# TENGRI 137 — EVIDENCE LEDGER **Compiled:** 2026-07-24 · **Role:** archivist / closing adjudication over the whole corpus at ``. **Corpus size when this file was written:** 1121 files, ~70 MB. **The corpus kept growing after that** (gap agents kept adding `gaps/seed-0N-files/` payloads); it measured 1135 regular files at the start of the closing consistency pass and 1161 regular files / 73,816,520 bytes (70.4 MiB) at its close. `MASTER-INDEX.md` records a fourth, intermediate figure (1126) taken at 14:30 CEST, which additionally counted 5 GnuPG scratch sockets as files. **At the FINAL consistency pass the tree measured 1901 files / 556,813,801 bytes (531.0 MiB)** — the jump is the `tr1-*` gap round, the `c1-*` gap round and the trained language models in `solve/lexicons/`, all of which postdate this file's first writing. See `MASTER-INDEX.md` §11.3a, §11.3b, §11.7. **These are timestamps of one live tree, not competing claims.** Everything outside `gaps/` and `solve/` has been stable throughout. **Purpose:** one authoritative separation of what is *proven*, what is *testable*, what is *rejected*, and what is *open*. This file does not restate the artifact files; it grades them. ## How to read this file **Provenance tiers** | Tier | Meaning | |---|---| | **PRIMARY** | 2016–2017 contemporary artifact, or the original file, or a PGP-signed message from key `0xD152D6C5666AB731`. Signed items are the hardest tier: a signature cannot be made to fit a body it does not cover. | | **SECONDARY** | Contemporary third-party reporting on primary material (Cipherbrain articles, the Tengri 137 Wikia, contemporary Reddit write-ups). | | **SPECULATION** | Later (or unsourced) forum / Discord / Reddit / blog guesswork with no primary artifact behind it. | | **INVESTIGATOR-DERIVED** | Computed by an investigator (including me) from primary data. Reproducible, but not a source. | **Verification convention.** Every number, length, dimension, hash, count and structural claim in §1 was **recomputed from the on-disk primary bytes during this pass** with `python3` / `gpg` / `shasum`, not copied from another corpus file. Where I merely *report* what a source says without being able to test it, the entry says so explicitly. Where the record is genuinely ambiguous, both alternatives are printed rather than one being chosen silently. **Reproduction environment for this pass:** GnuPG 2.5.20 in an isolated `GNUPGHOME` with exactly one key imported (`recon/code-hosts/tengri137-PGP-PUBLIC-KEY-D152D6C5666AB731.asc`), Python 3.11, no network dependency for any of the checks below. --- --- # §1. CONFIRMED FACTS Each item: statement → primary artifact + URL → tier → how I verified it this pass → confidence. ## 1.1 Identity, key and account **F-01. The signing key is RSA-4096 `0xD152D6C5666AB731`, fingerprint `2A2C0AD4ED1CAD8353A30056D152D6C5666AB731`, created 2016-04-24 11:05:11 UTC, carrying TWO user IDs: `Tengri 137` and `Tengri (137)`.** - Source: `recon/code-hosts/tengri137-PGP-PUBLIC-KEY-D152D6C5666AB731.asc`; keyserver copies at `https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xD152D6C5666AB731` and `https://keys.openpgp.org/` (local copies `harvest/037-tengri137-pubkey-0x666AB731-ubuntu-keyserver.asc`, `recon/pgp-crypto/key_openpgporg_666ab731.asc`). - TIER: **PRIMARY**. Confidence: **HIGH**. - Verified this pass: `gpg --list-keys --with-colons` → `pub:-:4096:1:D152D6C5666AB731:1461495911:...