Decode PPI face payloads

docs/modernization/build-inventory.md

@@ -90,16 +90,19 @@ Known local toolchain state:
   `platform-build` automation wrapper for `pp_foundation`, `pp_assets`,
   `pp_paint`, `pp_document`, `pp_renderer_api`, `pp_paint_renderer`,
   `pp_ui_core`, `pano_cli`, and their current headless test binaries,
-  including foundation event/logging/task queue coverage, PNG metadata, PPI
-  header/layout, settings document, document snapshot/per-layer-frame/move/duration
-  coverage, paint brush/stroke/stroke-script coverage, renderer shader descriptor
-  coverage, UI color parsing, and layout XML parse coverage.
+  including foundation event/logging/task queue coverage, PNG metadata and
+  decode, PPI header/layout, settings document, document
+  snapshot/per-layer-frame/move/duration coverage, paint
+  brush/stroke/stroke-script coverage, renderer shader descriptor coverage,
+  UI color parsing, and layout XML parse coverage.
 - `pano_cli inspect-image` reports PNG IHDR metadata as JSON and is covered by
   `pano_cli_inspect_png_metadata_smoke` with a tiny IHDR fixture.
 - `pano_cli inspect-project` reports validated PPI thumbnail/body byte layout,
   body summary fields, layer/frame descriptors, and dirty-face PNG payload
   metadata, and is covered by `pano_cli_inspect_project_layout_smoke` with a
   minimal PPI fixture.
+- `pp_assets_image_pixels_tests` decodes PNG payloads to RGBA8 and rejects
+  corrupt image payloads.
 - `pano_cli load-project` creates a metadata-only `pp_document` projection with
   per-layer frame counts and durations, and is covered by
   `pano_cli_load_project_metadata_smoke`.