Single source of truth for the ADR-024 cap-manifest.json schema and content-binding algorithm. Shared by the build-time tooling that emits the manifest and the SKU-boot runtime that asserts it (obligation 8b). Zero runtime dependencies — pure records plus SHA-256; consumers bring their own JSON mapper.