This package preserves all 19 closed captures selected from .local/group-movement-gates: 14 recorded exit 0, and five recorded exit 101. Every run reports unchanged captured inputs. The five failures remain failures; their complete original receipts and streams are included. See the separate saved-view report for scope and native observations. These standard-library Python 3.10+ tools do not run Cargo, Git, archived source or executables.

Run	Recorded exit	Input files
core-1	0	722
core-2	101	729
core-3	0	729
desktop-1	101	727
desktop-2	101	728
desktop-3	0	729
desktop-4	0	729
desktop-5	0	729
format-1	0	729
format-2	0	729
lint-1	101	729
lint-2	0	729
lint-3	0	729
native-build-1	0	729
native-build-2	0	729
oracle-2	101	729
oracle-3	0	729
windows-build-1	0	729
windows-build-2	0	729

Core-3, desktop-4, format-1, lint-2, native-build-1 and windows-build-1 share the 729-file map 55a5f354bb5049a8c77ba9bafa833438ebf754649b0cf5d175d0c8dcfcedd7bb. Desktop-5, format-2, lint-3, native-build-2 and windows-build-2 share the distinct 729-file map 99dc46645236e674244e7c4867595a6000d3d85b54bcc9ab2b0c601923ecf66c. The source identity verifier compares those maps with Git commits 12a7352ddef5f69a144ead8219a50916233d63a9 and f6a6010baed9e6164a1fcc7ecd58256a562827d7, respectively. Earlier maps retain their own evidence scope; they are not reruns against the later source.

To validate this exact raw run list without writing a package, from the checkout root run:

python -B harness/experiments/multiselect-20260923/checks/prepare.py --root . --runs core-1 core-2 core-3 desktop-1 desktop-2 desktop-3 desktop-4 desktop-5 format-1 format-2 lint-1 lint-2 lint-3 native-build-1 native-build-2 oracle-2 oracle-3 windows-build-1 windows-build-2 --check-only

Missing closure, changed inputs, inconsistent receipts, unavailable exact helpers, and extra/unexpected run files are refused. Run names must be supplied, must be unique, and cannot contain path separators.

To create a package, use the same explicit --runs list, omit --check-only, and optionally supply --output PATH. The default output is this checks directory. An output package is not overwritten. --helper PATH can be repeated to supply an older gate helper whose exact pinned bytes are no longer the current helper. Default helper candidates are .local/group-movement-gates/*.py.

Verify a completed package anywhere, without the original checkout:

python -B PATH_TO_PACKAGE/verify.py

The packager preserves the seven original files per run: started/process/result receipts, stdout/stderr logs, the input map, and its source ZIP. It preserves the exact helper bytes named by each receipt. Only byte-identical input maps and ZIPs are deduplicated into hash-named capsules; their per-run logical mapping remains. ZIP member ordering and timestamps are fixed. Raw input/log bytes are unchanged.

manifest.json records the explicit run list, outcomes, commands, recorded HEADs, input counts, helper paths, logical mapping and every stored member pin. files.json pins prepare.py, verify.py, this README, the manifest and archive. The verifier checks safe exact ZIP membership (including nested source ZIPs), every recorded byte count/hash, input counts, the 71 vendored iced_widget files, start/process/finish order, receipt relationships, unchanged-input flags, helper identity, and exact ordered executable-artifact records parsed from Cargo JSON stdout. Missing JSON artifact records remain missing; they are not synthesized from paths or inferred from a successful exit. Non-null artifact readback pins are checked structurally; executable bytes are not included or independently verified by this package.

The source capsules are local historical input snapshots, including captured uncommitted work. A recorded HEAD alone does not identify their contents. They are not an integrated release, a hermetic toolchain distribution, or a claim that one run's gate applies to a later input map. Commands, paths, PIDs, times and artifact hashes are historical receipts, not authenticated execution records. The verifier checks their internal consistency and does not access historical absolute paths, contact services, extract archives or rerun tests. Pin integrity is not an external signature or proof against coordinated receipt alteration.

This package has no native interaction, focus, selection, movement, saved-model, Undo/Redo or full #29 acceptance implication. The native evidence and its independent evaluator belong in their separate reviewed record. The verification summary reports captured outcomes, including failures; it does not declare the feature or all captured gates successful.