Auditing an .xcarchive you didn't build: forensic patterns

When a customer ships an .xcarchive after an incident, the build environment is gone but the artifact is rich. A defensible audit without a rebuild.