Incorporates two of the three corrections raised by msmuenchen on discussion #2538: - Identity: document that the 64-byte Ed25519 private key is the expanded `a || RH` (orlp) form, not a 32-byte seed, and that it cannot be consumed by standard Ed25519 libraries. Touches 15-identity.md and 14-crypto.md. - Group: document the GRP_TXT/GRP_DATA inner plaintext format (timestamp + flags + message) and the GRP_TXT length limits in 08-payload-group.md. The third correction (GRP_DATA vs RAW_CUSTOM app differentiation) is deferred pending reviewer clarification. Corpus: replace the unrealistic group vectors with valid inner-format plaintexts; the ed25519 vectors now carry the 64-byte expanded key and the seed; the schema and validator gain seed fields. Also corrects two pre-existing wrong values found while verifying -- ed-001's public key and ed-002's signature now match RFC 8032. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>