diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index e3386f9..4496d8a 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -18,6 +18,8 @@ jobs:
 
       - name: Install Rust
         run: |
+          # Bypass execution policy for the current session
+          Set-ExecutionPolicy Bypass -Scope Process -Force
           $installDir = "$env:USERPROFILE\.cargo\bin"
           if (-not (Test-Path $installDir)) {
             Invoke-WebRequest -Uri "https://static.rust-lang.org/rustup/dist/x86_64-pc-windows-msvc/rustup-init.exe" -OutFile "rustup-init.exe"
@@ -27,27 +29,32 @@ jobs:
           Add-Content -Path $env:GITHUB_PATH -Value $installDir
 
       - name: Install LLVM
-        run: choco install llvm --no-progress
+        run: |
+          Set-ExecutionPolicy Bypass -Scope Process -Force
+          choco install llvm --no-progress
 
       - name: Build Client
         run: |
-          # Ensure cargo is in path for this specific shell session
+          Set-ExecutionPolicy Bypass -Scope Process -Force
           $env:Path = "$env:USERPROFILE\.cargo\bin;" + $env:Path
           cd client
           cargo build --release
 
       - name: Prepare Binaries for Installer
         run: |
+          Set-ExecutionPolicy Bypass -Scope Process -Force
           New-Item -ItemType Directory -Force -Path bin
           Copy-Item "client\target\release\meshvpn-client.exe" "bin\client.exe"
           Invoke-WebRequest -Uri "https://github.com/WireGuard/wintun/releases/latest/download/wintun.dll" -OutFile "bin\wintun.dll"
 
       - name: Install WiX Toolset
-        run: choco install wixtoolset --no-progress
+        run: |
+          Set-ExecutionPolicy Bypass -Scope Process -Force
+          choco install wixtoolset --no-progress
 
       - name: Build MSI Installer
         run: |
-          # Add WiX bin to path (common choco install path)
+          Set-ExecutionPolicy Bypass -Scope Process -Force
           $env:Path += ";C:\Program Files (x86)\WiX Toolset v3\bin"
           candle.exe installer\product.wxs -o installer\product.wixobj
           light.exe installer\product.wixobj -o meshvpn-client.msi