{
  "result": "PASS",
  "createdUTC": "2026-10-31T05:28:26.503192+00:00",
  "finding": "The 51 previously unresolved counterparty contract signatures all recover under their exact ERC7739 nested message. None of their authorizing keys matches the retained comparison targets. This closes an observed signature-coverage gap without adding an actor-attribution link.",
  "counts": {
    "longCounterpartySignatureAppearances": 51,
    "uniqueNestedSignaturePairs": 51,
    "distinctTransactions": 34,
    "distinctMakerContracts": 34,
    "distinctNestedRecoveredAuthorizingKeys": 34,
    "combinedCounterpartyAppearancesWithPreviousStandardLedger": 383,
    "combinedDistinctKeysWithPreviousStandardLedger": 172,
    "embeddedAppDomainContentsAndTypeChecks": 51,
    "receiptAndHeaderBindings": 51,
    "recoveryUnresolved": 0,
    "targetAddressEntries": 19,
    "targetUniqueAddresses": 18,
    "plannedHistoricalOwnerCalls": 47,
    "plannedHistoricalERC1271Calls": 51,
    "historicalOwnerCorroboratedAppearances": 51,
    "historicalERC1271CorroboratedAppearances": 51,
    "historicalHTTPAttempts": 33,
    "historicalFailedHTTPAttempts": 16
  },
  "combinedScope": "383 observed counterparty order appearances: 332 previously recovered standard signatures plus these 51 nested signatures, yielding 172 distinct authorizing keys when combined with the retained standard-signature ledger.",
  "rawOrderChecks": [
    "Matched each signature and order digest to the original transaction calldata and its target token ID.",
    "Rebuilt Polymarket CTF Exchange v2 EIP712 application domain for Polygon chain137 and the actual exchange address.",
    "Verified the embedded domain separator, contents hash, complete Order type description and uint16 description length.",
    "Recovered the public address from the nested TypedDataSign message using DepositWallet version1, chain137, the maker wallet contract and zero salt.",
    "Bound each order digest to exactly one successful exchange fill event and retained transaction/receipt/block header; checked fill maker, side, token, amounts, metadata and builder."
  ],
  "historicalCorroboration": {
    "state": "Execution-block end-of-block state",
    "ownerRequests": 47,
    "ERC1271Requests": 51,
    "ownerMatchedAppearances": 51,
    "validSignatureAppearances": 51,
    "unresolvedRequestIDs": [],
    "successfulCallsByEndpoint": {
      "https://polygon.gateway.tenderly.co": 2,
      "https://polygon.drpc.org": 96
    },
    "HTTPAttempts": 33,
    "HTTP429Attempts": 16,
    "RPCErrorResponses": 16,
    "failedAttemptBounds": "Tenderly accepted 2 of the planned calls; 16 batch attempts returned HTTP429/rate-limit errors. All 96 pending calls succeeded at DRPC. HTTP failures and unanswered per-batch IDs remain in the raw capsule."
  },
  "comparison": {
    "targetEntries": 19,
    "uniqueTargetAddresses": 18,
    "exactMakerMatches": 0,
    "exactClaimedContractSignerMatches": 0,
    "exactNestedKeyMatches": 0,
    "recoveryUnresolved": 0,
    "corroborationUnresolved": 0
  },
  "replay": "PYTHONDONTWRITEBYTECODE=1 python3 verify_nested_signatures_offline.py --check",
  "limits": [
    "The claimed signer for these signature-type-3 orders is a wallet contract; the nested recovered address is its authorizing key for this exact signed message.",
    "Historical calls use the execution block (end-of-block state), not unobserved intrablock signing-time state.",
    "Exact address nonmatches cover the retained target list and observed orders only. They do not exclude other accounts, private arrangements, unseen orders or a shared human operator.",
    "A signed timestamp is message content, not independently observed creation time. Public key recovery identifies no person and proves no intent.",
    "The target list distinguishes tracked flow addresses, an actual payer and computed wallet formats; no target role is upgraded by this comparison.",
    "The 332 standard recoveries are retained prior evidence; this helper freshly replays the 51 nested signatures and computes the combined distinct-key count from that prior ledger.",
    "Retained RPC consistency and header binding do not constitute a consensus inclusion proof.",
    "No source-control, campaign-payment or human-control edge is established by this negative comparison."
  ]
}