bundle demo-tampered.zip: format v1, issuer da34a25b-9eb7-425b-bd89-579398cd03f9 (TENANT, Demo Stable Issuance Co. (synthetic))
  M1 manifest file hashes: FAIL (22 files)
  M2 one chain: OK
  C1 chain walk: FAIL (1229 records, head seq 1229)
  A2 coverage: OK — head seq 1229, anchored through seq 1228, + 1 anchor MANIFEST(s) attested by their own anchor payload
  anchor 906521e0-e410-40cd-b861-fa6f57a58962 [DAILY ANCHORED]: manifest + merkle root OK (seqs 1-3)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-09T22:04:36Z ±1 s: OK — 0.8 s before anchored_at (bound ±600 s); 0.7 s before seq 3, the newest covered record (within the token's 2 s precision)
  anchor b44de7c8-8185-45ce-a6b0-8193fea3f9be [DAILY ANCHORED]: manifest + merkle root OK (seqs 4-29)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-10T03:17:59Z ±1 s: OK — 0.9 s before anchored_at (bound ±600 s); 53.0 s after seq 29, the newest covered record
  anchor 8c6ea056-45df-47b4-8faa-9c29ab645daa [DAILY ANCHORED]: manifest + merkle root OK (seqs 30-30)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-10T03:18:06Z ±1 s: OK — 0.9 s before anchored_at (bound ±600 s); 6.2 s after seq 30, the newest covered record
  anchor 500ccf69-6a2a-4ca4-ac95-d45f680ef236 [DAILY ANCHORED]: manifest + merkle root OK (seqs 31-47)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-10T05:34:02Z ±1 s: OK — 0.6 s before anchored_at (bound ±600 s); 0.5 s before seq 47, the newest covered record (within the token's 2 s precision)
  anchor 620b78eb-ad6e-4498-8c05-3da0bae10b83 [MONTHLY ANCHORED]: manifest + merkle root OK (rolls up 4 dailies, seqs 1-47)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-10T05:34:02Z ±1 s: OK — 0.6 s before anchored_at (bound ±600 s); 0.5 s before seq 47, the newest covered record (within the token's 2 s precision)
  anchor 1a232de5-ecbb-465b-9edc-2fc835163e65 [DAILY ANCHORED]: manifest + merkle root OK (seqs 48-50)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-10T05:34:37Z ±1 s: OK — 0.3 s before anchored_at (bound ±600 s); 34.4 s after seq 50, the newest covered record
  anchor e039443b-3982-4ae6-836e-034907932920 [MONTHLY ANCHORED]: manifest + merkle root OK (rolls up 5 dailies, seqs 1-50)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-10T05:34:37Z ±1 s: OK — 0.3 s before anchored_at (bound ±600 s); 34.4 s after seq 50, the newest covered record
  anchor c38891c9-032a-40d3-ab48-ce74c0bfa126 [DAILY ANCHORED]: manifest + merkle root OK (seqs 51-87)
    tsa primary: absent, no timestamp evidence — [provenance not recorded] no reason recorded
    tsa secondary: openssl ts -verify OK [provenance not recorded]
    tsa secondary: T2 genTime 2026-07-10T20:02:47Z ±1 s: OK — 0.6 s before anchored_at (bound ±600 s); 0.2 s before seq 87, the newest covered record (within the token's 2 s precision)
  anchor 72699065-65ae-4f7a-804d-45b3c467d75d [DAILY ANCHORED]: manifest + merkle root OK (seqs 88-176)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-05T03:20:25Z ±1 s: OK — 0.1 s before anchored_at (bound ±600 s); 714.0 s after seq 176, the newest covered record
  anchor f60a81ef-19f5-4e4a-9880-7ff577a7317d [DAILY ANCHORED]: manifest + merkle root OK (seqs 177-282)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-07T03:09:28Z ±1 s: OK — 0.6 s before anchored_at (bound ±600 s); 0.2 s before seq 282, the newest covered record (within the token's 2 s precision)
