Function attach_extracted_box 

pub fn attach_extracted_box(
    release_document_path: &Path,
    options: &AttachOptions<'_>,
) -> Result<PreparedBox>

Re-identifies a box that is already extracted, without its archive.

This is what lets an application install a box once and run it across restarts. It performs every check that needs no data beyond the signed release — signature and schema, a target this host can run, the interpreter and execution files present, the signed digests of on-demand assets — and deliberately does not read the payload. Proving the installed bytes is verify_extracted_payload, a separate decision with a separate cost.

Unlike preparation, this asserts the native host: preparing only writes files, but a receipt minted here exists to be executed.

Errors

When the root is not a directory, the trust chain fails, the host cannot run the target, the interpreter or execution files are absent, or an on-demand asset does not match its descriptor.