`, `fpr:...:2A2C0AD4ED1CAD8353A30056D152D6C5666AB731:`, uid records `Tengri 137` (self-sig 1568106601 = 2019-09-10) and `Tengri (137)` (self-sig 1462207529 = 2016-05-02). The case brief's fingerprint and the user id `Tengri (137)` both match byte-for-byte. - Corollary (INVESTIGATOR-DERIVED, trivial): the Twitter handle `@666ab731` is the **low 32 bits of the 64-bit key id** `D152D6C5`**`666AB731`**. The handle is derived from the key, not chosen for meaning. - Note: the key carries 4 third-party certifications from keys not in the corpus (`0x040484988228DD98`, `0xA49BDCD5BC224010`, `0xD2FBEC71DB65A36D`, `0x6966D8E21ACC064F`). Those certify the key; they say nothing about who the author is. **F-02. 23 artifacts verify GOOD against that key — 19 clearsigned messages and 4 detached signatures — spanning 2016-05-14 → 2019-02-22.** - TIER: **PRIMARY**. Confidence: **HIGH** (cryptographic). - Verified this pass by running `gpg --verify` over every candidate on disk. All 19 clearsigned GOOD signatures reproduced, with these signature timestamps (UTC, from the signature packet): | signed (UTC) | artifact | raw URL | |---|---|---| | 2016-05-14 09:06:52 | pastebin `fvRGu37W` — "Verify our messages with OpenPGP." | `https://pastebin.com/raw/fvRGu37W` | | 2016-08-18 19:45:19 | Dropbox `137.txt` | Dropbox folder (see F-14) | | 2016-09-01 17:19:43 | pastebin `X0pJtqfD` — "Only one step until the ultimate proof." | `https://pastebin.com/raw/X0pJtqfD` | | 2016-09-16 09:25:13 | paraportal.org German announcement (reconstructed) | `http://www.paraportal.org/21487-intelligenztest-tengri-137.html` | | 2016-09-16 10:58:12 | pastebin `a1nqC79N` — "You found the searched 137!" | `https://pastebin.com/raw/a1nqC79N` | | 2017-03-05 23:00:09 | Dropbox `tengri137.mp3.txt` | Dropbox folder (see F-14) | | **2017-03-12 09:47:24** | **pastebin `FAJNLpLZ` — forward page-23 matrix** | `https://pastebin.com/raw/FAJNLpLZ` | | 2017-03-27 11:10:23 | pastebin `fBNFWhNf` — Genesis 36:24 | `https://pastebin.com/raw/fBNFWhNf` | | **2017-03-29 18:58:59** | **pastebin `YUPZsz9n` — reversed page-23 matrix** | `https://pastebin.com/raw/YUPZsz9n` | | **2017-04-02 11:11:28** | **`themessage.txt`, full 6448 letters** (see F-17) | body: Cipherbrain comment #11; armor: `https://pastebin.com/raw/5kQsJtRE` | | 2017-04-02 19:48:00 | pastebin `P59Kf0cs` (dup `iA558C4F`) — "The gate is open now" + onion | `https://pastebin.com/raw/P59Kf0cs` | | 2017-04-04 20:37:04 | pastebin `d2qAQgBD` — "Stop bullying Defango." | `https://pastebin.com/raw/d2qAQgBD` | | 2017-04-08 18:02:44 | pastebin `LNsb3n4G` — "We are Tengri and we are real." | `https://pastebin.com/raw/LNsb3n4G` | | 2017-04-12 10:57:34 | pastebin `GJ7Gqhws` — "WE OPEN THE SECOND GATE" | `https://pastebin.com/raw/GJ7Gqhws` | | 2017-08-02 12:05:10 | pastebin `ngWyJhDy` — "You can judge Tengri?" | `https://pastebin.com/raw/ngWyJhDy` | | 2017-11-22 00:09:10 | pastebin `YmrA3rDS` — "No one found the hint" | `https://pastebin.com/raw/YmrA3rDS` | | 2018-01-20 09:14:10 | pastebin `98DZzeYr` — riddle poem | `https://pastebin.com/raw/98DZzeYr` | | 2018-01-25 19:40:25 | pastebin `Xxx3ypsK` — "I am the method." | `https://pastebin.com/raw/Xxx3ypsK` | | 