Core artifacts travel as an explicit manifest; coordinator triple-checks (core report vs manifest vs recomputed hash) before cleanup, regression rewrites files verbatim, recomputes sha256, stops on ARTIFACT-HASH-MISMATCH and only then runs the same core code plus import-only regression tests.