{
  "status": "Current",
  "version": "2.0.4-wip",
  "roles": [
    "Operative",
    "Handler",
    "Intelligence Analyst",
    "Technical Operator",
    "Counterintelligence Officer",
    "Liaison Officer",
    "Logistics Specialist",
    "Source Handler"
  ],
  "authority_types": [
    "Civil administration",
    "Military command",
    "Commercial intelligence service",
    "International verification body",
    "Scientific or infrastructure consortium",
    "Independent investigative network"
  ],
  "collection_disciplines": [],
  "implementation_maturity": "Published WIP",
  "release": "IARPG-OPS-2",
  "revised_utc": "2026-07-20T12:04:07Z",
  "evidence_requirement": "Reviewable provenance required",
  "related_examples": [
    "port-access-anomaly-investigation"
  ],
  "accessibility_requirements": [
    "Essential information is available without reliance on color, audio, motion, or a VR-only gesture.",
    "Keyboard, screen-reader, reduced-motion, high-zoom, and print equivalents are documented where the interaction applies."
  ],
  "revision_history": [
    {
      "version": "2.0.3-wip",
      "date_utc": "2026-07-19T18:45:50Z",
      "note": "Initial IARPG-OPS-2 2.0.3-wip publication."
    },
    {
      "version": "2.0.4-wip",
      "date_utc": "2026-07-20T12:04:07Z",
      "note": "Reviewed for canonicalization, round-trip portability, recovery, provenance, compatibility, accessibility, hosting evidence, and stable-promotion gates."
    }
  ],
  "code": "PKG-02",
  "slug": "offline-package-integrity-verification",
  "title": "Offline Package Integrity Verification",
  "category": "Package Lifecycle",
  "summary": "Recalculate canonical component hashes, validate package manifests, explain mismatches, and preserve failed imports unchanged.",
  "keywords": [
    "offline",
    "package",
    "integrity",
    "verification"
  ],
  "mission_phases": [
    "Validate",
    "Deliver"
  ],
  "canonical": "https://iarpg.com/standard/offline-package-integrity-verification",
  "json": "https://iarpg.com/records/offline-package-integrity-verification.json",
  "requirements": [
    {
      "level": "MUST",
      "text": "Recalculate canonical component hashes, validate package manifests, explain mismatches, and preserve failed imports unchanged."
    },
    {
      "level": "MUST",
      "text": "The implementation preserve imported source content and unknown fields unless a user explicitly selects and records a transformation."
    },
    {
      "level": "SHOULD",
      "text": "The interface expose applicable standards, UTC event times, reason codes, and exportable machine-readable records."
    }
  ],
  "research": [
    {
      "label": "Evidence-based justice and review",
      "href": "/docs/report/justice-system-and-warrant-escalation-for-rogue-intelligence#strategic-fit-with-rogue-intelligence",
      "note": "Supports explainable reasons, evidence continuity, and reviewable consequences."
    },
    {
      "label": "Trust and explicit contract risk",
      "href": "/docs/report/trust-deception-and-virtual-economies#escrow-verification-and-reputation-systems",
      "note": "Supports transparent risk, escrow, verification, and durable transaction records."
    }
  ],
  "related": [
    "operation-package-format",
    "deterministic-fixture-conformance"
  ],
  "interaction_types": [
    "Verify",
    "Record",
    "Export"
  ],
  "conformance_level": "Level D — Simulatable",
  "purpose": "Recalculate canonical component hashes, validate package manifests, explain mismatches, and preserve failed imports unchanged.",
  "rationale": "Integrity-aware local tooling is useful only when state changes, conflicts, evidence custody, and release decisions remain inspectable and reversible.",
  "game_interaction": [
    "Verify",
    "Record",
    "Export"
  ],
  "inputs": [
    "Package manifest",
    "Canonical package components",
    "Declared digests"
  ],
  "outputs": [
    "Integrity report",
    "Component mismatch findings",
    "Package digest"
  ],
  "state_transitions": [
    {
      "from": "loaded",
      "event": "review requirement evaluated",
      "to": "verified-or-explicitly-unresolved"
    }
  ],
  "evidence_and_provenance": [
    "Every consequential result records source identifiers, UTC event time, canonical digest where applicable, responsible local action, and reason code.",
    "Integrity results distinguish equality from authenticity and never identify a human signer."
  ],
  "ui_requirements": [
    "Show source paths and both values for every conflict or difference.",
    "Never disable export of the original imported artifact because validation failed.",
    "Provide direct links to the canonical standard and machine-readable record."
  ],
  "telemetry_events": [
    {
      "name": "standard.offline-package-integrity-verification.evaluated",
      "required_fields": [
        "event_id",
        "timestamp_utc",
        "artifact_id",
        "record_code",
        "result",
        "reason_code"
      ]
    }
  ],
  "abuse_and_exploit_cases": [
    "A conflict is silently overwritten by source order.",
    "A checksum mismatch causes imported content to be rewritten.",
    "Unknown extension data is dropped during merge, migration, backup, or restore."
  ],
  "failure_behavior": "Fail closed for publication or irreversible merge output. Preserve every imported artifact, explain the failure, and permit export of the original plus the failure record.",
  "recovery_behavior": "Return to the last preserved source state, select or annotate an explicit resolution, recalculate affected digests, and record the new result without altering the originals.",
  "example_implementation": "The Offline Package Integrity Verification interface evaluates PKG-01, displays source evidence and reason codes, and exports a local JSON result."
}