pack_verify.py, written from packaging §5–§11, SPEC and the bindings it cites and
sharing no code with wai-pack: the stage index's layout and rules, every object rule,
the version-1 and version-2 receipts (payload, hash, Ed25519 through the cryptography
package, imported only where a signature is checked), the supplied AV1 floor and its
key frames, the floor objects and the CMAF files rebuilt, every catalog re-rendered,
and the package's verification in §11.3's order. From the regenerated fixture it also
re-derives what only the source decides: the pieces, the rules, moments and class
plan, each base's SSE and step, and the encoder's choices.
The mutations' base and layers now carry real WIV1 and WIR1 payloads, so they meet
§6.2's counted-bytes rule, which a verifier applies after the other object rules; new
cases object-hash (a misnamed file) and object-lengths (a base whose payload is not
its format). wai-pack's objects verdict applies the rule too.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
dac5560877