  anchor e5f55644-e4f5-48f4-9e24-8159af6900dd [DAILY ANCHORED]: manifest + merkle root OK (seqs 283-352)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-08T03:07:29Z ±1 s: OK — 0.0 s before anchored_at (bound ±600 s); 0.4 s after seq 352, the newest covered record
  anchor 38fdba42-7320-4efe-ad9f-fcfa79f7f1aa [DAILY ANCHORED]: manifest + merkle root OK (seqs 353-421)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-10T03:12:39Z ±1 s: OK — 0.4 s before anchored_at (bound ±600 s); 0.1 s before seq 421, the newest covered record (within the token's 2 s precision)
  anchor 25d06d3c-b246-4aa2-9ff6-d57fd85747f5 [DAILY ANCHORED]: manifest + merkle root OK (seqs 422-473)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-11T03:13:39Z ±1 s: OK — 0.9 s before anchored_at (bound ±600 s); 0.6 s before seq 473, the newest covered record (within the token's 2 s precision)
  anchor 525b093c-5b1c-45ff-b362-46db9c68c793 [DAILY ANCHORED]: manifest + merkle root OK (seqs 474-525)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-12T03:17:16Z ±1 s: OK — 0.3 s before anchored_at (bound ±600 s); 0.0 s before seq 525, the newest covered record (within the token's 2 s precision)
  anchor c2c60bdb-29be-4cbb-80ad-f8376d9430e4 [DAILY ANCHORED]: manifest + merkle root OK (seqs 526-579)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-13T03:14:03Z ±1 s: OK — 0.2 s before anchored_at (bound ±600 s); 0.2 s after seq 579, the newest covered record
  anchor 70fe79a0-6e8e-4ad8-917e-ceceb3c86f40 [DAILY ANCHORED]: manifest + merkle root OK (seqs 580-637)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-14T03:12:12Z ±1 s: OK — 0.4 s before anchored_at (bound ±600 s); 0.3 s after seq 637, the newest covered record
  anchor d05620e8-cace-47b8-bf76-c56e37969c1f [DAILY ANCHORED]: manifest + merkle root OK (seqs 638-701)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-15T03:16:37Z ±1 s: OK — 0.1 s before anchored_at (bound ±600 s); 0.4 s after seq 701, the newest covered record
  anchor 10da2a63-2be7-44e6-a937-7c09b2a7206b [DAILY ANCHORED]: manifest + merkle root OK (seqs 702-731)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-16T03:17:01Z ±1 s: OK — 0.1 s before anchored_at (bound ±600 s); 0.3 s after seq 731, the newest covered record
  anchor 412a0a8b-ba66-4448-aedc-10c011494c41 [DAILY ANCHORED]: manifest + merkle root OK (seqs 732-1228)
    tsa primary: absent, no timestamp evidence — [CONTRACTED_STUB] NOT_CONFIGURED (G4: contracted TSA pending)
    tsa secondary: openssl ts -verify OK [SELF_SIGNED_LOCAL]
    tsa secondary: T2 genTime 2026-09-25T20:25:59Z ±1 s: OK — 0.9 s before anchored_at (bound ±600 s); 2048.2 s after seq 1228, the newest covered record
  STORAGE_PROOF USDC@25498769 total_supply 50736130018180180: S1 S2 S3 OK
  P1 payloads: 20 carried, 0 withheld
  ots: 0 proof(s) present, 19 absent — not checked here (needs the `ots` client and a Bitcoin node)

FAILURES:
  - M1: `records.json` does not hash to its manifest.files value
  - C1: seq 500: record_hash mismatch

timestamp legs: 19 verified by `openssl ts -verify` (0 external, 11 self-signed, 8 provenance not recorded), 0 present but NOT verified, 19 recorded absent
NOT all evidence in demo-tampered.zip was verified — see FAILURES above.