Filament mixer polynomial model
================================

The bundled assets/mixer_model.npz contains the polynomial coefficients from
Snapmaker Orca's filament_mixer_model.h.

MIT License

Copyright (c) 2026 Justin Hayes

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.


Filament candidate database
===========================

The bundled
`resources/filament_db/filament_color_database_2026-08.sqlite`
contains two attributed colour-data source groups and a separate dated table
of manufacturer-qualification evidence:

- Open Filament Database catalog data
  Existing PLA base snapshot: v2026.07.31
  PLA/ABS/PETG extension snapshot: v2026.08.16
  Copyright © 2025 OpenFilamentCollective
  License: MIT
  Source: https://github.com/OpenFilamentCollective/open-filament-database
  Explicit license text:
  `_internal/resources/filament_db/LICENSE_OPEN_FILAMENT_DATABASE.txt`

- FilamentColors.xyz physical swatch data
  Scope: 41 measured PLA swatches, with an individual source URL retained for
  every row
  License: Creative Commons Attribution 4.0 International (CC BY 4.0)
  Source and licensing statement: https://filamentcolors.xyz/about/
  Explicit license text:
  `_internal/resources/filament_db/LICENSE_CC_BY_4.0.txt`
  Attribution and modifications:
  `_internal/resources/filament_db/ATTRIBUTION.md`

The measured subset was selected and normalized, and HEX values were used to
derive Lab and CIEDE2000/Delta E matching values. The original measured-data
build date is 2026-08-07; the material extension build date is 2026-08-19.
Amazon.co.jp ratings/review counts qualify only the four added manufacturers
and are stored separately from colour data. Candidate results are
informational; neither catalog status nor inclusion in the database guarantees
current stock or printed-color accuracy.


Bundled runtime dependency index
================================

The portable Windows build also contains the following third-party software.
In the current PyInstaller one-folder layout, this index and the explicitly
copied governing texts are stored under `_internal/licenses/`. The Japanese
volume-processing notice is stored as
`_internal/THIRD_PARTY_VOLUME_LICENSES_JA.md`. License files that PyInstaller
preserves from a dependency also remain at their original paths below `_internal/`
(for example, `_internal/numpy-2.5.1.dist-info/licenses/` and
`_internal/_tk_data/license.terms`). The entries and source links below identify
the applicable terms and the explicitly copied texts.

- CPython 3.13.14 and its standard library
  License: Python Software Foundation License Version 2
  Complete runtime-supplied license and incorporated-code notices:
  `_internal/licenses/cpython/LICENSE.txt`
  Source: https://github.com/python/cpython/tree/v3.13.14

- bzip2 / libbzip2 1.0.8 carried by CPython's `_bz2` module
  License identifier: bzip2-1.0.6
  Exact text: `_internal/licenses/LICENSE_CPYTHON_BZIP2.txt`
  Source revision:
  https://github.com/python/cpython-source-deps/tree/05301997b2f9590f49c672cf3dfd3d3dfa7ad521

- XZ Utils liblzma 5.2.5 carried by CPython's `_lzma` module
  License status: public domain, as stated by the exact upstream COPYING file
  Exact notice: `_internal/licenses/LICENSE_CPYTHON_XZ.txt`
  Source revision:
  https://github.com/python/cpython-source-deps/tree/c6bc0c612605622aaef101a33a751f9de2ecc193

- Expat 2.8.1 carried by CPython's `pyexpat` and `_elementtree` modules
  License: MIT
  Exact text: `_internal/licenses/LICENSE_CPYTHON_EXPAT.txt`
  Source revision:
  https://github.com/python/cpython/tree/fd17997c3866d61e0e7bd8201b1d8f35b40a40bd/Modules/expat

- libmpdec 4.0.0 carried by CPython's `_decimal` module
  License: BSD-2-Clause
  Exact text: `_internal/licenses/LICENSE_CPYTHON_LIBMPDEC.txt`
  Source revision:
  https://github.com/python/cpython-source-deps/tree/780e21d43a92832d12c2add68fcc8e03cee38bcf

