## Summary
- enumerate runtime members from the exact declared Git tree
- read bytes and executable modes from Git objects rather than the ambient worktree
- fail closed for unavailable commits, unsafe/generated tracked members, or missing runtime files
- verify every release member against the declared commit before CI publication
## Validation
- RED: polluted-worktree reproducibility and unknown-commit tests failed against the old packager
- GREEN: focused release/CI tests: 4 passed
- full suite: 1979 passed, 7 skipped
- real origin/main build: verified, 439,288-byte archive, zero bytecode/cache members
Closes #1044
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Validation
Closes #1044