What is the traceability manifest?

When you generate ARCs, you also get a manifest.csv — a table mapping each reviewer to their file and a SHA-256 checksum (a unique fingerprint of that exact file). It's your record of who received what.

If a copy ever surfaces where it shouldn't, you can match it against the manifest (by the name stamped on it, or by hashing the file) to see which reviewer it came from. Like the ARCs themselves, the manifest is generated on your computer and never uploaded — keep it somewhere safe. It's the backbone of the "traceable" in traceable review copies.