- Tcl/Tk 8.6 (used by tkinter)
  License: Tcl/Tk BSD-style license
  Exact text: `_internal/licenses/tcl-tk/license.terms`
  Source: https://www.tcl.tk/software/tcltk/

- NumPy 2.5.1
  License expression: BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0
  NumPy wheels also include separately licensed numerical runtime components;
  their notices are preserved under
  `_internal/numpy-2.5.1.dist-info/licenses/`.
  Reviewed wheel license bundle: `_internal/licenses/numpy/LICENSE.txt`
  Source: https://numpy.org/

- SciPy 1.18.0
  License: BSD-3-Clause, with separately licensed bundled components listed in
  SciPy's complete LICENSE.txt.
  Source: https://scipy.org/

- Pillow 11.2.1
  License expression: HPND
  Source: https://python-pillow.github.io/

- resvg-py 0.2.0 and its resvg/usvg Rust dependency closure
  Source-only development dependency for the hidden Decal beta implementation.
  It is intentionally excluded from the public r32 frozen application because
  no public menu, button, shortcut, or callback can invoke that feature.
  resvg-py license: MIT
  resvg/usvg license: Apache-2.0 OR MIT
  Sources: https://github.com/briceyan/resvg-py/tree/v0.2.0 and
  https://github.com/linebender/resvg/tree/v0.47.0

- Controlled PyTetWild 0.3.0 static/header closure for
  `PyfTetWildWrapper.pyd`
  Current closure state: `release_gate.status=release-approved` and
  `release_eligible=true`. The exact controlled wheel SHA-256 and extension
  PYD SHA-256 are bound by `tooling/pytetwild_static_closure.json`; the runtime
  validator separately requires the canonical application lock to pin that
  same wheel SHA-256.
  The previously audited upstream PyPI wheel/PYD remains historical audit
  evidence only and is excluded from release approval.

  The controlled package contract records 20 components and requires all 29
  byte-exact licence/notice assets to be packaged below
  `_internal/licenses/pytetwild-closure/`. Material component families and
  their selected license expressions are:

  - PyTetWild and fTetWild: MPL-2.0
  - nanobind: BSD-3-Clause; Tessil robin-map: MIT
  - fmt and spdlog: MIT
  - libigl: MPL-2.0; libigl predicates: LicenseRef-Shewchuk-Public-Domain
  - Geogram: BSD-3-Clause
  - Geogram-vendored AMGCL, libMeshb, RPly, and xatlas: MIT
  - Geogram-vendored zlib: Zlib
  - Geogram-vendored stb_image and stb_image_write:
    MIT OR LicenseRef-STB-Public-Domain
  - Geogram-vendored PoissonRecon: BSD-3-Clause
  - oneTBB: Apache-2.0
  - jdumas/json (nlohmann JSON fork): MIT
  - Eigen: MPL-2.0 under the controlled `EIGEN_MPL2_ONLY=ON` build route

  The exact component, version, dependency, source-archive, asset-path, byte
  count, and SHA-256 records are in
  `tooling/pytetwild_static_closure.json`. This approval is limited to the
  controlled PyTetWild closure and does not by itself approve a frozen
  application or software archive for publication.
  Source: https://github.com/pyvista/pytetwild
  Upstream fTetWild source: https://github.com/wildmeshing/fTetWild

- tetgen 0.8.3 Python wrapper
  License: MIT
  Explicit license text: `_internal/licenses/tetgen/LICENSE`
  Source: https://github.com/pyvista/tetgen/tree/v0.8.3

- TetGen C++ 1.6.0 carried by the tetgen 0.8.3 wheel
  License: GNU Affero General Public License version 3 or later
  (AGPL-3.0-or-later), or a separate commercial license from WIAS
  TetGen notice and complete AGPL text:
  `_internal/licenses/tetgen/tetgen-license`
  Explicit AGPL/TetGen text: `_internal/licenses/AGPL-3.0.txt`
  License FAQ: https://wias-berlin.de/software/tetgen/FAQ-license.jsp

