NeverD Windows Web product (web-product-windows-x64-2026-10-15)

Windows x64 offline Web analysis product: NeverD CLI, public C ABI DLL
and headers, worker and MCP server, with ICU 77.1 and app-local runtime
dependencies. Extract the entire archive and keep bin together.

Native NTFS contracts and the relocated archive consumer passed;
complete producer-container and CEF/resource qualification passed at
the same source commit. Receipts, SHA-256 values and source/rebuild
materials are attached. See REBUILD.md for commands and support limits.

Source: 5e126750ae7513591b6d79056c02358fe55da0f1

Qualification run

Web producer corpus (2026-10-13)

Fixed offline regression inputs for NeverD's Bun, Node SEA, nexe and pkg
readers. This is a test-data release, separate from a NeverD executable or
Python SDK release. Generated images are never executed by the analyzer/tests.

The corpus contains 25 complete Bun 1.4.2 images, six Node SEA 22.15.0 images,
three nexe 4.0.0-rc.7 images, six canonical pkg 5.8.1 images and one pkg
preprocessing witness. Complete container hashes match the original recorded
fixtures. Node's opaque snapshot uses the separate 2026-10-13 witness;
original metadata is retained. Newly recorded producer dependency locks do
not claim reproduction of the original transitive installation.

Download neverd-web-producer-corpus-2026-10-13.tar.gz and verify:

SHA-256 7372a4fb66605e2d62405ee1e5ef55da1fbde99bed8cd61c1f5c6790c1d53ce3
Bytes   1251173226

Use its six root directories with the environment selections in
the qualification guide.
Select NEVERD_NODE_SEA_SNAPSHOT_WITNESS=2026-10-13 explicitly.

The corresponding source companion, its SHA-256 manifest and rebuild/notice
guide are separate assets in this release. Preserve the runtime and dependency
notices, including Bun's JavaScriptCore/WebKit and TinyCC source/relink terms.
Self-authored fixture inputs retain their MIT notices. The source companion
and rebuild guide accompany the corpus and supersede its historical local-only
distribution note; existing corpus bytes and provenance remain unchanged.
No proprietary client executable or recovered client source is included.

Combined qualification at 8c1f4ac03
passes all 11 full producer cases and 15 CEF/resource cases, with zero failures
and zero skips. That receipt qualifies the named profiles on the macOS ARM64
analysis host. Cross-target input extraction does not establish Windows host
support or runtime/cache execution.