# Diagnostic filename normalization

The privacy-review binary was derived from the matching engine build without changing WebAssembly instructions or file/section lengths. Three SDL assertion filename prefixes were replaced with equally long neutral `/build/` labels and padding. Offsets: 3340255, 3340436, 3341119. No original account name or source prefix is recorded here.

Before SHA-256: `58fc85b88bfd7d46563b714b6e6eca33ae1dd3b6dc7cbfe22e946ad61cf80105`

After SHA-256: `8b89af7e67dd505d69ec7d9869a549a5b60254cea202d35369316017612de21b`

To reproduce this exact metadata-only transformation on the matching original binary:

```sh
python3 sanitize-wasm.py openlf2.wasm
```

The script verifies both hashes for the recorded binary. Run `WebAssembly.validate` and native runtime checks after sanitation. A future clean build should map file/macro prefixes for every compilation input, including SDL port inputs, to neutral source identifiers. A clean rebuild may have different hashes; this record claims reproduction of this narrow change to the recorded original binary, not reproducible whole-toolchain builds.

The complete review binary passed WASM validation and targeted runtime/resource tests recorded outside the deployed site. A clean application rebuild and a modified-FFmpeg relink test remain pending. Source material is supplied for review, without legal clearance.