HREVN ROOT_SPEC_EB1

Profile: evidence_bundle_ai_document_integrity_v1
Version: EB1
Encoding: UTF-8

Root scope:
- Use only the relative paths listed in manifest.authoritative_files.
- Paths are interpreted relative to the bundle root.
- Do not prepend the outer ZIP folder name.
- Do not include manifest.json in the root scope unless it is explicitly listed there.
- Do not include CHECKSUMS.sha256 or ROOT_HASH_SHA256.txt in the root scope.

Serialization:
- For each authoritative file, compute SHA-256 of the file bytes.
- Build one text line per file using the format: relative_path:sha256hex
- Sort lines in ascending ASCII/bytewise order by relative_path.
- Join lines using LF (\n).
- Do not add a trailing newline at the end of the serialized string.

Final root:
- Compute SHA-256 over the UTF-8 bytes of the serialized string.
- Store the resulting lowercase hexadecimal digest in ROOT_HASH_SHA256.txt.

This specification is authoritative for EB1 sample bundles.