2.1 KiB
Independent packaged-runtime archive review — PASS
Reviewed 2026-09-13T00:39:13Z. Archive SHA256 671c1d4fb18f51b58c2ead1a9730605f27f13014ba0fe2e7b4360f24b61386a7, 183,262 bytes / 82 members. Parent-approved helper 0591d505ec929c74232982035842c4fe7a06406ed569181da4464704c2b21145 passed portable verify with the explicit archive hash, exit0.
An additional independent ZIP/original comparison confirmed exact unique/case-unique membership, every manifest byte/hash, all CRCs, all77 original files and four excluded external references. The whitelist is exactly the pinned runtime outputs, eight runtime helper/review/config files, three source-gate binding files and four generated records plus manifest. No executable/DLL, source/package ZIP payload, profile/temp/cache or GUI/native payload was included. Manifest SHA256 bb632cdafb7a33f78d4f289aa243f4f936663a8fee72c63c86d460c8894949a2; original inputs SHA256 9cd5bda75c33aa3c636dee2a632d84d70a8c7d7c695b9c6e0e456fe6be0de2ae.
The exact closed runtime result e42fb5fb8c15a9f603e9753e450613afce67caac5a0fbb806a9810ef272ec37a records23 distinct checks,13 HTTP exchanges and two owned processes intentionally terminated after acknowledged persistence; both actual exits are1 with no kill fallback. The helper binds owned loopback ports, original request/response/log hashes, expected/durable/restart bytes, source and package identities. Scope correctly excludes graceful shutdown, desktop alias transactions, nonempty model coverage, native paint and publication. The archive verifier checks historical records without importing or rerunning the server evaluator.
This reviewer executed only the portable archive verifier and independent read-only byte/hash comparisons, then wrote this review and independent-review.json. No server, compiler, Git, network or GUI execution occurred. Absent artifacts are only hash-referenced in portable verification; their current original bytes were additionally checked in this local independent review. Creator verification.json SHA256 772248f2b5231f1a96fd943cda36b2a97778fb24377099f81b311a341651e510 matches the reported creation receipt.