> Pretty easy to script the entirety of the OS install and lockdown so that it was documented and repeatable.

What distro? It's niche enough of a use case. Have you considered releasing the code?