# C323 archive-integrity and portable-replay review

Date: 24 September 2026. Status: **PASS**.

Scope: independently inspect the nine completed C314–C322 evidence ZIPs, verify their identity and predecessor chain, and replay their already completed calculations from freshly extracted frozen packet sources. No C323 research was performed; no sealed packet or source was changed.

| Packet | ZIP members | Manifest payloads | Certificate bindings | Main outputs identical | Independent output identical | Published artifacts |
|---|---:|---:|---:|---:|---:|---:|
| C314 | 29 | 28 | 16 | 2/2 | 1/1 | 3/3 |
| C315 | 29 | 28 | 15 | 2/2 | 1/1 | 3/3 |
| C316 | 29 | 28 | 15 | 2/2 | 1/1 | 3/3 |
| C317 | 28 | 27 | 15 | 2/2 | 1/1 | 3/3 |
| C318 | 28 | 27 | 15 | 2/2 | 1/1 | 3/3 |
| C319 | 29 | 28 | 15 | 2/2 | 1/1 | 3/3 |
| C320 | 29 | 28 | 15 | 2/2 | 1/1 | 3/3 |
| C321 | 29 | 28 | 15 | 2/2 | 1/1 | 3/3 |
| C322 | 31 | 30 | 16 | 2/2 | 1/1 | 3/3 |

All nine ZIPs pass CRC. All **252** manifested payload byte counts and SHA-256 hashes match, and every packaged payload matches its sealed workspace counterpart. The only intentionally unmanifested file per packet is its own `ARTIFACT_MANIFEST.json`.

All **137** certificate bindings match. Every link in **C313 → C314 → … → C322** matches both the frozen previous certificate and the preceding published ZIP's certificate. All **97** frozen source payloads match their source manifests and the original workspace inputs. Certificate assertion/source-check counts match their bound results.

Each packet was extracted into a fresh isolated audit directory. Its portable `evidence/check.py --out replay` succeeded, producing **18/18 byte-identical DATA/RESULTS outputs**. Each packaged independent script was then run with explicit `--sources` and `--out` arguments; **9/9 independent result files are byte-identical** to their sealed copies. This checks the packaged scripts and aliases themselves, including the possible late-file-update risk. All subprocess return codes are zero; no mismatches were found.

A separate receipt review confirms **27 unique successful publications**: report, checkpoint, and evidence ZIP for each of nine steps. Names and paths match package records; all 27 local delivered files match their package sizes/hashes and recorded write markers. C314's initial evidence-ZIP transfer failure is resolved by its successful retry, and its aggregate publication-complete record equals the two original successes plus the retry. No deliverable remains uncovered. Receipt verification is local; no remote read-back was performed.

The detailed JSON records each ZIP digest, per-packet certificate/source counts, executable replay commands' outcomes, output hashes, receipt hashes, and successful publication identifiers. The replay root is `/tmp/c323_archive_integrity_w8qk2e2u`. These repeatability and integrity checks are not additional historical witnesses or independent validation of interpretive/source-selection claims. The mathematical counts remain finite verification inventories.

Audit outputs: `C323_Archive_Integrity_Audit.py`, `C323_Archive_Integrity_Results.json`, and this review. Parent workflow is responsible for including these review artifacts in its final recovery packet and saving the completed deliverables.