Signed-swap replay: extract portable-swap-proof.zip, then run python3 -B verify_collector_first_swap.py. The four files need only Python standard library; no network, Kyber source or full documentation body. The verifier reconstructs the transaction hash, recovers the signer, checks clientData bytes/event equality, validates fee arrays/events/transfers and runs a signature mutation control.

State comparison: keep verify_public_state_offline.py and STATE-BASELINE-1412-CAPSULE.json together in audit/, with published ethereum-state.json, ethereum-state-raw.json, polygon-state.json, polygon-state-raw.json and LATEST-VS-1412.json in sibling current-state/. Run python3 -B audit/verify_public_state_offline.py. This checks all30 getter requests/results against pinned blocks and the derived14:12 capsule. No interval-activity claim is made.

The full local source audit script is retained locally because it requires full Rabby source bodies. Published source hashes/URLs and limited configuration facts preserve provenance. Historical commit dates remain commit metadata, not an independently established publication date.
