KitForma HDF5 Slice Desk uses unmodified h5wasm 0.10.3, developed by the
National Institute of Standards and Technology (NIST), from:
https://github.com/usnistgov/h5wasm/tree/v0.10.3

NIST is explicitly acknowledged as the source of h5wasm. KitForma is an
independent product; NIST and The HDF Group do not endorse it.

The npm h5wasm 0.10.3 tarball is retained unmodified in the source package.
The browser runtime is its unmodified dist/esm/hdf5_hl.js and hdf5_util.js.
The WebAssembly binary is embedded in hdf5_util.js (upstream SINGLE_FILE build).
No external scripts or runtime CDN requests are used.

Full notices shipped beside this file:
- h5wasm-LICENSE.txt: complete NIST statement and HDF5 notices.
- hdf5-2.0.0-LICENSE.txt: HDF5 2.0.0 license.
- COPYING_LBNL_HDF5: supplemental LBNL notice referenced by upstream.
- zlib-LICENSE.txt: zlib copyright and license.
- libaec-LICENSE.txt: adaptive entropy coding/SZIP compatibility library.
- emscripten-LICENSE.txt: Emscripten runtime license and notices.

Upstream h5wasm CMakeLists pins libhdf5-wasm v0.6.0_4.0.23 / HDF5 2.0.0.
The corresponding upstream build configurations, source package SHA hashes
and notice URLs are retained in vendor-source/hdf-runtime/provenance.json.

KitForma's separate wrapper honors member byte order for flat compound data
because the upstream JS compound decoder can misread mixed-endian fields.
The upstream runtime files themselves are not modified. Wrapper implementation
and independent h5py/NumPy proof are included in the KitForma source archive.

The bundled sample.h5 is original synthetic KitForma test data, generated by
evidence/hdf-make-fixture.py. It contains no personal or external source data.