- Shipped
- August 6, 2026 at 5:48 PM UTC
- Author
- Kamo
- Commit
- 8fa9f38
manifestSha256 hashes the ordered [{documentUid, contentSha256, orderIndex}] the member was actually shown, length-prefixed so a crafted uid cannot imitate a field boundary and make two different document sets hash the same. proofJson is stored verbatim and round-trips back to the same digest — a proof blob that cannot regenerate its own hash proves nothing. LegalClientIp walks X-Forwarded-For RIGHT-to-LEFT and takes the first public hop. DocumentAccessAuditor reads it left-to-right, which is client-controlled; that pre-existing defect is not fixed here, but it must not be the source of an evidentiary sourceIp.