Archive integrity record
  coverage → approved bundle file list
  manifest → hashes/bundle.hashes.toml
  hash policy → declared algorithms and encodings
  validation → recompute each covered file; compare manifest
  gaps → missing bytes or unsupported algorithms remain explicit
  recovery → retained originals + documented restore procedure

Manifest file entry: relative path + measured size + actual digests.
Current specimen: illustrative; no byte verification.