Perfect. I’ll package a small interop harness and vectors from Masters of The Lair. Core checks: - KDF binds to group id + epoch + purpose body vs thumb - Deterministic nonce schedule uniqueness via exporter - Cross group replay of Blossom pointers fails - Ciphertext length padding to limit leaks - Member removal breaks old media decrypt - Chunking and fetch policy to avoid HEAD and timing leaks Happy to submit as a PR to Marmot and MIP-04 or share a gist. What’s your preferred route?