- PyMeshLab 2025.7.post1 and the MeshLab components in its wheel
  License: GNU General Public License version 3 (GPL-3.0)
  Wheel-supplied license text: `_internal/licenses/pymeshlab/LICENSE`
  Source: https://github.com/cnr-isti-vclab/PyMeshLab

- MeshLab and VCGLib components carried by PyMeshLab 2025.7.post1
  License: GPL-3.0-only
  Exact source revision:
  https://github.com/cnr-isti-vclab/meshlab/tree/d876376e3cc4f92d257e248023d82cbac5b03c7d
  The matching release corresponding-source archive preserves MeshLab's
  LICENSE.txt and the exact dependency source inputs described below.

- Qt 5.15.2 libraries shipped inside the PyMeshLab wheel
  Distribution route selected for this package: LGPL-3.0-only
  Exact Qt LGPL text: `_internal/licenses/LICENSE_QT_LGPL_3_0.txt`
  Qt runtime notice: `_internal/licenses/NOTICE_QT.txt`
  Replacement instructions: `_internal/licenses/RELINKING_EN.md`
  Exact source archive: qt-everywhere-src-5.15.2.tar.xz
  SHA-256: 3a530d1b243b5dec00bc54937455471aaa3e56849d2593edb8ded07228202240
  Source: https://download.qt.io/archive/qt/5.15/5.15.2/single/

- Qt ANGLE runtime carried by Qt 5.15.2
  License: BSD-3-Clause
  Exact text: `_internal/licenses/LICENSE_QT_ANGLE.txt`
  Source: https://download.qt.io/archive/qt/5.15/5.15.2/single/

- Mesa llvmpipe runtime carried by Qt 5.15.2
  Version: 12.0.0-rc2
  License expression: MIT AND BSL-1.0
  Exact license: `_internal/licenses/LICENSE_MESA_12_0_RC2.html`
  Runtime provenance: `_internal/licenses/NOTICE_MESA_LLVM.txt`
  Source: https://gitlab.freedesktop.org/mesa/mesa/-/tree/mesa-12.0.0-rc2

- LLVM 3.6.2 statically linked into the Mesa llvmpipe runtime
  License: NCSA
  Exact text: `_internal/licenses/LICENSE_LLVM_3_6_2.txt`
  Runtime provenance: `_internal/licenses/NOTICE_MESA_LLVM.txt`
  Source: https://releases.llvm.org/3.6.2/

- Intel Embree 4.3.3
  License: Apache-2.0
  Generic Apache-2.0 text: `_internal/licenses/LICENSE_RESVG_APACHE_2.0.txt`
  Source: https://github.com/RenderKit/embree/tree/v4.3.3

- oneTBB 2021.11.0 carried by the Embree 4.3.3 Windows package used by PyMeshLab
  License: Apache-2.0
  Generic Apache-2.0 text: `_internal/licenses/LICENSE_RESVG_APACHE_2.0.txt`
  Source: https://github.com/uxlfoundation/oneTBB/tree/v2021.11.0
  Source commit: 8b829acc65569019edb896c5150d427f288e8aba

- Xerces-C++ 3.2.4
  License: Apache-2.0
  Generic Apache-2.0 text: `_internal/licenses/LICENSE_RESVG_APACHE_2.0.txt`
  Exact upstream notice: `_internal/licenses/NOTICE_XERCES_C_3_2_4.txt`
  Source: https://github.com/apache/xerces-c/tree/v3.2.4

- lib3mf 2.4.1
  License: BSD-2-Clause
  Exact text: `_internal/licenses/LICENSE_LIB3MF.txt`
  Source: https://github.com/3MFConsortium/lib3mf/tree/v2.4.1

