# First external replay checklist

1. Download `MVG_Witness_Pack_CURRENT.zip`.
2. Confirm `SHA256SUMS.txt` matches the unpacked files.
3. Verify the canonical bundle and DSSE envelope.
4. Confirm verifier digest and policy version.
5. Run the published verifier locally.
6. Record observed verdict, reason code, and replay timestamp.
7. Fill `WITNESS_OUTPUT.template.json`.
8. Add signature / transparency / timestamp references if available.
9. Return the witness output object to MVG without additional unpublished context.