# FLR-016 deterministic artifact integrity/recovery lab

Implement the bounded evaluator in `starter.py` for the eight supplied synthetic cases. No network calls, credentials, production artifact stores, or destructive deletion are required. Keep reachability, byte integrity, reference state, and provenance independent. A matching filename/tag is not byte identity; a successful read is not digest verification; and a matching digest does not prove provenance. Quarantine mismatches, use only declared trusted recovery sources, and require an independent post-recovery verification before release.

Run `python run_checks.py` to verify fixture shape before implementing the evaluator.