Apple library sources and device object-only relinking

PUBLIC-MANIFEST.json maps the documented signed/exported device candidates to
their exact IPA hashes/UUIDs, matching native source package and fresh relink kits.
This technical index does not establish App Store processing, approval or public
release. Historical materials remain unchanged; use the exact artifact mapping.

The native source package is a complete ordinary ZIP at its manifest URL. Each
device relink kit is transported in two ordinary ZIPs, each below 90,000,000 bytes.
Each transport ZIP contains exactly one stored entry named 'part': consecutive
raw bytes of the canonical complete kit ZIP. Do not concatenate ZIP containers
or extract all same-named 'part' entries into a shared directory.

Reconstruction (Python 3.11 or later, standard library only):
  1. Extract this small index into a new directory.
  2. Run: python3 REASSEMBLE.py --download
     Only the four exact HTTPS part URLs in PUBLIC-MANIFEST.json are downloaded.
     Alternatively put the four downloaded ZIPs into parts/ and omit --download.
  3. The helper verifies ZIP sizes/hashes, raw part sizes/hashes, manifest order
     and canonical complete sizes/hashes. Complete kits appear in reassembled/.
     Conflicting existing files are never overwritten.
     To check everything without writing complete kits:
       python3 REASSEMBLE.py --verify-only
     Add --download if transport parts are not already present.

Download the source package separately at its manifest URL. Extract the matching
canonical kit and read its README/INSTRUCTIONS and original component licenses.
Run python3 relink.py --verify in that kit to verify the exact inputs and perform
a baseline final link. After replacing compatible covered library archives,
run python3 relink.py without --verify. Preserve matching resources and dynamic
frameworks. Device installation requires your own suitable Apple signing identity
and provisioning. No Apple SDK, signing key or provisioning profile is supplied.

Original application/player source remains proprietary. Compiled application
objects permit relinking with modified LGPL components; applicable modification,
relinking and reverse-engineering rights for debugging library modifications
remain available. Read each original license. A baseline link does not certify
playback after modifications or imply byte identity with a signed executable.

Exact section comparisons, baseline verification and native-source byte reuse
proofs are in the public manifest and kits. The embedded encryption flag fields
record binary metadata; this index makes no independent legal classification or
regulatory-filing determination. SHA256SUMS.txt lists sources, kits and parts.
