Apple library sources and device object-only relinking

The public manifest maps the recorded local signed/exported private device
candidates to their exact IPA hashes/UUIDs, native sources and relink kits.
This index does not establish an existing or approved public Store executable.

The source package is one ordinary complete ZIP. Each device kit is transported
in two ordinary ZIP containers. Each transport ZIP contains exactly one stored
entry named 'part': a raw byte segment of the canonical complete kit ZIP.
Do not concatenate the transport ZIP containers themselves and do not extract
all 'part' entries into the same directory, where they would overwrite each other.

Recommended reconstruction (Python 3.11 or later, standard library only):
  1. Extract this small index into a new directory.
  2. Run:
       python3 REASSEMBLE.py --download
     This downloads only the four HTTPS URLs recorded in PUBLIC-MANIFEST.json.
     Or manually download those four ZIPs into a subdirectory named parts and run:
       python3 REASSEMBLE.py
  3. The helper verifies each transport ZIP and its raw payload, joins payloads
     in manifest order, and verifies both canonical complete ZIP sizes/SHA256s.
     The reconstructed canonical kits are written under reassembled/.
     Existing conflicting outputs are never overwritten.
     To validate without writing canonical outputs:
       python3 REASSEMBLE.py --verify-only
     Add --download if the four parts have not already been downloaded.

SHA256SUMS.txt lists the source package, canonical kits and transport ZIPs.
PUBLIC-MANIFEST.json additionally gives the raw segment sizes and hashes.
All four part ZIPs are below 90,000,000 bytes. These are normal independently
verifiable ZIP containers, not PKZIP multi-disk or spanned archives.

Download the native source package using its manifest URL. Extract the matching
reassembled device kit and read its README/INSTRUCTIONS and component licenses.
In that kit, run python3 relink.py --verify to verify all exact input hashes and
perform a baseline final link. After replacing compatible covered library
archives, run python3 relink.py without --verify. Preserve matching app resources
and actual dynamic frameworks; use your own suitable Apple signing identity and
provisioning for device installation. No Apple SDK, signing credential, developer
key or provisioning profile is provided. Baseline success does not claim byte
identity with a signed executable or certify playback after modifications.

Original application/player source remains proprietary. Compiled application
objects permit relinking with modified LGPL library components. Applicable LGPL
modification/relink/reverse-engineering rights for debugging such library
modifications remain available. Read each original license for its terms.

Local candidate proof is separate from Store upload, processing and public
release approval. Encryption classification remains open. No regulatory filing,
French exemption, questionnaire answer or country restriction is asserted here.
Historical archives remain historical; use the exact mapping for each artifact.
