An unknown hash is a starting point, not a verdict. Record what you know, keep uncertainty visible, and choose the next check.

Why the lab gets its own segment, and what to check before anything new joins it.

Scripts can hash, name and file a sample. Deciding what it means stays a human step.