# Acceptance fixture custody

This action orchestrates exact public prerequisite preparation in a fresh hosted
checkout. Do not run it on a shared workstation: existing inputs are refused.
Every producer, aggregate collector and tagged release reader must prepare the
same bytes before source identity/export observation. Generated fixture roots remain observed by the unchanged source APIs.
The action invokes `python3 -S scripts/fixtures/prepare_acceptance.py` before
dependency setup. Its manifest and copied seeds must match actual committed Git
blobs. Both preparation and Source admission use the same exact selected member
and directory roster, with regular-file confinement and executable-bit semantics.
Never replace an existing target or authorize arbitrary untracked files by a
directory prefix. Whole absent groups are local authoring states only; the
required-profile prerequisite gates still govern complete hosted acceptance.
The authenticated TLC tool uses the explicit external provider boundary, so it
cannot enter authored source/export inventory; no source exclusion is introduced. Retain upstream licenses and fixed archive hashes/lengths.

Use [README.md](README.md) for ordering and run actionlint after edits.