fix: fail a pack member the collection cannot name

tests/test_pack_member_identity.py

@@ -0,0 +1,46 @@
+"""Every pack member is bytes the collection recognises.
+
+A member whose sha1 and md5 matched nothing was counted `untracked` with
+zero errors and the pack passed, so bytes altered while the ZIP was written
+went unseen. Archives the builder assembles (MAME clone sets) are
+recognised by their members.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import io
+import sys
+import tempfile
+import unittest
+import zipfile
+from pathlib import Path
+
+REPO_ROOT = Path(__file__).resolve().parents[1]
+sys.path.insert(0, str(REPO_ROOT / "scripts"))
+
+
+class MembersMustBeKnown(unittest.TestCase):
+    def test_unknown_bytes_are_an_error_and_assembled_sets_pass(self):
+        from packverify import verify_pack
+
+        known = b"known rom" * 10
+        md5 = hashlib.md5(known).hexdigest()
+        inner = io.BytesIO()
+        with zipfile.ZipFile(inner, "w") as zf:
+            zf.writestr("rom.bin", known)
+        db = {"files": {}, "indexes": {"by_md5": {md5: "s"}, "by_name": {}}}
+        with tempfile.TemporaryDirectory(dir=REPO_ROOT / "tmp") as tmp:
+            pack = Path(tmp) / "P_BIOS_Pack.zip"
+            with zipfile.ZipFile(pack, "w") as zf:
+                zf.writestr("clone.zip", inner.getvalue())
+                zf.writestr("garbled.bin", b"no such dump")
+            ok, manifest = verify_pack(str(pack), db)
+        statuses = {f["path"]: f["status"] for f in manifest["files"]}
+        self.assertEqual(statuses["clone.zip"], "verified_members")
+        self.assertFalse(ok)
+        self.assertTrue(any("garbled.bin" in e for e in manifest["errors"]))
+
+
+if __name__ == "__main__":
+    unittest.main()