#!/usr/bin/env bash

FIX7 P0 Codex Review Evidence Bundle - self-check (no network).

Authority: EVIDENCE_BUNDLE_NON_AUTHORITY. Read-only. Mutates no production.

set -u cd "$(dirname "$0")" || exit 99 rc=0 echo "== FIX7 P0 Codex Review Evidence Bundle - self-check =="

1) Recompute this bundle's packet_tree from HASH_MANIFEST.txt

calc_tree=$(shasum -a 256 HASH_MANIFEST.txt | awk '{print $1}') want_tree=$(awk '{print $1}' packet_tree.sha256) if [ "$calc_tree" = "$want_tree" ]; then echo "PASS bundle packet_tree = $calc_tree" else echo "FAIL bundle packet_tree: calc=$calc_tree want=$want_tree"; rc=1 fi

2) Verify every listed bundle file hash

if shasum -a 256 -c HASH_MANIFEST.txt; then echo "PASS bundle HASH_MANIFEST file hashes" else echo "FAIL bundle HASH_MANIFEST file hashes"; rc=1 fi

3) External expected trees/digests for reviewer cross-check (verify via RERUN.sh against KB)

echo "== External expected (verify fresh-from-KB via RERUN.sh) ==" echo "dryrun_tree 02b200e5a3c7a21c2e620b293fbf28ccc81731a983430c3e5a202798c05e94e6" echo "planning_tree f470d0d019f9af63794ce943a64ea08ff31a17906a7857f4124d0b1e14a0fe8f" echo "seal_tree 3890cd3467720b3f2c105625e2e1dc627fd2e7fdfb74d9059bad95bece12a234" echo "N7 efb0c5747ae5f56c0e8b5d99c35438a3d6231253570e6ab4d2658ab9e1853d32" echo "N8 daa70c39a91a64696fb1a24ca2d3f620d04049583c9047689902ebf26117e1a1" echo "P7 9ddb27c35a06ca11ee616e3b0399c705d0d97f5b8f284c12045c396f7c034550"

if [ "$rc" -eq 0 ]; then echo "OVERALL PASS"; else echo "OVERALL FAIL"; fi exit $rc