First publication of the shellspy G-128 tool as a punkbin artifact: the
no-toolchain route for icon stamping that does not depend on the committed
twapi (fetch to <shellspy>/bin/punkres.exe; the G-057 kit-icon seam selects
it when present). Provenance: built from shellspy's vendored source
src/tools/punkres @ shellspy 0bee025e (upstream punkres git f0af880,
v0.3.1, BSD-2-Clause, first-party punkshell tool - no external lineage)
with the pinned zig-x86_64-windows-0.16.0 toolchain via 'make.tcl tool
build punkres' (test gate 33/33, ReleaseSafe). sha1
166cd17628f6f9457f927eb67d34c9f01c5c5646 (row regenerated via
src/build_sha1sums.tcl - all other artifacts SAME). Versioned immutable
name per the tools-tier convention (arch-os-version); a future version adds
a new file. No minisig: sha1sums.txt is this repo's integrity authority for
first-party tools (a maintainer-signed .minisig sidecar remains the natural
complement per the metadata notes - maintainer-gated).
Assisted-by: harness=claude; primary-model=claude-fable-5; api-location=anthropic.com