# Verify this archive

This is the Steam Dossier WORKING DRAFT captured on 7 October 2026.
The full edition is planned for 14 October 2026. See EDITION.md for scope and provenance.

Download the tree with `ipfs get <CID> -o valve-mirror`, then run inside valve-mirror:

```sh
sha256sum -c SHA256SUMS
openssl pkeyutl -verify -pubin -inkey pubkey.pem -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig
openssl pkeyutl -verify -pubin -inkey pubkey.pem -rawin -in manifest.json -sigfile manifest.json.sig
```

Ed25519 public-key fingerprint (SHA-256 of DER):
be7dc02ea086de41d868e18df3a44f8ec101076cb9f6d2b4e7f86aa2da7b7474

Confirm the fingerprint through an independent trusted channel.
manifest.json lists payload file hashes. SHA256SUMS also covers the manifest and its signature.
The checksum list and its detached signature are excluded from that list to avoid self-reference.
Earlier gateway HTML transformations are recorded in provenance/previous/.
Licensing follows the earlier archive and the new dossier's respective terms; no new rights in third-party source material are asserted.