Freeze bundle verification

PTEM distributes climatology-surface bundles (SRI v1, Structural Regime Signals v1, and SRS Derived Views v1) with accompanying MANIFEST and FREEZE_META files. Every bundle must passverify_freeze_bundle_v1.sh before it can be shared with evaluation partners. Canonical climatology bundles are referenced via immutable S3 freeze prefixes and a LATEST.json pointer for stable programmatic access.

Scope / Intended use

The verifier replays manifest entries, re-hashes payloads, and confirms git provenance so capital teams can confirm that published manifests match the immutable artifacts they receive. It is not a scoring or modeling utility—just a governance helper for bundle acceptance.

Workflow

Freeze helpers enforce a clean git state by default. You can override with --allow-dirty, but the verifier supports --strict-clean to require pristine working trees when replaying the bundle.

# Verify a downloaded bundle with manifest/meta provenance
./scripts/verify_freeze_bundle_v1.sh   --bundle /path/to/bundle   --strict-clean

# Allow verification when the repo intentionally carries local edits
./scripts/verify_freeze_bundle_v1.sh   --bundle /path/to/bundle   --allow-dirty

The script checks MANIFEST entries against sha256 digests, confirms FREEZE_METApointers to git commits, and emits a signed receipt. PTEM requires a passing receipt before onboarding any climatology-surface bundle into client environments.