3 layers × [F: U/D/L/R + E: U/D/L/R/B] = 27. L3 E.bottom is the one held-out point.
F is displayed antistropically by reversing/complementing alternating layers. The held E.bottom point is not used to produce the inference; it is revealed afterward as witness telemetry.
3 · DEFENSIVE CHECKS
0
NO FILE SCANNED
waiting for file
The geometry is an integrity/structure signal only. Malware evidence comes from the local hash lists, file-type mismatch, suspicious script markers, and entropy/context checks.
4 · CORPUS / ANCESTRY
KNOWN-BAD SHA-256 · one per line
KNOWN-GOOD SHA-256 · one per line
Export is append-only evidence: hash, 26-bit morph, inferred bit, held witness, pulse, and defensive findings.