11. How does the archives directory works?

Once you request apt to install some package or do an upgrade (either upgrade or dist-upgrade), it will download the necessary packages to the /var/cache/apt/archives/partial/ and, after verifying its MD5 hash and size, it will them move these packages to /var/cache/apt/archives/.

You can assume that every file in the archives/ directory has been verified. This isn't true for archives/partial/ files.