pub async fn source_diff(evidence: &Path) -> Result<Vec<u8>>
Read the binary diff after verifying its independent source archive.