Distillation

Date: Sep 9, 2026

• 🔴 [enforced-scope] (13:03) User stated this review replaces one twice-empty ZIP reviewer with a smaller, disjoint scope.
• 🔴 [requested-review] (13:03) User requested a read-only review of exactly src/institution_lab/governance_adjudication.py and tests/test_governance_adjudication.py; no files may be edited.
• 🟡 (13:03) User requested guidance limited to bounded ZIP-member decoding and integrity after a separate parser supplies trusted compressed-data slices and central metadata.
• 🟡 (13:03) Requested ZIP review topics: safe handling of STORED, DEFLATE, BZIP2, and LZMA, or a justified narrower codec allowlist; hard decoded-byte limits independent of declared sizes and ZipExtFile.read(n); compressed-stream EOF and trailing-byte validation; decoded-size and CRC verification; data-descriptor handling and boundaries for the current pinned archive; malformed or truncated streams whose decoded payload or CRC could otherwise match; and normalized codec exceptions.
• 🔴 [enforced-scope] (13:03) User explicitly excluded EOCD design, central-directory path/name validation, local-header validation, collision validation, and file-mode validation.
• 🟡 (13:03) User requested concrete minimal helper signatures, exact codec APIs and state checks, validation order, limits, normalized errors, and deterministic fail-first test mutations.
• 🔴 [enforced-output-format] (13:03) User required a substantive response or BLOCKED: <exact tool/error>, ending exactly with either SUBSTANTIVE or BLOCKED.
• 🟡 (13:04) User supplied contents from src/institution_lab/governance_adjudication.py for the requested review; visible symbols include _verify_input_payloads, _duplicates, _parse_json_object, _atomic_write, and argparse.ArgumentParser(description="Validate frozen governance adjudication").