- cpp-base64 V2.rc.08 statically linked into lib3mf 2.4.1
  License: Zlib
  Exact text: `_internal/licenses/LICENSE_LIB3MF_CPP_BASE64.txt`
  Source: https://github.com/ReneNyffenegger/cpp-base64/tree/V2.rc.08

- fast_float 6.0.0 statically linked into lib3mf 2.4.1
  License: MIT
  Exact text: `_internal/licenses/LICENSE_LIB3MF_FAST_FLOAT.txt`
  Source: https://github.com/fastfloat/fast_float/tree/v6.0.0

- zlib 1.3.1 statically linked into lib3mf 2.4.1
  License: Zlib
  Exact text: `_internal/licenses/LICENSE_LIB3MF_ZLIB.txt`
  Source revision:
  https://github.com/3MFConsortium/lib3mf/tree/20c335489c69d15c64f3eaf1e15143b8176901f5/submodules/zlib

- libzip 1.10.1 statically linked into lib3mf 2.4.1
  License: BSD-3-Clause
  Exact text: `_internal/licenses/LICENSE_LIB3MF_LIBZIP.txt`
  Source: https://github.com/nih-at/libzip/tree/v1.10.1

  The exact LIB3MF_LINK release archive is SHA-256 pinned by
  `tooling/meshlab_windows_external_archives.lock.json`. It contains the
  compiled `Libraries/cpp-base64`, `Libraries/libzip`, and fast_float 6.0.0
  source and governing texts, including:
  `Libraries/cpp-base64/cpp-base64_V2.rc.08.txt`,
  `submodules/cpp-base64/LICENSE`, `Libraries/libzip/Source/zip_add.c`,
  `Libraries/libzip/libzip_v1.10.1.txt`,
  `submodules/fast_float/CMakeLists.txt`, and
  `submodules/fast_float/LICENSE-MIT`.

- GMP 5.0.1
  License expression: LGPL-3.0-or-later OR GPL-2.0-or-later
  LGPL-3.0 text: `_internal/licenses/LGPL-3.0.txt`
  Source: https://gmplib.org/

- MPFR 3.0.0
  License: LGPL-3.0-or-later
  LGPL-3.0 text: `_internal/licenses/LGPL-3.0.txt`
  Source: https://www.mpfr.org/mpfr-3.0.0/

- MPIR 3.0.0 carried by the PyTetWild repaired wheel
  License expression: LGPL-3.0-or-later AND GPL-3.0-or-later
  LGPL-3.0 and GPL-3.0 texts:
  `_internal/licenses/LGPL-3.0.txt`, `_internal/licenses/GPL-3.0.txt`
  Source: https://github.com/wbhart/mpir/tree/mpir-3.0.0

- libE57Format 3.1.1
  License: BSL-1.0
  Exact text: `_internal/licenses/LICENSE_LIBE57FORMAT_3_1_1.md`
  Source: https://github.com/asmaloney/libE57Format/tree/v3.1.1

- GLEW 2.2.0
  License expression: BSD-3-Clause AND MIT
  Exact combined upstream text: `_internal/licenses/LICENSE_GLEW_2_2_0.txt`
  Source: https://github.com/nigels-com/glew/tree/glew-2.2.0

- lib3ds 1.3.0
  License: LGPL-2.1-or-later
  LGPL-2.1 text: `_internal/licenses/LGPL-2.1.txt`
  Source pin:
  https://github.com/cnr-isti-vclab/meshlab/blob/d876376e3cc4f92d257e248023d82cbac5b03c7d/src/external/lib3ds.cmake

- U3D 1.5.2
  License: Apache-2.0
  Exact text: `_internal/licenses/LICENSE_U3D.txt`
  Embedded dependency notice: `_internal/licenses/NOTICE_U3D_ADDITIONAL.txt`
  Source: https://github.com/alemuntoni/u3d/tree/1.5.2

- zlib 1.2.8 statically linked into U3D IFXCore
  License: Zlib
  Exact text: `_internal/licenses/LICENSE_U3D_ZLIB.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/tree/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Dependencies/zlib

