fixed msi pipeline

README.md

@@ -327,10 +327,21 @@ user has to insist. Buying a certificate would not silence it at once either:
 SmartScreen goes by reputation, and a fresh certificate has none until enough
 people have installed the application.
 
-Two things about the WiX project are worth knowing before touching it. It pins
-WiX 5 rather than the current 7: from version 6 the toolset asks every build to
-accept the Open Source Maintenance Fee licence — free below $10,000 of yearly
-revenue, but a decision for a person rather than for a build script. And it turns
-off three ICE validation rules: MSI still assumes an installation for the whole
-machine, and installing into the user's own profile trips rules that describe
-exactly what was intended here.
+Two things about the WiX project are worth knowing before touching it.
+
+It pins WiX 5 rather than the current 7: from version 6 the toolset asks every
+build to accept the Open Source Maintenance Fee licence — free below $10,000 of
+yearly revenue, but a decision for a person rather than for a build script.
+
+And it builds without MSI validation. The ICE checks run inside the Windows
+Installer service, which a build agent cannot reach: every check comes back as
+`WIX0217` and the build dies on close to a hundred of them. On an ordinary
+desktop machine the service does answer, and validation is one switch away:
+
+```powershell
+dotnet build Packaging\Installer\CursorLang.wixproj -p:SuppressValidation=false
+```
+
+Three of its rules stay suppressed even then. MSI assumes an installation for the
+whole machine, and installing into the user's own profile trips rules that
+describe exactly what was intended here.