[
  {
    "name": "sig-001-ed25519-rfc8032-kat-empty",
    "description": "Positive (C2): RFC 8032 Test 1 — sign an empty message with the known seed; the signature is deterministic and reproducible by any Ed25519 implementation. Exercises the signature primitive directly (real, not placeholder).",
    "signing_key_seed": "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
    "verifying_key":    "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "message_hex":      "",
    "signature":        "e5564300c360ac729086e2cc806e828a84877f1eb8e5d974d873e065224901555fb8821590a33bacc61e39701cf9b46bd25bf5f0595bbe24655141438e7a100b",
    "expected_verify":  true,
    "error": null
  },
  {
    "name": "sig-002-ed25519-rfc8032-kat-1byte",
    "description": "Positive (C2): RFC 8032 Test 2 — sign the one-byte message 0x72 with the known seed. Real known-answer vector.",
    "signing_key_seed": "4ccd089b28ff96da9db6c346ec114e0f5b8a319f35aba624da8cf6ed4fb8a6fb",
    "verifying_key":    "3d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c",
    "message_hex":      "72",
    "signature":        "92a009a9f0d4cab8720e820b5f642540a2b27b5416503f8fb3762223ebdb69da085ac1e43e15996e458f3613d0f11d8c387b2eaeb4302aeeb00d291612bb0c00",
    "expected_verify":  true,
    "error": null
  },
  {
    "name": "sig-003-op-binding-positive",
    "description": "Positive (C2): a SignedOp whose signature preimage is op_id || prior. Verification recomputes op_id from the canonical form and checks the signature over op_id||prior. Regenerated against joule-code-rs.",
    "op_id":           "b3:6Ysltc7O3IupNKFXybnzyv2ot32SSLLvCQRB8AHKIdQ",
    "prior":           "b3:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
    "signing_key_seed":"9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
    "verifying_key":   "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "signature":       "9b632a9b0ee745fd0ebd18e68514b3433f7fe527b100079d9f53f60a43c1f6565bcec2635bc56970bf1b59fbcaeda4ccefebee357771c06af478910e4f53ee09",
    "expected_verify": true,
    "error": null
  },
  {
    "name": "sig-004-replay-onto-different-base-rejected",
    "description": "Negative (C2): the signature from sig-003 verified against a DIFFERENT prior than the one it was signed over. The preimage op_id||prior no longer matches; verification MUST return false. This is the replay-onto-a-different-base attack the prior-binding defends against.",
    "op_id":           "b3:6Ysltc7O3IupNKFXybnzyv2ot32SSLLvCQRB8AHKIdQ",
    "prior":           "b3:CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC",
    "signing_key_seed":"9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
    "verifying_key":   "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "signature":       "9b632a9b0ee745fd0ebd18e68514b3433f7fe527b100079d9f53f60a43c1f6565bcec2635bc56970bf1b59fbcaeda4ccefebee357771c06af478910e4f53ee09",
    "expected_verify": false,
    "error": "signature_does_not_bind_prior"
  },
  {
    "name": "sig-005-tampered-edits-rejected",
    "description": "Negative (C2): edits altered after signing. The recomputed op_id differs from the one the signature binds; verification MUST return false.",
    "op_id":           "b3:8kTnZfhR3BBgx2VP2_jOVImOXqkLUoSkNRSjw91j9uI",
    "prior":           "b3:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
    "signing_key_seed":"9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
    "verifying_key":   "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "signature":       "9b632a9b0ee745fd0ebd18e68514b3433f7fe527b100079d9f53f60a43c1f6565bcec2635bc56970bf1b59fbcaeda4ccefebee357771c06af478910e4f53ee09",
    "expected_verify": false,
    "error": "op_id_mismatch"
  }
]