{
  "schema": "com.catellix.mvps.cwt_pcap_receipt_v1",
  "draft": "draft-melegassi-santos-ippm-mvps-cwt-00",
  "generated_at_utc": "2026-05-26T18:08:27.499704+00:00",
  "wire_format": {
    "linktype": "LINKTYPE_ETHERNET (1)",
    "transport": "UDP",
    "udp_dst_port": 45878,
    "udp_src_port": 49152,
    "ip_src": "203.0.113.10",
    "ip_dst": "203.0.113.20",
    "bundle_magic_hex": "0x4D424E44",
    "bundle_magic_ascii": "MBND",
    "cwt_magic_hex": "0x4357544C",
    "cwt_magic_ascii": "CWTL",
    "n_vantages_per_bundle": 4,
    "witness_quorum_attached": 2,
    "witness_pool_size": 5,
    "payload_layout_bytes": [
      {
        "offset": 0,
        "len": 4,
        "field": "MVPS Bundle magic 'MBND' (0x4D424E44)"
      },
      {
        "offset": 4,
        "len": 4,
        "field": "bundle_id (uint32 BE)"
      },
      {
        "offset": 8,
        "len": 8,
        "field": "tick_k (uint64 BE)"
      },
      {
        "offset": 16,
        "len": 8,
        "field": "epoch_id (uint64 BE)"
      },
      {
        "offset": 24,
        "len": 2,
        "field": "n_vantages (uint16 BE)"
      },
      {
        "offset": 26,
        "len": 2,
        "field": "f_adversaries (uint16 BE)"
      },
      {
        "offset": 28,
        "len": 8,
        "field": "D2 aggregate (float64 BE)"
      },
      {
        "offset": 36,
        "len": 32,
        "field": "Per-vantage record \u00d7 N (32 B each)"
      },
      {
        "offset": "36+32N",
        "len": 4,
        "field": "CWT envelope magic 'CWTL'"
      },
      {
        "offset": "+4",
        "len": 8,
        "field": "epoch_id repeat (uint64 BE)"
      },
      {
        "offset": "+8",
        "len": 16,
        "field": "operator_id (16 B ASCII)"
      },
      {
        "offset": "+24",
        "len": 32,
        "field": "manifest_root_sha256 (32 B)"
      },
      {
        "offset": "+56",
        "len": 64,
        "field": "operator_ed25519_sig (64 B)"
      },
      {
        "offset": "+120",
        "len": 2,
        "field": "witness_count (uint16 BE)"
      },
      {
        "offset": "+122",
        "len": 72,
        "field": "Per-witness record \u00d7 W (8 B id + 64 B sig)"
      }
    ]
  },
  "trust_layers_proven_on_wire": [
    {
      "layer": 1,
      "name": "HMAC-SHA256 per snapshot",
      "covers": "vantage HMAC-12 over (bundle header || vantage record)",
      "verifier": "K_v_epoch = HKDF-SHA256(salt='MVPS-CWT-v1|operator:'+operator_id, ikm=K_OP, info='vantage:<id>|epoch:<id>', L=32); HMAC-SHA256(K_v_epoch, body)[:12] must match the trailing 12 bytes of each vantage record",
      "theorem_anchor": "T-COAL-1 (coalition resistance, CWT proof \u00a76)"
    },
    {
      "layer": 2,
      "name": "Ed25519 epoch manifest signature",
      "covers": "operator signs SHA-256 root over every bundle in this epoch",
      "verifier": "Ed25519.verify(operator_ed25519_pub, manifest_root, epoch_ed25519_sig)",
      "theorem_anchor": "T-SPLIT-1 (split-view resistance, CWT proof \u00a77)"
    },
    {
      "layer": 3,
      "name": "Independent witness cosignatures (2-of-5)",
      "covers": "Each witness signs the manifest root with its own Ed25519 key",
      "verifier": "for each (witness_id, witness_sig): Ed25519.verify(witness_pub[id], manifest_root, witness_sig)",
      "theorem_anchor": "Sigsum-style witness quorum (CWT \u00a77.2)"
    }
  ],
  "files": [
    {
      "regime": "baseline",
      "path": "frontend/static/download/mvps_cwt_baseline.pcap",
      "n_packets": 30,
      "bytes": 15744,
      "file_sha256": "7d87acb376e2fac80fb476eafbd0714579bb36d5493719fdddd31c30095cd546",
      "epoch_id": 494447,
      "operator_id": "OP-CATELLIX-PROD",
      "operator_ed25519_pub_hex": "f14e8d5bf29f93390715e0064a121b1560eb7b0e1df76a4e5f9f70ba7dd97ea1",
      "witness_quorum": 2,
      "witness_pool_size": 5,
      "witness_pubs": [
        {
          "witness_id": "WIT-N1AS",
          "ed25519_pub_hex": "cd254a75c0c7d922178b61cb6b6b68b5108872137fd1fbc3c68549fb695a3880"
