CYBERDELIA SKUNKWORKS — PACKAGE CUSTODY NOTE
============================================

PACKAGE
Name: Cyberdelia Archive Integrity Verifier
Version: 0.1.0
Package ID: CDL-SW-0001
Class: cyberdelia-built
Status: released
Cyberdelia path: /ftp/software/built-here/cyberdelia-archive-integrity-v0.1.0/

WHAT THIS IS
Dependency-free Python command-line verifier for Cyberdelia-compatible archive manifests. It checks preserved local bytes against recorded SHA-256 values and byte counts, validates archive paths, and verifies provenance sidecars for both case-file manifests and collection manifests.

ORIGIN / PROVENANCE
Upstream author: Cyberdelia Skunkworks
Original source: https://cyberdeliaskunkworks.com/software-systems.html
Upstream version: 0.1.0
Retrieved: 2026-08-24

CYBERDELIA CUSTODY STATE
This file documents Cyberdelia's custody, testing, packaging, and archive state. It does not replace upstream documentation. Original README, LICENSE, CHANGELOG, manuals, source notices, and author material should remain preserved under upstream/ or their original package paths.

INTEGRITY
Package SHA-256: 96088b9947ceb4bffba656182a44c32d8c896a5c6e748e0db09e4ee65f6db15a
File hashes: see SHA256SUMS.txt
Manifest: MANIFEST.normalized.json

PLATFORM / REQUIREMENTS
Platforms: Linux; macOS; Windows
Architectures: architecture-independent
Dependencies: Python 3.10+ standard library
Required privileges: ordinary read access to the archive tree

CAPABILITIES
verify SHA-256 digests for objects marked verified; compare recorded and actual byte counts; validate that public mirror paths remain under the configured archive prefix; verify .provenance.json sidecars against local bytes; scan collection MANIFEST.json files recursively; return non-zero exit status on integrity failure for CI use

SECURITY / SYSTEM EFFECTS
Authorized use only where applicable. Security and diagnostic software should be used only on systems, networks, devices, or data the operator owns or is explicitly authorized to test.
Network effects: none; the verifier performs no network requests
Filesystem effects: read-only; no archive objects or manifests are modified
Cleanup / reversibility: none required
Known risks: a valid checksum proves byte integrity, not truth or safety of the archived content; very large archives require time proportional to bytes hashed

TEST / REVIEW STATE
Used by Cyberdelia archive integrity CI against repository-tier custody objects. Release workflow also checks the version command before packaging.

LICENSE / REDISTRIBUTION
License: MIT License
Redistribution: allowed
License source: https://opensource.org/license/mit
Notes: Cyberdelia-built source release; provided without warranty.

DOCUMENTATION
Upstream README: README-CYBERDELIA.txt
Manuals: README-CYBERDELIA.txt
Source code: verify_archive_integrity.py

CYBERDELIA TRANSFORMATIONS
Release package copies the canonical repository script without functional modification, then generates hashes and custody metadata.

CORRECTIONS / CONTACT
If this package is mislabeled, corrupted, out of date, missing provenance, or redistributed contrary to its license, report it through Cyberdelia's public corrections/contact routes.

Archive rule: source URL + preserved copy + retrieval metadata + checksum. Derivatives never silently overwrite originals.