Decompile Bounty Protocol, public verifier

replayer-src.tar.gz
  The replayer: a Rust binary that loads the original program and the candidate rebuild in two
  identical LiteSVM instances, replays the frozen corpus and fuzzed variants on both, and writes the
  verdict report. The report holds no timestamp and no host data, so the same inputs give the same
  bytes and the same sha256.

  tar -xzf replayer-src.tar.gz && cd replayer && cargo build --release --locked
  replayer replay --original original.so --candidate candidate.so --corpus corpus.json \
    --fuzz 10000 --source-sha256 <source sha256> --out report.json
  replayer teardown --elf original.so --out kit.json --disasm disasm.txt
  replayer hash <file>

verify.sh
  Downloads a published verdict, its corpus, both binaries and the replayer source from the site,
  checks every sha256, builds the replayer and re-runs the replay. It ends with MATCH when your report
  is byte for byte the published one.

  curl -fsSL "$SITE/verifier/verify.sh" | SITE="$SITE" sh -s -- 0001

  Variables: SITE (the site's origin, required), FUZZ (default 10000), WORK (default ./decomp-verify-<n>).

SHA256SUMS
  sha256 of the files above.