        },
        {
          "witness_id": "WIT-N2EU",
          "ed25519_pub_hex": "a6363aac7164f879a5bacfd3fdb86be8a207725b4312f083602dbc96b408d239"
        },
        {
          "witness_id": "WIT-N3SA",
          "ed25519_pub_hex": "6e3f43dfc21545feca81fcc3c0d6edfd3f8a0b36914285c444c43a0fc7e2c23a"
        },
        {
          "witness_id": "WIT-N4AP",
          "ed25519_pub_hex": "0f73abfb60de80c9d64ca25e64cf5acf472d7ddb722ee4ba526932704fe48b4a"
        },
        {
          "witness_id": "WIT-N5AF",
          "ed25519_pub_hex": "6a6586837bde74640f6eb02d095e997a364142334fe0badc8bd33b4cafea8e17"
        }
      ],
      "manifest_root_sha256": "c869880a5efb16421d37d7387376648e65d734c505280c1375582a62f79076e4",
      "n_vantages_per_bundle": 4,
      "f_adversaries": 1,
      "udp_dst_port": 45878,
      "src_ip": "203.0.113.10",
      "dst_ip": "203.0.113.20",
      "packets": [
        {
          "index": 0,
          "bundle_id": "0xCB000000",
          "tick_k": 200000,
          "epoch_id": 494447,
          "d2": 1.7702,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "71e526ae6e27",
          "tampered_vantage_index": null
        },
        {
          "index": 1,
          "bundle_id": "0xCB000001",
          "tick_k": 200001,
          "epoch_id": 494447,
          "d2": 2.3361,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "5e2584439398",
          "tampered_vantage_index": null
        },
        {
          "index": 2,
          "bundle_id": "0xCB000002",
          "tick_k": 200002,
          "epoch_id": 494447,
          "d2": 2.4464,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "576a12909f97",
          "tampered_vantage_index": null
        },
        {
          "index": 3,
          "bundle_id": "0xCB000003",
          "tick_k": 200003,
          "epoch_id": 494447,
          "d2": 1.6286,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "d8e6d2643956",
          "tampered_vantage_index": null
        },
        {
          "index": 4,
          "bundle_id": "0xCB000004",
          "tick_k": 200004,
          "epoch_id": 494447,
          "d2": 2.258,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "a2a7bf777941",
          "tampered_vantage_index": null
        },
        {
          "index": 5,
          "bundle_id": "0xCB000005",
          "tick_k": 200005,
          "epoch_id": 494447,
          "d2": 2.1112,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "f29adc3b8bbc",
          "tampered_vantage_index": null
        },
        {
          "index": 6,
          "bundle_id": "0xCB000006",
          "tick_k": 200006,
          "epoch_id": 494447,
          "d2": 1.498,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "478095f081b8",
          "tampered_vantage_index": null
        },
        {
          "index": 7,
          "bundle_id": "0xCB000007",
          "tick_k": 200007,
          "epoch_id": 494447,
          "d2": 2.0916,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "8bb1ccd5c156",
          "tampered_vantage_index": null
        },
        {
          "index": 8,
          "bundle_id": "0xCB000008",
          "tick_k": 200008,
          "epoch_id": 494447,
          "d2": 1.5955,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "08025bfc0a1d",
          "tampered_vantage_index": null
        },
        {
          "index": 9,
          "bundle_id": "0xCB000009",
          "tick_k": 200009,
          "epoch_id": 494447,
          "d2": 2.1475,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "d1e14b6c6087",
          "tampered_vantage_index": null
        },
        {
          "index": 10,
          "bundle_id": "0xCB00000A",
          "tick_k": 200010,
          "epoch_id": 494447,
          "d2": 1.9058,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "009711fdb186",
          "tampered_vantage_index": null
        },
        {
          "index": 11,
          "bundle_id": "0xCB00000B",
          "tick_k": 200011,
          "epoch_id": 494447,
