# Source provenance and checksums

The authoritative functional source is /home/mirkor/marvel.zip, SHA-256 8bdacd474feed569b0b1e3ff51a61a0d18fa73dffe6515fca2eca626b4d67a68.

The initial runtime payload was copied exactly from MarvelPBX_COMPLETE_TRANSFER_PACKAGE/ (candidate 3). The untouched baseline is preserved in evidence/authoritative-runtime/. The preserved candidate-3 tree remains the checksum baseline. MarvelPBX 12.5.1 intentionally changes the lifecycle class, List/Detail/Export controllers, List/Detail templates, and two translations; it adds PlacementNormalizer, package-local UCM/recording libraries, and RecordingProxy. Unlisted runtime files remain checksum-identical to the preserved baseline. The UCM protocol behavior was ported from the repository reference implementation and renamed under MarvelPBX-specific class names; the package has no external runtime dependency.

MarvelPBX_FINAL_V10_COMPLETE_WORKING_UI_FINAL/ is historical context only. A bare modules/MarvelPBX/ tree is not treated as an independent version. The manual installer and legacy READMEs are retained as evidence outside src/ and are never included in the runtime ZIP.

evidence/SOURCE_SHA256SUMS is generated from the preserved baseline and legacy evidence. evidence/RUNTIME_BASELINE_COMPARISON.txt records the comparison with the reconstructed runtime.