Distillation

Date: Sep 9, 2026

• 🔴 [requested-review] (13:03) User requested a read-only review of only src/institution_lab/governance_adjudication.py and tests/test_governance_adjudication.py; explicitly prohibited editing files.
• 🔴 (13:03) User stated this review replaces one twice-empty ZIP reviewer and has a smaller, disjoint scope.
• 🟡 (13:03) Review scope is limited to ZIP container structure and member-metadata validation: EOCD/ZIP64 policy; central-directory boundaries and full consumption; raw central filename identity; local-vs-central header agreement; NUL and Unicode path extra-field ambiguity; unsafe or colliding normalized paths; duplicate names; disk and encryption flags; unsupported flags and compression methods; and Unix non-regular/special file modes.
• 🟡 (13:03) User excluded decompression, CRC validation, decoded-size accounting, and data-descriptor parsing, except for defining the boundary required by a separate decoder.
• 🔴 (13:03) User stated the implementation must accept the current pinned archive: 19 members, Unix mode 100644, compression method DEFLATE, with data descriptors.
• 🟡 (13:03) User requested concrete minimal helper signatures, exact binary fields and offsets, validation order, normalized errors, and deterministic fail-first test mutations.
• 🔴 [enforced-output-contract] (13:03) User required either substantive guidance or BLOCKED: <exact tool/error>, with the response ending exactly SUBSTANTIVE or BLOCKED.
• 🟡 (13:04) User supplied a largely elided view of src/institution_lab/governance_adjudication.py; visible technical artifacts included _verify_input_payloads, _duplicates, _atomic_write, and an argparse.ArgumentParser description of "Validate frozen governance adjudication".