Files are grouped into opaque, independently verifiable archives. Internal provenance metadata is maintained separately by the archive owner.
