Why we re-hash every source before exporting
On import, CustodyComms records each source file's SHA-256 hash. On export, it re-hashes and compares. If any byte changed since import, the export is blocked rather than produced. Catches edits outside the app, bit rot, and partial copies. On by default; can't be disabled for Forensic exports.