# Direct source fixture checkpoint

Observed 2026-09-23. The acquisition tool cloned two public repositories at
exact commits into a new disposable directory; it did not run installers or
edit the source clones. The full fixture trees are **not** committed or placed
in the normal image. The manifest below records content hashes of each theme
directory, excluding Git metadata, after checkout.

| Fixture | Repository revision | Content SHA-256 | License |
| --- | --- | --- | --- |
| Built-in dark `themes/catppuccin` | [`omacom/omarchy` `28ceaae70ebac3a0edcc21f2faa77a90dc6d404c`](https://github.com/omacom/omarchy/tree/28ceaae70ebac3a0edcc21f2faa77a90dc6d404c/themes/catppuccin) | `72e8f8f39a1209893b30b651fece6c1d1ce47ec643df9e596c7cd282ea97d4c6` | Repository MIT `LICENSE`, SHA-256 `717ba1949502290f8e47688ae2e323acd06c8ca47aec9f7596b15f678c1af4a2`. Asset-level attribution still needs review before redistribution. |
| Built-in light `themes/catppuccin-latte` | same repository revision | `11ea23e5a4659b09ecda0658dd86921489d6f536b86ffa60af2f601912a70cdc` | Same repository license; asset-level review still open. |
| Community `Fuchsblau` with four `shell.*.toml` section overrides | [`fuchsblau/omarchy-fuchsblau-theme` `aa7fde043ae60603c3ecc6fd6ac3b6674cacab04`](https://github.com/fuchsblau/omarchy-fuchsblau-theme/tree/aa7fde043ae60603c3ecc6fd6ac3b6674cacab04) | `f72ece7c9eead4fb049ebead18d918b4b11be6f35dcc861b8862e5c8f0693e75` | Repository MIT `LICENSE`, SHA-256 `f91c73acfdd4ee9ac072d3ef30b29b000f32ab10399c42db3111b938b777d59171`. Asset-level review still open. |

```text
python3 tools/theme_sources.py acquire /tmp/k230-omarchy-theme-fixtures
  PASS: exact HEADs above; both new clone statuses empty.
python3 tests/test_omarchy_theme_sources.py
  PASS: 5 host tests for exact-revision acquisition, unchanged source clones,
  .git directory/.git file/no-Git source layouts, path escapes, content refresh,
  digest framing, exact 40-hex revision validation and bounded traversal/files.
python3 tests/test_omarchy_theme_resolution.py
  PASS: 4 host tests against the byte-verified pinned upstream helpers for
  aliases, explicit ANSI/selection/custom values, mode precedence and fallback,
  mix/gradient expansion, full-file and section-replacement precedence.
```

The content digests are fixture identities, not proof of image licensing,
physical appearance, live activation, or compatibility of all arbitrary
themes. Acquiring a pinned source does not pull or modify a person's existing
checkout. Subsequent update detection hashes current source bytes rather than
trusting Git HEAD alone. This implementation fails closed above 4,096 entries,
256 MiB per file, 512 MiB total or eight directory levels. These are source
inspection bounds, not claims of wallpaper playback support.