submission-packager

No clear malware indicators are present. The main security concern is that untrusted frozen-claim source_file values can escape the staging directory in verify_runtime() and cause file deletion when a verification command is supplied. The caller-supplied command execution is also security-sensitive and should be limited to trusted commands and workspace contents.