Define the v1 Corpus release package and manifest

[ian-pascoe]

Question

What exact v1 manifest and portable package format represents an immutable Corpus release? Produce a concrete example that decides canonical manifest encoding and identity, complete membership, exact Release dependencies, source-object layout, publisher attestations and withdrawal notices, private distribution wrapping, optional derived-index packages, and publication/import conformance without dictating working storage.