# ITHZ Verify Modes

ITHZ separates practical product verification from heavy restored-tree regression gates.

## Modes

`--verify=off`

Benchmark-only mode. The archive is written or the command runs without post-write verification.

`--verify=checksums-only`

Checks container structure, header/footer values, manifest checksum, and payload checksum. It does not decode payload streams.

`--verify=full-no-write`

Decodes payload streams and validates path, offset, and SHA rules without writing the restored file tree to disk.

`--verify=safe`

Alias for `full-no-write`. This is the P14 product default for `--pack-folder` when no explicit verify mode is provided.

`--verify=full`

Decodes, validates, and writes the restored tree. This remains the heavy regression/integrity gate.

## Default Policy

`--pack-folder <dir> --archive <out.ithz>` uses:

```text
profile=auto-mixed
verify=safe
```

Use `--verify=full` when you intentionally want restored-tree writes during verification.

## Exit Codes

```text
0 OK
1 user/input error
2 archive corruption
3 path/extraction safety failure
4 unsupported format/version
5 internal error
```

