The diff is the cheap part. What a recurring handoff actually needs is a record of who decided what, when, and on what evidence, in a form that can be forwarded to someone who does not have this tool.
Checkpoints
A checkpoint is a versioned JSON envelope containing the whole local project and a SHA-256 digest over its canonical form. Restoring one re-validates the structure and verifies the digest first, so a truncated or edited checkpoint is refused rather than partially loaded. The digest makes tampering evident; it does not prove who made the file, and it is not a signature.
The event log
Every meaningful mutation appends an event: a snapshot profiled, a mapping committed, a consumer policy edited, a finding disposed. The log is exported with the packet, so the packet says not only what the state is but how it got there.
Freezing and amendments
Freezing records a review point. Editing after a freeze does not rewrite it; the change is disclosed as an amendment against that review point. A recipient can therefore tell the difference between what you sent them and what you changed afterwards, which is the entire reason a review artifact is worth anything.
Freezing with open findings
You can freeze a review that still has unresolved findings, and the packet will say so plainly, listing which findings carry no reviewer decision. That is deliberate. A tool that only lets you export a clean review teaches people to close findings to make the export work. Whether an open blocker prevents acceptance is a decision for your operating process, not for this software.
Formula-safe registers
Every exported CSV cell whose text begins with an equals, plus, minus, or at sign, after any leading whitespace or control characters, is prefixed with an apostrophe. A register full of column names taken from an untrusted producer should not execute when a colleague opens it in a spreadsheet. This reduces one specific risk; opening any untrusted spreadsheet still deserves care.
What the packet contains
A readable summary carrying the finding register, the rename mappings and the per-consumer verdicts; CSV registers for columns, changes, mappings, consumer policies, findings and decisions; both structural profiles; the method and limitations pages; the event history; the comparison as JSON; a checkpoint; a manifest; and a SHA-256 checksum file covering the rest. There are no scripts and no remote assets, so it opens with no network.