          "d2": 2.4476,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "15d5eebd0408",
          "tampered_vantage_index": null
        },
        {
          "index": 12,
          "bundle_id": "0xCB00000C",
          "tick_k": 200012,
          "epoch_id": 494447,
          "d2": 2.5429,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "5bde6e4322fd",
          "tampered_vantage_index": null
        },
        {
          "index": 13,
          "bundle_id": "0xCB00000D",
          "tick_k": 200013,
          "epoch_id": 494447,
          "d2": 1.6744,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "c467124105f8",
          "tampered_vantage_index": null
        },
        {
          "index": 14,
          "bundle_id": "0xCB00000E",
          "tick_k": 200014,
          "epoch_id": 494447,
          "d2": 2.0794,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "ab2245a6b840",
          "tampered_vantage_index": null
        },
        {
          "index": 15,
          "bundle_id": "0xCB00000F",
          "tick_k": 200015,
          "epoch_id": 494447,
          "d2": 1.8456,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "4d130a9736ed",
          "tampered_vantage_index": null
        },
        {
          "index": 16,
          "bundle_id": "0xCB000010",
          "tick_k": 200016,
          "epoch_id": 494447,
          "d2": 1.869,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "d6532d977b62",
          "tampered_vantage_index": null
        },
        {
          "index": 17,
          "bundle_id": "0xCB000011",
          "tick_k": 200017,
          "epoch_id": 494447,
          "d2": 1.6901,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "d5b24045a0e0",
          "tampered_vantage_index": null
        },
        {
          "index": 18,
          "bundle_id": "0xCB000012",
          "tick_k": 200018,
          "epoch_id": 494447,
          "d2": 2.0816,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "bf15a27bc207",
          "tampered_vantage_index": null
        },
        {
          "index": 19,
          "bundle_id": "0xCB000013",
          "tick_k": 200019,
          "epoch_id": 494447,
          "d2": 1.5202,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "4543a71c7f2e",
          "tampered_vantage_index": null
        },
        {
          "index": 20,
          "bundle_id": "0xCB000014",
          "tick_k": 200020,
          "epoch_id": 494447,
          "d2": 2.2286,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "dd61039864c2",
          "tampered_vantage_index": null
        },
        {
          "index": 21,
          "bundle_id": "0xCB000015",
          "tick_k": 200021,
          "epoch_id": 494447,
          "d2": 2.7966,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "35c7e3d81ef3",
          "tampered_vantage_index": null
        },
        {
          "index": 22,
          "bundle_id": "0xCB000016",
          "tick_k": 200022,
          "epoch_id": 494447,
          "d2": 2.3328,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "04c832f9fdb1",
          "tampered_vantage_index": null
        },
        {
          "index": 23,
          "bundle_id": "0xCB000017",
          "tick_k": 200023,
          "epoch_id": 494447,
          "d2": 1.7689,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "6a5754817051",
          "tampered_vantage_index": null
        },
        {
          "index": 24,
          "bundle_id": "0xCB000018",
          "tick_k": 200024,
          "epoch_id": 494447,
          "d2": 1.8487,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "9e16652277ec",
          "tampered_vantage_index": null
        },
        {
          "index": 25,
          "bundle_id": "0xCB000019",
          "tick_k": 200025,
          "epoch_id": 494447,
          "d2": 2.0555,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "2aee9bbb618c",
          "tampered_vantage_index": null
        },
        {
          "index": 26,
          "bundle_id": "0xCB00001A",
          "tick_k": 200026,
          "epoch_id": 494447,
