# Reproduce the retained judgment

This directory is the complete experimental packet. It needs Node.js 20 or
newer and no package installation. To acquire it from the public site:

```sh
curl --fail --location --remote-name https://glyphstandard.com/evidence/retained-evidence/retained-evidence-drill.tar
curl --fail --location --remote-name https://glyphstandard.com/evidence/retained-evidence/retained-evidence-drill.tar.sha256
shasum -a 256 --check retained-evidence-drill.tar.sha256
tar -xf retained-evidence-drill.tar
PACKET_ROOT="$(tar -tf retained-evidence-drill.tar | sed -n '1s#/.*##p')"
```

From the parent directory:

```sh
node "$PACKET_ROOT/verify-packet.mjs" "$PACKET_ROOT"
node "$PACKET_ROOT/run-network-denied.mjs" "$PACKET_ROOT"
```

The first command verifies the directory name, exact member set, byte lengths,
member digests, and packet root. The second repeats that verification, blocks
the enumerated Node network interfaces before verifier import, recomputes all
three states, compares the result with `expected-report.json`, and prints the
report. The report names that application-level guard precisely; it does not
claim operating-system network isolation.

Run these commands from a clean directory containing only this packet. The
launcher reads packet members only: repository input and prior receiver state
are not supplied, installed Bulla is not used, and no Glyph Standard route is
requested. The output is locally reproduced evidence. It does not count as an
independent implementation, witness, replay, or external reliance decision.