TEST 132

TEST-132

Stimulus

Use a local HTTP fixture for an approved artifact with a strong ETag and expected SHA-256. Interrupt after a persisted byte range, explicitly resume the same object, then inject an ignored Range, changed ETag/Last-Modified, wrong total length, missing validator, compressed response, oversized payload, and altered final digest.

Required observation

Only the exact URL fingerprint/digest/validator/offset may resume. The completed bytes match the expected size and SHA-256 before publication. Refusals preserve the private partial and state record, perform no retry or installer invocation, and do not cross the configured free-space reserve. No real vendor network request is required by this test.