Building Manifest-InX: deterministic evidence bundles + offline verification (drift/tamper rejection). Verifier/spec-first OSS; gateway runtime intentionally separate. OneInX Lab.