METRAXIOM AFTERSHOCK Portable Impact Package v1
Standalone Integrity Verifier Reference

Files
-----
aftershock-impact-package-v1.mjs
  Copyable ES module. It has no METRAXIOM application imports and uses only
  standard JavaScript plus Web Crypto SHA-256.

aftershock-impact-package-v1-integrity-vector.json
  Small integrity-only conformance vector. It exists to test canonicalization,
  manifest ordering, section digests, package digest, and authority-boundary
  enforcement. It is NOT a semantic AFTERSHOCK reconstruction fixture and is
  NOT customer, laboratory, accreditation, regulatory, or production evidence.

Browser use
-----------
import {
  verifyAftershockImpactPackageIntegrityStandalone
} from "./aftershock-impact-package-v1.mjs";

const packageValue = await fetch("./aftershock-impact-package-v1-integrity-vector.json")
  .then(response => response.json());

const result =
  await verifyAftershockImpactPackageIntegrityStandalone(packageValue);

A valid integrity vector returns integrityValid=true and
trustAnchorEstablished=false.

What this verifier checks
-------------------------
- package schema and canonicalization profile;
- fixed no-authority package and manifest declarations;
- exact ordered five-component manifest;
- SHA-256 digest of every manifested section;
- SHA-256 digest of the complete package projection.

What this verifier deliberately does NOT check
----------------------------------------------
- issuer identity or authenticity;
- independent trust anchoring;
- Ed25519 or other signing identity;
- semantic reconstruction of AFTERSHOCK consequences;
- material-reliance correctness;
- contest/correction correctness;
- notification, recall, product/batch disposition, certificate action,
  regulator action, accreditation status, or release authority.

The full METRAXIOM application additionally reconstructs the governed synthetic
contest/correction, incident authority, reliance, consequence, and recall-action
projections. That same-product reconstruction remains distinct from externally
independent verifier acceptance.

Authoritative release: OFF.
Production authorization: NO.