| """Verify only release files listed in SHA256SUMS.json; no inference/upload.""" | |
| import hashlib, json | |
| from pathlib import Path | |
| ROOT=Path(__file__).resolve().parent | |
| def verify(): | |
| manifest=json.loads((ROOT/'SHA256SUMS.json').read_text()) | |
| for name,expected in manifest.items(): | |
| path=(ROOT/name).resolve() | |
| if not path.is_relative_to(ROOT):raise ValueError('Invalid release path') | |
| with path.open('rb') as stream:actual=hashlib.file_digest(stream,'sha256').hexdigest() | |
| if actual!=expected:raise ValueError('Checksum mismatch: '+name) | |
| print('Verified',len(manifest),'release files; no inference or upload.') | |
| return manifest | |
| if __name__=='__main__':verify() | |