Independent navigation package review: preserved evidence
This is the exact whitelist archive of the artifact/server review summarized in the versioned report. The original producer archive is separate and unchanged. Root's later packaged GUI acceptance has its own record.
payload/ contains the original 38 reviewer payloads (1,147,293 bytes) plus their original evidence-manifest.json, copied from .local/navigation-package-review-20260911/. Every copied file was read back against the frozen original manifest. The payload includes the complete 559-file package hash map, frozen producer inputs, evaluator and launcher source, stdout/stderr and command receipts, seven HTTP response/body pairs, the single deliberately created persisted JSON envelope, and a process-absence record. It contains no executable, ZIP, extracted package, user profile or GUI captures. The zero-byte private store lock is retained as part of the original evidence whitelist.
Both independent invocations passed on the first attempt: artifact 23.938 seconds; server 5.844 seconds. The full model, SourceBundle, revision, ETag and durable bytes survived restart. Both owned server processes were explicitly terminated after acknowledged persistence, with recorded Windows exit code 1; no graceful-drain claim is made. The unchanged package claim ends before root's later native handoff.
Run python verify.py from this directory to verify only the preserved archive. It reads this archive's manifest, exact file hashes and receipt relationships, prints its result and writes nothing. It does not access the original workspace, producer source, ZIP, extracted package, toolchain, network or applications. It does not rerun artifact acceptance, server requests, tests or native checks. The historical scripts under payload/ are evidence and must not be treated as portable replay tools.
MANIFEST.json binds every archive file except itself. The original manifest is independently pinned at SHA256 0893f3a3f0c52bc65b6b9e4d2fabdb9e76c64db973ba074ef2f1e7625500250f. Local attributes preserve raw bytes through Git; the verifier does not claim Git readback, which belongs to the publication owner.