SYNTHETIC TEST FIXTURE -- generated by the stub rig, not by a build. artifacts/x86_64-pc-windows-msvc.bin is a copy of the rig bash stub. release.json carries that file sha256 as artifact_sha256 so S5 agrees BY CONSTRUCTION. S5 here proves nothing about real provenance, signing or the product.