          "d2": 2.1669,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "f4199237616d",
          "tampered_vantage_index": null
        },
        {
          "index": 27,
          "bundle_id": "0xCB00001B",
          "tick_k": 200027,
          "epoch_id": 494447,
          "d2": 2.5416,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "bc483511b355",
          "tampered_vantage_index": null
        },
        {
          "index": 28,
          "bundle_id": "0xCB00001C",
          "tick_k": 200028,
          "epoch_id": 494447,
          "d2": 2.6086,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "dd657f2d7903",
          "tampered_vantage_index": null
        },
        {
          "index": 29,
          "bundle_id": "0xCB00001D",
          "tick_k": 200029,
          "epoch_id": 494447,
          "d2": 2.4143,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "84ef43285230",
          "tampered_vantage_index": null
        }
      ]
    },
    {
      "regime": "forged",
      "path": "frontend/static/download/mvps_cwt_forged.pcap",
      "n_packets": 30,
      "bytes": 15744,
      "file_sha256": "1ebdf39158d98c6696bc265be16e4546319acffb63c864c6fcf3cdb7377e8eaa",
      "epoch_id": 494447,
      "operator_id": "OP-CATELLIX-PROD",
      "operator_ed25519_pub_hex": "f14e8d5bf29f93390715e0064a121b1560eb7b0e1df76a4e5f9f70ba7dd97ea1",
      "witness_quorum": 2,
      "witness_pool_size": 5,
      "witness_pubs": [
        {
          "witness_id": "WIT-N1AS",
          "ed25519_pub_hex": "cd254a75c0c7d922178b61cb6b6b68b5108872137fd1fbc3c68549fb695a3880"
        },
        {
          "witness_id": "WIT-N2EU",
          "ed25519_pub_hex": "a6363aac7164f879a5bacfd3fdb86be8a207725b4312f083602dbc96b408d239"
        },
        {
          "witness_id": "WIT-N3SA",
          "ed25519_pub_hex": "6e3f43dfc21545feca81fcc3c0d6edfd3f8a0b36914285c444c43a0fc7e2c23a"
        },
        {
          "witness_id": "WIT-N4AP",
          "ed25519_pub_hex": "0f73abfb60de80c9d64ca25e64cf5acf472d7ddb722ee4ba526932704fe48b4a"
        },
        {
          "witness_id": "WIT-N5AF",
          "ed25519_pub_hex": "6a6586837bde74640f6eb02d095e997a364142334fe0badc8bd33b4cafea8e17"
        }
      ],
      "manifest_root_sha256": "c869880a5efb16421d37d7387376648e65d734c505280c1375582a62f79076e4",
      "n_vantages_per_bundle": 4,
      "f_adversaries": 1,
      "udp_dst_port": 45878,
      "src_ip": "203.0.113.10",
      "dst_ip": "203.0.113.20",
      "packets": [
        {
          "index": 0,
          "bundle_id": "0xCB000000",
          "tick_k": 200000,
          "epoch_id": 494447,
          "d2": 1.7702,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "4cbe2740de87",
          "tampered_vantage_index": 1
        },
        {
          "index": 1,
          "bundle_id": "0xCB000001",
          "tick_k": 200001,
          "epoch_id": 494447,
          "d2": 2.3361,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "530080e19fe6",
          "tampered_vantage_index": 1
        },
        {
          "index": 2,
          "bundle_id": "0xCB000002",
          "tick_k": 200002,
          "epoch_id": 494447,
          "d2": 2.4464,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "256fb780dabc",
          "tampered_vantage_index": 1
        },
        {
          "index": 3,
          "bundle_id": "0xCB000003",
          "tick_k": 200003,
          "epoch_id": 494447,
          "d2": 1.6286,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "0936d8c8d7d5",
          "tampered_vantage_index": 1
        },
        {
          "index": 4,
          "bundle_id": "0xCB000004",
          "tick_k": 200004,
          "epoch_id": 494447,
          "d2": 2.258,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "6b6cd1b64fdf",
          "tampered_vantage_index": 1
        },
        {
          "index": 5,
          "bundle_id": "0xCB000005",
          "tick_k": 200005,
          "epoch_id": 494447,
          "d2": 2.1112,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "2af9787e4215",
