# Source and artefact manifest

## Package purpose

This manifest records the provenance and SHA-256 identity of every copied
public asset. The `evidence/` files and `UPSTREAM-MPL-2.0.txt` were copied
byte-for-byte; wrapper documentation and the static page were authored for this
package. The package also includes judge-readable Markdown logbook pages that
restate the same evidence boundary and link to the preserved artefacts. No
numerical evaluation was run while creating this package.

## Package-only verifier

[`evidence/verify_stored_gms_evidence.py`](evidence/verify_stored_gms_evidence.py)
and its focused standard-library test
[`evidence/test_verify_stored_gms_evidence.py`](evidence/test_verify_stored_gms_evidence.py)
are package-authored. They recompute the immutable raw record's JSON structure,
configuration, ordered IDs, descriptive aggregates, paired aggregates, and
lower-counts without a source checkout, SciPy, network access, or numerical
evaluation. The verifier itself has no output-file dependency; its focused test
uses only temporary local fixtures. They do not validate the recorded upstream
hashes against source files, prove provenance, or establish paper-level claims.

## Copied public assets

| Package path | Source role | SHA-256 | Transfer |
| --- | --- | --- | --- |
| `evidence/gms-selected-ids-0-99.json` | Historical 100-ID GMS raw result | `c74851b88b5df723cbfb28edb48be09eb61e7a2dab086088f90d59591b68723b` | Byte-for-byte copy |
| `evidence/gms-selected-ids-0-99-validation.json` | Historical post-hoc validation record | `8e9c7263415799f6f5cd456696290f5034ff8670c77e17951ea6be5f584c07ee` | Byte-for-byte copy |
| `evidence/validate_gms_selected_result.py` | Separate post-hoc validator source | `80841d7e4395f60bcbf06880a92288ad7bfdd7e022ea60876911277f3b3e69e5` | Byte-for-byte copy |
| `UPSTREAM-MPL-2.0.txt` | Upstream MPL-2.0 licence text | `3f3d9e0024b1921b067d6f7f88deb4a60cbe7a78e76c64e3f1d7fc3b779b9d04` | Byte-for-byte copy |

## Recorded released-source identity (not vendored)

The raw result and validation record identify the upstream repository as
`https://github.com/zgbkdlm/diffres.git`, commit
`767effe3e755067eb8a04422597fbf37eb8ab754`. The validator's historical source
hash checks cover the following released files; they are **not** copied into
this package:

| Released path | SHA-256 |
| --- | --- |
| `diffres/integators.py` | `4cbcdba683cf27532b21acfa9c3295354c52cc2f4494b4063a0459629eb72954` |
| `diffres/resampling.py` | `12b33fe23e1f62e18909cbcff9fa45db36ed65f6f943668728c9fe61795aa06e` |
| `diffres/tools.py` | `54c60e1ac4f484532f51be57a63aacbdfb7a53ef8cef621495176ea7a843a5df` |
| `experiments/gms/baselines.py` | `7b258df0ab4a7ca8eb5c91f6d5efbabbe359e0130db1cb9e4d3263a9241f1d5c` |
| `experiments/gms/diffusion.py` | `886496bab31d254ac8030286ea350e48db817bd680cccc8cdda50c58a94ba774` |
| `experiments/rnd_keys.npy` | `6e60685445936e0380220f34fc3fd15b5b7720070dc8c8f7f1148575de4ff5df` |
| `experiments/run_gms.sh` | `c01a4c88a3ef05d6a5ffb585b9d4233b1b1a9e8c1c46d40360eab44963b3eee5` |
| `experiments/summary/print_gms_errs.py` | `1df81cadaaf35ca5b26e8bd1ce6fc19aa4a60a2f7e161075087e518b3a0d17cd` |

## Deliberate exclusions

The package does not include the upstream source tree, any virtual environment
or cache, numerical runners, model artefacts, partial GMS outputs, or any
LGSSM, CIFAR-10, Lokta, timing, or other study materials. It contains no upload
client or deployment script. The `pages/` files are authored Markdown summaries
of the included stored evidence, not additional numerical results.

## Integrity check

From the package root, run:

```sh
shasum -a 256 -c MANIFEST.sha256
```

`MANIFEST.sha256` covers every package file except itself. It is a packaging
integrity check only; it does not validate the underlying numerical result.