Bounded single-file archive-readback example. The counter measures application-level source passes, not network operations. Requires Python 3.11+, age, age-keygen and GNU tar on Linux with user xattrs and POSIX ACL support. Save both Python files in one directory, then run: python3 -B test_archive_readback.py
The ten tests use fresh temporary synthetic payloads and transient test identities only. They perform no remote upload, deletion or live restoration. This is not a general hostile-tar extractor; exactly one expected regular basename is accepted. Caller must separately verify restored source identity and metadata. Archive/output size admission and subprocess deadlines belong to the caller. Do not supply production archives or identities merely to run the example.