bridge doctor treats an exported bundle as hostile input. It no longer imports
the reward scaffold; the file is parsed with ast.parse and every definition-time
position is audited, including class bases, metaclass and other class keywords,
annotations and type-parameter bounds. Adapter safetensors are validated past
the header through dtype and shape byte arithmetic, offset ordering, contiguity
and full payload coverage. What a bundle declares about itself is reported
separately from what this process recomputed, because a bundle's own SHA256SUMS
can prove internal consistency only.

An input file can never also be an output file. Malformed extension sidecars
fail the conversion instead of being read as empty. Dataset conversion streams
row groups instead of materializing the whole table. Portable metadata privacy
detects credentials, not only absolute paths, and never reports matched values.

Stable and development version claims have one canonical source. Every public
scientific figure is readable at 390px with no exemption list. Tracked text is
gated for mojibake and byte-order marks.

No new scientific result, benchmark or distributed-execution claim. Every frozen
scientific artifact remains byte-identical.