- libpng 1.6.2 statically linked into U3D IFXCore
  License: Libpng
  Exact text: `_internal/licenses/LICENSE_U3D_LIBPNG.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/tree/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Dependencies/png

- Independent JPEG Group JPEG release 9 statically linked into U3D IFXCore
  License: IJG
  Exact terms and notice: `_internal/licenses/LICENSE_U3D_IJG_JPEG.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/tree/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Dependencies/jpeg

- FNVHash revision 1.5 statically linked into U3D IFXCore
  License: LicenseRef-FNV-Public-Domain
  Exact notice: `_internal/licenses/NOTICE_U3D_FNVHASH.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/blob/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Dependencies/FNVHash/FNVPlusPlus.h

- Jonathan Richard Shewchuk robust predicates dated 1996-05-18, statically
  linked into U3D IFXCore
  License: LicenseRef-Shewchuk-Public-Domain
  Exact notice: `_internal/licenses/NOTICE_U3D_SHEWCHUK_PREDICATES.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/blob/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Dependencies/Predicates/predicates.cpp

- wcmatch 0.5 statically linked into U3D IFXCore
  License: LicenseRef-WCMATCH-Freeware
  Exact terms: `_internal/licenses/LICENSE_U3D_WCMATCH.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/tree/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Dependencies/WildCards

- Graphics Gems IV Delaunay code (1994), modified in U3D IFXCore
  License expression: Apache-2.0 AND LicenseRef-Graphics-Gems-Unrestricted
  Exact texts: `_internal/licenses/LICENSE_U3D.txt`,
  `_internal/licenses/NOTICE_U3D_GRAPHICS_GEMS_IV.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/blob/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Component/Generators/Glyph2D/CIFXQuadEdge.cpp

- Nick Bobic quaternion code (1998-02), modified in U3D IFXCore
  License expression: Apache-2.0 AND Zlib
  Exact texts: `_internal/licenses/LICENSE_U3D.txt`,
  `_internal/licenses/LICENSE_U3D_NICK_BOBIC_QUATERNION.txt`
  Source revision:
  https://github.com/alemuntoni/u3d/blob/b0de4e7f829228d09552bd012c7376dd1d27c584/RTL/Kernel/Include/IFXQuaternion.h

  The exact U3D_LINK 1.5.2 tag archive is SHA-256 pinned by
  `tooling/meshlab_windows_external_archives.lock.json` and contains all five
  source files and their in-source governing notices listed above.

- muparser 2.3.5
  License: BSD-2-Clause
  Exact text: `_internal/licenses/LICENSE_MUPARSER_2_3_5.txt`
  Source: https://github.com/beltoforion/muparser/tree/v2.3.5

- ModernGL 5.12.0
  License: MIT
  Source: https://github.com/moderngl/moderngl

- glcontext 3.0.0
  License: MIT
  Source: https://github.com/moderngl/glcontext

- Trimesh 5.0.0
  License: MIT
  Source: https://github.com/mikedh/trimesh

- Manifold3D 3.5.2
  License: Apache License 2.0
  Source: https://github.com/elalish/manifold

- Shapely 2.1.2
  License: BSD-3-Clause
  Shapely and Windows-wheel notices:
  `_internal/licenses/shapely/LICENSE.txt` and
  `_internal/licenses/shapely/LICENSE_win32`
  Source: https://github.com/shapely/shapely

- GEOS 3.13.1 carried by the Shapely wheel
  Distribution route selected for this package: LGPL-2.1-or-later
  Wheel-supplied GEOS notice: `_internal/licenses/shapely/LICENSE_GEOS`
  Generic LGPL-2.1 text: `_internal/licenses/LGPL-2.1.txt`
  Replacement instructions: `_internal/licenses/RELINKING_EN.md`
  Source: https://github.com/libgeos/geos/tree/3.13.1

- Mapbox Earcut 2.0.0 (`mapbox-earcut` wheel)
  License: ISC
  Source: https://github.com/skogler/mapbox_earcut_python

