SPARTAN Review Pack v0.1 — Demo Packet Verification Transcript
===============================================================

Demo artifact only. Generated 2026-05-18 from tracked synthetic sample inputs.
Repository base: origin/main @ 57681ebc54726ea6b1d18b0a00419657689c3ca0
Output folder (gitignored): .spartan/demo/review-pack-demo-2026-05-18/

This transcript records the build and the three independent verifications of
the demo Review Pack. No keys, signatures, or signed samples were created.


[BUILD] spartan review-pack build
-----------------------------------------------------------------
Command:
  node --import tsx src/spartan/cli.ts review-pack build \
    --capsule dist/spartan-sample-capsule-v0.1/evidence.tar.gz \
    --engagement docs/spartan/fixtures/review-pack-v0.1/engagement.demo.yaml \
    --out .spartan/demo/review-pack-demo-2026-05-18

Inputs (both tracked, synthetic demo material):
  - capsule:    dist/spartan-sample-capsule-v0.1/evidence.tar.gz
  - engagement: docs/spartan/fixtures/review-pack-v0.1/engagement.demo.yaml
                (pack_mode: demo)

Result:
  zip_path:              review-pack.zip
  sha256_path:           review-pack.zip.sha256
  zip_sha256:            3f8d33038091e4046cf1d3c936cfd9cbbbcebb11907ffa020c02e1c4fea8ead1
  manifest_entry_count:  9
  signature:             NOT_PRESENT
  replay:                NOT_PRESENT


[VERIFY 1] in-repo: spartan review-pack verify
-----------------------------------------------------------------
Command:
  node --import tsx src/spartan/cli.ts review-pack verify \
    review-pack.zip --sha256 review-pack.zip.sha256

Result:
  status:          VERIFY_PASS
  final_status:    VERIFY_PASS
  schema_version:  spartan.review_pack_verify_output.v0.1
  exit code:       0
  ordered checks:  SIDECAR_SHA256, ZIP_SAFETY, ZIP_EXTRACT, PACK_MANIFEST,
                   ENGAGEMENT, CAPSULE_VERIFY, DERIVED_ASSETS  -> all PASS
  errors:          []


[VERIFY 2] standalone: @higgs-ai/spartan-verify CLI
-----------------------------------------------------------------
Command:
  node --import tsx packages/spartan-verify/src/cli.ts \
    review-pack.zip --sha256 review-pack.zip.sha256

Result:
  status:          VERIFY_PASS
  final_status:    VERIFY_PASS
  schema_version:  spartan.review_pack_verify_output.v0.1
  exit code:       0
  Output JSON is byte-equivalent to VERIFY 1 — the standalone package wraps
  the same verifyReviewPack engine.


[VERIFY 3] Offline Verification Kit (built from source, no network)
-----------------------------------------------------------------
Kit build:
  cd packages/spartan-verify && npm run build:offline-kit
  -> dist/offline-kit/{cli.mjs, index.mjs, SHA256SUMS,
                       OFFLINE_VERIFY_README.md, RUNTIME_REQUIREMENTS.txt}

Command:
  node packages/spartan-verify/dist/offline-kit/cli.mjs \
    review-pack.zip --sha256 review-pack.zip.sha256

Result:
  status:          VERIFY_PASS
  final_status:    VERIFY_PASS
  schema_version:  spartan.review_pack_verify_output.v0.1
  exit code:       0


SUMMARY
-----------------------------------------------------------------
All three independent verifiers returned VERIFY_PASS with exit code 0.
The .sha256 sidecar matched the review-pack.zip bytes
(3f8d33038091e4046cf1d3c936cfd9cbbbcebb11907ffa020c02e1c4fea8ead1).

VERIFY_PASS here means internal pack consistency, derived-asset consistency,
and embedded Capsule v0.1 verification. It is NOT a signature, NOT origin
proof, and NOT a certification. See RECIPIENT_README.md.