          "tampered_vantage_index": 1
        },
        {
          "index": 6,
          "bundle_id": "0xCB000006",
          "tick_k": 200006,
          "epoch_id": 494447,
          "d2": 1.498,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "b703cfad58e3",
          "tampered_vantage_index": 1
        },
        {
          "index": 7,
          "bundle_id": "0xCB000007",
          "tick_k": 200007,
          "epoch_id": 494447,
          "d2": 2.0916,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "144e04bd69e3",
          "tampered_vantage_index": 1
        },
        {
          "index": 8,
          "bundle_id": "0xCB000008",
          "tick_k": 200008,
          "epoch_id": 494447,
          "d2": 1.5955,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "42a9d63c732d",
          "tampered_vantage_index": 1
        },
        {
          "index": 9,
          "bundle_id": "0xCB000009",
          "tick_k": 200009,
          "epoch_id": 494447,
          "d2": 2.1475,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "ceba568c87d2",
          "tampered_vantage_index": 1
        },
        {
          "index": 10,
          "bundle_id": "0xCB00000A",
          "tick_k": 200010,
          "epoch_id": 494447,
          "d2": 1.9058,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "60f43bdfb44e",
          "tampered_vantage_index": 1
        },
        {
          "index": 11,
          "bundle_id": "0xCB00000B",
          "tick_k": 200011,
          "epoch_id": 494447,
          "d2": 2.4476,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "941368222a91",
          "tampered_vantage_index": 1
        },
        {
          "index": 12,
          "bundle_id": "0xCB00000C",
          "tick_k": 200012,
          "epoch_id": 494447,
          "d2": 2.5429,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "790ff3f0bfea",
          "tampered_vantage_index": 1
        },
        {
          "index": 13,
          "bundle_id": "0xCB00000D",
          "tick_k": 200013,
          "epoch_id": 494447,
          "d2": 1.6744,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "38befad61e04",
          "tampered_vantage_index": 1
        },
        {
          "index": 14,
          "bundle_id": "0xCB00000E",
          "tick_k": 200014,
          "epoch_id": 494447,
          "d2": 2.0794,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "7541724b4283",
          "tampered_vantage_index": 1
        },
        {
          "index": 15,
          "bundle_id": "0xCB00000F",
          "tick_k": 200015,
          "epoch_id": 494447,
          "d2": 1.8456,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "e69c9a60ba79",
          "tampered_vantage_index": 1
        },
        {
          "index": 16,
          "bundle_id": "0xCB000010",
          "tick_k": 200016,
          "epoch_id": 494447,
          "d2": 1.869,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "ede8e930c08d",
          "tampered_vantage_index": 1
        },
        {
          "index": 17,
          "bundle_id": "0xCB000011",
          "tick_k": 200017,
          "epoch_id": 494447,
          "d2": 1.6901,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "ed0c5e4d5bc8",
          "tampered_vantage_index": 1
        },
        {
          "index": 18,
          "bundle_id": "0xCB000012",
          "tick_k": 200018,
          "epoch_id": 494447,
          "d2": 2.0816,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "2f7585dea681",
          "tampered_vantage_index": 1
        },
        {
          "index": 19,
          "bundle_id": "0xCB000013",
          "tick_k": 200019,
          "epoch_id": 494447,
          "d2": 1.5202,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "3f995dc3b4b6",
          "tampered_vantage_index": 1
        },
        {
          "index": 20,
          "bundle_id": "0xCB000014",
          "tick_k": 200020,
          "epoch_id": 494447,
          "d2": 2.2286,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "ab3f28032207",