- NetworkX 3.5
  License: BSD-3-Clause
  Source: https://github.com/networkx/networkx

- Rtree 1.4.1
  License expression: MIT
  Exact wrapper text: `_internal/licenses/rtree/LICENSE.txt`
  Source: https://github.com/Toblerity/rtree

- libspatialindex 2.1.0 DLLs bundled by Rtree 1.4.1
  License: MIT
  Exact text: `_internal/licenses/LICENSE_LIBSPATIALINDEX_2_1_0.txt`
  Source revision:
  https://github.com/libspatialindex/libspatialindex/tree/175b56a9541e76982d13dbbf0c9b8f0b8d752619

- OpenSSL 3.0.21 carried by CPython
  License: Apache-2.0
  Generic Apache-2.0 text: `_internal/licenses/LICENSE_RESVG_APACHE_2.0.txt`
  Source: https://github.com/openssl/openssl/tree/openssl-3.0.21

- SQLite 3.50.4 carried by CPython
  License status: LicenseRef-SQLite-Public-Domain
  Fixed dedication/blessing notice:
  `_internal/licenses/NOTICE_SQLITE_PUBLIC_DOMAIN.txt`
  Binary-matching source revision:
  https://github.com/python/cpython-source-deps/tree/c8123bc55da6467f4ef3e9b70cdb67cecf33b937

- libffi runtime ABI 8 carried by CPython
  License: MIT
  The CPython runtime license includes the libffi copyright and terms:
  `_internal/licenses/cpython/LICENSE.txt`
  Source: https://github.com/libffi/libffi

- zlib 1.3.1 carried by CPython
  License: Zlib
  Source: https://github.com/madler/zlib/tree/v1.3.1

- Microsoft Visual C++ Runtime files
  File versions present in the audited build: 14.40.33810, 14.42.34438,
  14.44.35211, 14.44.35215, and 14.50.35719. The release-specific
  BINARY_COMPONENT_MAP.json binds each DLL to its exact component version.
  License: Microsoft Visual Studio 2022 redistributable-code terms
  Redistribution reference:
  https://learn.microsoft.com/visualstudio/releases/2022/redistribution
  Terms copied from the pinned msvc-runtime distribution:
  `_internal/licenses/msvc-runtime/LICENSE`

- Microsoft Universal C Runtime 10.0.19041.1
  License: Microsoft Windows SDK redistributable-code terms
  Redistribution reference:
  https://learn.microsoft.com/cpp/windows/latest-supported-vc-redist
  Exact carried files are recorded in BINARY_COMPONENT_MAP.json.

- PyInstaller 6.20.0 bootloader and embedded run-time hooks
  License expression:
  (GPL-2.0-or-later WITH Bootloader-exception) AND Apache-2.0
  PyInstaller's COPYING explains which embedded files use the bootloader
  exception and which run-time hooks use Apache-2.0:
  `_internal/licenses/pyinstaller/COPYING.txt`
  Source: https://github.com/pyinstaller/pyinstaller/tree/v6.20.0


Binary redistribution notice
============================

ChromaMatter application code is GPL-3.0-or-later. PyMeshLab is GPL-3.0-only,
PyTetWild/fTetWild is MPL-2.0, and the bundled TetGen core is
AGPL-3.0-or-later unless a separate commercial license applies. Each component
retains its own license; describing the combined package does not relicense
third-party code.

A redistributable package must include completed SOURCE_OFFER_EN.txt and
SOURCE_OFFER_JA.txt files, a release-specific BINARY_COMPONENT_MAP.json, the
matching SBOM.cdx.json, the listed license texts, build/install information, and LGPL replacement
instructions. The software-package staging tool rejects an unset source URL,
templates/placeholders, runtime paths that are not in the built package, and an
executable hash mismatch. Passing that local gate does not prove the source URL
has been uploaded or reviewed.

This notice is an engineering aid, not legal advice.
