Python3.10+ ReportLab/pypdf; included DejaVu fonts and full renderer/font licences. Read-only technical/verify_native.py no arguments; actual source gate included. Rebuild technical/generate_native.py --output ABSENT_NEW_PATH from exact source-approved82 (or --source EXACT_APPROVED82). Full source file+directory mode/ns/four hashes required before writes. Git/ZIP extraction carries bytes/executable bit, not all metadata: use pinned owned source or restore full source metadata in a new owned copy before strict creator gate. A closed staff packet includes source/code/fonts; rebuild a complete new candidate before installed no-argument verification. Do not hash a changed payload into approval. Standard-library source checker; native depends on credited renderer packages. Native deterministic modes/ns, PDF bytes and ZIP timestamps.