v4.6.1 — deterministic payload builds (ZIP epoch pin) + refreshed assets

v4.6.1 — asset refresh on v4.6.0 (authorized lab use only)

Fixed

• Nondeterministic ZIP payloads: CVE-2023-42790.ipk and CVE-2024-36210.zip embedded wall-clock mtimes via zipfile.writestr, so every build hashed differently and CI lock-diff failed spuriously. Both builders now pin all entry timestamps to the ZIP epoch (1980-01-01) via fixed ZipInfo. Proven: two separate builds produce identical SHA-256.
• New regression test: test_zip_entries_pinned_epoch asserts no wall-clock mtime in any ZIP artifact.

Verified this release

• run_all.py build: 64 artifacts, verify 64/64 PASS, --diff against committed payloads.lock.json: clean (lock regenerated via make lock).
• tests/test_payloads.py: 51 passed.

Assets

• quantum-exploits-v4.6.1.zip — 73 exploit builders + harness (run_all, tv_sweep, callback_server, watch, kernel gate, offset resolver, tier1 gate, platform index + lock).
• quantum-payloads-v4.6.1.zip — all 64 built payload artifacts + manifest.json/md (byte-verified against dist/).
• PLATFORM_INDEX.json, payloads.lock.json standalone.