Verifies bundle tarballs in 4 phases: SHA256 integrity, extraction and install into the base venv, Python import checks per bundle, and a functional inference smoke test per bundle.