
 - [x] Preflight native license and the complete offline Google model pair before
   modifying staged resources; corrupted/missing assets preserve existing worker.
 - [ ] Atomic resource staging and interrupted-copy recovery for release bundles.