Safe ZIP ingestion and project-root selection
BetaBeta ZIP inspection validates integrity and limits before reading source metadata; it does not execute archive contents.
What this does
Hashes the archive, rejects unsafe paths, symlinks, nested archives, malformed or encrypted ZIPs, and discovers candidate project roots.
What you need
A source ZIP under 50 MB compressed, 250 MB expanded, and 10,000 files.
What LaunchLayer automates
SHA-256, CRC verification, path normalization, expanded-size accounting, root discovery, and shared framework analysis.
What remains external
Choosing among multiple roots, supplying environment values, and later isolated compilation.
Exact setup steps
Upload the source ZIP, inspect it, choose a candidate root when prompted, re-inspect, and confirm controlled configuration.
How to verify it
Review the archive hash, file count, expanded size, selected root, and framework evidence.
Common failures
Traversal paths, nested archives, archive bombs, encryption, malformed JSON, multiple roots, or missing source manifests.
Security considerations
Archive contents never execute in LaunchLayer; future compilation must use an isolated runner.
Related articles
Framework detection; security and ownership.