PASS all 22 public-safe files match bytes and SHA256; manifest excludes itself and private_tmp; no absolute private paths
