# V3 Tenant/Mode Pak Chunking

Manifest version: `v3-tenant-mode-pak-chunking.v1`

This gate locks the UE mobile install policy from §67.1: pak files are chunked
by tenant and mode Game Feature Plugin, the base shell plus the selected Tara
tenant install first, and the Lilith Commons and Saraswati Stage tenants stream
from signed CDN manifests on demand.

## Install-First Set

The Tara mobile install contains exactly these install-first chunks:

| Chunk                             | Game Feature Plugin    | Delivery      |
| --------------------------------- | ---------------------- | ------------- |
| `pakchunk0-base-shell`            | `V3Core`               | install-first |
| `pakchunk20-tenant-tara-studio`   | `V3Tenant_TaraStudio`  | install-first |
| `pakchunk21-mode-tara-live-class` | `V3Mode_TaraLiveClass` | install-first |
| `pakchunk22-mode-tara-on-demand`  | `V3Mode_TaraOnDemand`  | install-first |
| `pakchunk23-mode-tara-private`    | `V3Mode_TaraPrivate`   | install-first |
| `pakchunk24-mode-tara-cohort`     | `V3Mode_TaraCohort`    | install-first |

Projected install sizes (hand-authored from the chunk manifest, not measured —
no real-device cook has run, per `V3/VERIFICATION_AUDIT_2026-05-31.md` §67;
real-device measurement pending). These figures cover only the base-shell + Tara
install-first chunk subset above; the full projected first-launch payload
(adding the Commons Atrium and Tier-2 avatar gallery content) is 2.31 GB iOS /
2.37 GB Android — see `V3/MOBILE_ON_DEMAND_ASSET_STREAMING.md`. The 2.5 GB
install budget is normative:

| Platform     | Package                                  | Base shell + Tara | Budget | Headroom |
| ------------ | ---------------------------------------- | ----------------: | -----: | -------: |
| iOS / iPadOS | iOS IPA + Iostore paks                   |           1.98 GB | 2.5 GB |  0.52 GB |
| Android      | Android App Bundle + Play Asset Delivery |           2.05 GB | 2.5 GB |  0.45 GB |

## Streamed Tenants

`V3Tenant_LilithCommons`, `V3Tenant_SaraswatiStage`, and all of their mode Game
Feature Plugins are `stream-on-demand`. Each streamed chunk declares a signed
HTTP/3 CDN manifest URL and a SHA-256 integrity value. The release gate fails if
any non-selected tenant is marked install-first for the Tara mobile package.

## UE Packaging Contract

The mobile cook profiles point at
`V3/ue/Build/Chunking/tenant-mode-pak-chunking.json`. `DefaultGame.ini` enables
chunk generation, hard-reference-only chunk assignment, and HTTP chunk install
data with `v3-tenant-mode-pak-chunking.v1` as the chunk install data version.

The verifier is `pnpm verify:v3 tenant-mode-chunking`. It checks the UE config,
asset presets, cook profiles, plugin descriptors, chunk manifest, analytics
manifest, tests, and TODO lock. The gate fails closed for budget overruns,
missing tenant/mode chunks, non-selected tenant install-first leakage, or
streamed chunks without CDN integrity.