Use the root `INGEST_CHECKLIST.md`. Place profile JSON/DSSE here, normalize with `jq -S .`, update `SHA256SUMS`, and verify with `sha256sum -c`. UTC timestamps only; no live data.