Incorporates two of the three corrections raised by msmuenchen on
discussion #2538:
- Identity: document that the 64-byte Ed25519 private key is the
expanded `a || RH` (orlp) form, not a 32-byte seed, and that it
cannot be consumed by standard Ed25519 libraries. Touches
15-identity.md and 14-crypto.md.
- Group: document the GRP_TXT/GRP_DATA inner plaintext format
(timestamp + flags + message) and the GRP_TXT length limits in
08-payload-group.md.
The third correction (GRP_DATA vs RAW_CUSTOM app differentiation) is
deferred pending reviewer clarification.
Corpus: replace the unrealistic group vectors with valid inner-format
plaintexts; the ed25519 vectors now carry the 64-byte expanded key and
the seed; the schema and validator gain seed fields. Also corrects two
pre-existing wrong values found while verifying -- ed-001's public key
and ed-002's signature now match RFC 8032.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
swaitsandClaude Opus 4.7
9d7b1c6281