          "tampered_vantage_index": 1
        },
        {
          "index": 21,
          "bundle_id": "0xCB000015",
          "tick_k": 200021,
          "epoch_id": 494447,
          "d2": 2.7966,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "becc62c05d19",
          "tampered_vantage_index": 1
        },
        {
          "index": 22,
          "bundle_id": "0xCB000016",
          "tick_k": 200022,
          "epoch_id": 494447,
          "d2": 2.3328,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "21e642503d55",
          "tampered_vantage_index": 1
        },
        {
          "index": 23,
          "bundle_id": "0xCB000017",
          "tick_k": 200023,
          "epoch_id": 494447,
          "d2": 1.7689,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "7ea39959d182",
          "tampered_vantage_index": 1
        },
        {
          "index": 24,
          "bundle_id": "0xCB000018",
          "tick_k": 200024,
          "epoch_id": 494447,
          "d2": 1.8487,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "c26adf3a3c49",
          "tampered_vantage_index": 1
        },
        {
          "index": 25,
          "bundle_id": "0xCB000019",
          "tick_k": 200025,
          "epoch_id": 494447,
          "d2": 2.0555,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "df71dc6a755f",
          "tampered_vantage_index": 1
        },
        {
          "index": 26,
          "bundle_id": "0xCB00001A",
          "tick_k": 200026,
          "epoch_id": 494447,
          "d2": 2.1669,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "1df55852e3c5",
          "tampered_vantage_index": 1
        },
        {
          "index": 27,
          "bundle_id": "0xCB00001B",
          "tick_k": 200027,
          "epoch_id": 494447,
          "d2": 2.5416,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "8e076141ff0c",
          "tampered_vantage_index": 1
        },
        {
          "index": 28,
          "bundle_id": "0xCB00001C",
          "tick_k": 200028,
          "epoch_id": 494447,
          "d2": 2.6086,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "9d9fdea43153",
          "tampered_vantage_index": 1
        },
        {
          "index": 29,
          "bundle_id": "0xCB00001D",
          "tick_k": 200029,
          "epoch_id": 494447,
          "d2": 2.4143,
          "frame_len_bytes": 508,
          "payload_len_bytes": 466,
          "payload_sha256_first12": "92ab567fd9c5",
          "tampered_vantage_index": 1
        }
      ]
    }
  ],
  "validation": {
    "open_in_wireshark": "wireshark mvps_cwt_baseline.pcap",
    "tcpdump_hexdump": "tcpdump -X -nn -r mvps_cwt_baseline.pcap",
    "search_bundle_magic": "tshark -r mvps_cwt_baseline.pcap -Y 'data contains 4d:42:4e:44'",
    "search_cwt_magic": "tshark -r mvps_cwt_baseline.pcap -Y 'data contains 43:57:54:4c'",
    "expected_finding": "Each frame is Ether(IPv4 + UDP dst=45878) and the UDP payload begins with 4 ASCII bytes 'MBND' (D-1 Bundle TLV magic). The bundle header is followed by 4 vantage records each ending with a 12-byte HMAC-SHA256 truncated tag.  After the per-vantage block the 4-byte ASCII 'CWTL' magic appears, followed by the operator-signed epoch manifest and 2 witness cosignatures.  In mvps_cwt_forged.pcap the second vantage's HMAC is wrong by one bit \u2014 a correct verifier rejects the frame and proves T-COAL-1 in the wild.",
    "reproduce_keys": "K_OP=000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f (PUBLIC for reproducibility \u2014 rotate in production)"
  },
  "interpretation": "These libpcap files are the byte-on-the-wire evidence for MVPS draft D-10 (MVPS Trust Profile, draft-melegassi-santos-ippm-mvps-cwt-00).  Every frame carries the full 3-layer CWT envelope (HMAC + Ed25519 epoch + 2-of-5 witness cosignatures) and any reviewer can recompute every signature against the deterministic public keys above.  The forged variant exists so a reviewer can witness rejection \u2014 that is the operational meaning of T-COAL-1."
}