diff --git a/lib/linux-x86_64/sha1sums.txt b/lib/linux-x86_64/sha1sums.txt
new file mode 100644
index 0000000..8c16610
--- /dev/null
+++ b/lib/linux-x86_64/sha1sums.txt
@@ -0,0 +1,2 @@
+0649a442d1146b1046738f07edd52bc762b59444 *tcllibc-tcl9-r1.toml
+e5e7bb0c64529d3797072a96ce49c5ec8637b5a9 *tcllibc-tcl9-r1.zip
diff --git a/lib/linux-x86_64/tcllibc-tcl9-r1.toml b/lib/linux-x86_64/tcllibc-tcl9-r1.toml
new file mode 100644
index 0000000..4a2100e
--- /dev/null
+++ b/lib/linux-x86_64/tcllibc-tcl9-r1.toml
@@ -0,0 +1,55 @@
+#punkshell library artifact metadata (schema v2, class "library") - generated
+#by library_artifacts.tcl. Sidecar copy: the record embedded in the zip at
+#<folder>/punkbin-artifact.toml plus the finished-zip facts (sha1, size, built).
+#The sidecar + sha1sums.txt remain the integrity authority.
+schema = 2
+
+[artifact]
+name = "tcllibc-tcl9-r1.zip"
+class = "library"
+package = "tcllibc"
+package_version = "2.0"
+#folder: the installed-shape package folder the zip carries at its root
+folder = "tcllibc"
+revision = 1
+target = "linux-x86_64"
+#tcl_generation: the Tcl major-generation the package was built/installed under
+#(and, for binary packages, compiled against) - part of the artifact name.
+tcl_generation = "tcl9"
+sha1 = "e5e7bb0c64529d3797072a96ce49c5ec8637b5a9"
+size = 143319
+built = "2026-07-30T12:29:59Z"
+#build_id: offline correlation key re-joining a renamed copy to its record;
+#identical in the embedded and sidecar copies (a deterministic identity digest,
+#not an integrity key - the sidecar sha1 is the integrity fact).
+build_id = "e7030a7a-0486-9c94-00cb-7536716ea5d9"
+#origin: canonical artifact repo this artifact was BUILT FOR - not necessarily
+#where it is hosted; mirrors preserve it.
+origin = "https://www.gitea1.intx.com.au/jn/punkbin"
+#packager: declared identity, not proof - signing (minisign sidecars) is the
+#verification layer.
+packager = "Julian Noble <julian@precisium.com.au>"
+project = "punkshell"
+project_url = "unrecorded"
+#license: summary for the distributed package; the package's own license text
+#rides inside the zip (license.terms etc).
+license = "BSD"
+build_host_platform = "win32-x86_64"
+
+[library]
+#driving_tcl_patchlevel: patchlevel of the suite-built shell that ran the
+#installer/critcl - the generation witness, not a runtime version requirement.
+driving_tcl_patchlevel = "9.0.5"
+
+[provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
+suite = "suite_tcl90"
+toolchain = "zig 0.16.0"
+optimize = "ReleaseFast"
+#critcl: version declared by the package's own critcl-generated teapot.txt
+critcl = "3.3.1"
+tcllib_checkout = "c784f6fda4516f676453a2785b3c56f1ca5999f450e80ccba6c317ba78ce4e21"
+critcl_checkout = "254bdffe2afc78148f79f92df8d6823a24f971bf"
diff --git a/lib/linux-x86_64/tcllibc-tcl9-r1.zip b/lib/linux-x86_64/tcllibc-tcl9-r1.zip
new file mode 100644
index 0000000..27b214e
Binary files /dev/null and b/lib/linux-x86_64/tcllibc-tcl9-r1.zip differ