These files preserve the parent download/content check described in the scope and result report. inspection.json is the successful inspector's raw output; download.json identifies release7/asset25; documents.json holds the previously reviewed 66 source-file hashes. The script performs read-only ZIP/hash checks and does not execute the product. It uses the binary pins from the separately reviewed build evidence. Its SHA-256 is 35f15e753c41146eb467e60f83f5b727811a12516126b448b83edd2a4fadd32c.

From this directory, with Python assertions enabled:

python -I -B inspect_studio_package.py PATH_TO_DOWNLOADED_ZIP --archive-sha256 5554e32533e3cb2c33fb4143a5a0902733d5a8d47577303cb2842d268e7bc76d --source 715036e132677dd2bc2fb37ed316d93dc9987aec --version 0.2.0-preview.integrated.20260924 --desktop-sha256 2c03bd6cc3f1110c219e4f57ab94874a121590f83779239a93289b7170664399 --server-sha256 6cebacc117e46fdab023c6402a5cebd6929fb55993ae8ff6b89cd1c6c1170237 --runtime-sha256 aa282fa47bb2c4e210cea5e470cdbdca58568f0be0bc73e404d86ab9cd95ef6a --documents-receipt documents.json

Gitea draft access requires an authorized account. Asset transport and integrity do not establish packaged GUI/server behavior. No Linux checks are included.