Broke the ingest pipeline by corrupting the VPA magic bytes. Every artifact file starts with VECPANDA as a signature so downstream can tell it's a real artifact and not garbage. Somehow that got mangled. Took way too long to figure out because the failure mode is "silently accept the file and then produce nonsense later" -- not exactly a helpful error message.
Added a validation check on read. Should've been there from the start. Ask how I know.
