fix(export): an evidence package exported without screenshots fails its own verification#1986
Written by claude-opus-5-5 via Claude Code on behalf of Matt.
Defect: an evidence package exported with screenshots turned off fails its own verification.
What: The export dialog lets the Operator untick Screenshots for a verifiable evidence package. The package then leaves out each screenshot its signed capture entries anchor, so the standalone verifier fails every such capture with "screenshot file missing" and the bundled verify script exits 1 at step 5. The recipient sees a failed package for evidence that is intact.
It was found by the review of PR #1984 (step 4 of the capture engine first slice), which reproduced it on main. It is kept out of that PR because the option and its rule predate it, and step 4 only adds the two new files beside the screenshot. The fix is a product decision this filing does not make: refuse the option for a verifiable package, ship the anchored screenshot regardless, or have the verifiers report an omitted file as excluded by the export rather than missing.
Where it is and how to reproduce it
Where: src/main/services/export.ts:590 and :1544-1549 (screenshots gated on the include option), src/renderer/components/export/ExportDialog.tsx:382 (the toggle)
Reproduce: On main at 50966b79, ingest one MHTML Capture with a screenshot, export the Case as an evidence package with include.screenshots: false, unzip it, and run the standalone verifier and verify.sh on it. The verifier fails with "screenshot file missing"; verify.sh exits 1 at step 5.
Evidence-affecting: yes (export and verification results).