# Offline framework evaluation distribution

Shared suite 3.0.0 records 123/123 passing checks across LangGraph, CrewAI and
Microsoft AutoGen AgentChat/Core: 41 per framework, including 26 native calls.
The public candidate verifies 81 re-sealed records bound to three signed exports.
This is a local candidate handoff, qualified on Darwin/arm64. It has not been
published. The verifier source is included inside the external package; the
proprietary producer and internal kit are excluded.

The suite includes journal pre-append rejection, saturation and errors after
durable append, with refusal before simulated dispatch and retry after recovery.
Faults are injected at the journal Record API. Physical storage failures,
receipt-write failures and revocation of existing grants are outside the suite.

## Verify offline

First compare the distribution ZIP digest with a digest received through a channel
you trust. The adjacent checksum file alone does not authenticate a publisher.
After extraction, from this directory on macOS:

```sh
shasum -a 256 -c SHA256SUMS
unzip external-evaluation-package-v5-20261016.zip
unzip control-evidence-map-v3-20261016.zip
sandbox-exec -p '(version 1) (allow default) (deny network*)' python3 -S external-evaluation-package-v5-20261016/verify.py --expected-manifest-sha256 c5d734d0bed1be9a136a4d73cb033b0513eef419826f068efe7e6db9fd358837
sandbox-exec -p '(version 1) (allow default) (deny network*)' python3 -B control-evidence-map-v3-20261016/verify-map.py --package external-evaluation-package-v5-20261016 --check control-evidence-map-v3-20261016 --expected-map-sha256 5a5e12f1dbb79a8bb7040fdea1a8d53f50dd6f1b9567f45291f42da83e2f4003
```

These checks read the supplied artifacts and send no emails. The mapping checker
currently requires macOS sandbox-exec. The external package's VERIFY.md gives the
public-source rebuild and verifier override instructions; other host targets have
not been executed in this handoff. Keep any rebuilt binary outside the extracted
package so its inventory stays unchanged.

A successful check reports CONSISTENT without independent attestation. Bundled
keys establish consistency; signer identity requires separately trusted keys.
Verification does not establish capture completeness, truthful inputs, real
external effects, execution of the omitted source, independent reproduction or
OWASP endorsement. Receipt-chain seals remain unverified. The mapping is AAES's
interpretation and carries a checksum inventory without a new digital signature.

DISTRIBUTION.md recommends the repository, release-asset and website layout.
release-assets.json records the exact artifact and index digests. The intended
public URLs remain unset until actual publication and download verification.