2019-02-22 13:19:40 | pastebin `U7t25SVL` — imgur album pointer | `https://pastebin.com/raw/U7t25SVL` | and these 4 detached signatures (all GOOD against the actual binaries, hashes recomputed here): | data file | bytes | SHA-256 | signed (UTC) | |---|---|---|---| | `137.tar.gz` (pages P001–P010) | 2701349 | `d1092676428359203fdbeb64ff2da3b62b7935e7f525af1e7a6c886da8bf3aa8` | 2016-08-18 18:51:18 | | `666ab731.tar.gz` (pages P011–P023) | 3900613 | `443b37cbfa81bf7404e5ae6c0dad4c9f637d84ba59f5facb51b9748fd9552be7` | 2016-08-23 13:59:14 | | `tengri137.mp3` | 7864927 | `b424c155221cd62a5af23d33d68105dac72e0c41311d9ea57cc2901bc63134d7` | 2017-03-05 23:33:21 | | `rendezvous.png` | 1355100 | `0c6a3fd7891cc194d4beccb0d0c33fae8c39bf96277ab9dd6a4ed975efd4f561` | 2017-11-21 23:35:37 | - The two matrix signing dates in the case brief ("signed 2017-03-12" / "signed 2017-03-29") are confirmed to the second. **F-03. Three of the signed messages were made with `APG v1.1.1` / SHA512, the rest with `GnuPG v2` / SHA256.** - APG = Android Privacy Guard. The three are `d2qAQgBD` (2017-04-04), `LNsb3n4G` (2017-04-08), `98DZzeYr` (2018-01-20). TIER: **PRIMARY** (armor `Version:` header inside signed artifacts). Confidence: **HIGH** for the fact; the *interpretation* (same private key used from a mobile device) is INVESTIGATOR-DERIVED but near-forced. **F-04. The @666ab731 Twitter/X account timeline is recovered: 90 tweets verbatim; 5 tweet IDs are tombstoned and irrecoverable.** - Source: `recon/twitter-account/666ab731-full-timeline-verbatim.md`, built from Twitter's own syndication endpoint `https://cdn.syndication.twimg.com/tweet-result?id=&token=a`. Account numeric id `706937406000386048`, joined March 2016. - TIER: **PRIMARY**. Confidence: **HIGH** for the recovered texts; the timeline is explicitly **NOT** claimed exhaustive (unarchived replies cannot be enumerated). - Irrecoverable IDs: `1388787664829177860`, `1439890779435159553`, `1841552771171938745`, `1841918071029563422`, `1898862252071235879`. ## 1.2 The book **F-05. The 23 book pages held in this corpus are pixel-identical to the pages inside the two PGP-signed tarballs. The book substrate is author-authenticated at pixel level.** - TIER: **PRIMARY**. Confidence: **HIGH** (cryptographic + bitwise). - Verified this pass: extracted `137.tar.gz` (P001–P010) and `666ab731.tar.gz` (P011–P023), both GOOD-signed (F-02); their 23 SHA-256 values match `gaps/seed-06-files/author-signed-original-pages/SHA256SUMS.txt` exactly (`shasum -c` → 23 OK); and a pixel-by-pixel NumPy comparison of all 23 against the page rasters extracted from Schmeh's PDF (`recon/book-source/page-images/tengri137-P01.png` … `-P23.png`) returned **23/23 identical, max absolute channel difference 0**. - All pages are 1332 × 1998 px. - The PDF wrapper `Tengri-137.pdf` (SHA-256 `f77fa0e519c98d6eebce68ed262281076310fba016fe087316858f03d65218f2`, 3,980,980 bytes, 23 pages — recomputed) is **Klaus Schmeh's re-packaging** (PDF metadata: Author `Schmeh, Klaus`, Creator `Acrobat PDFMaker 15 für PowerPoint`, CreationDate 2017-01-29), hosted at `https://scienceblogs.de/klausis-krypto-kolumne/files/2017/01/Tengri-137.pdf`. The *pixels* are primary; the *container* is secondary. **F-06. Every one of the 23 page PNGs carries a single identical mtime inside the signed tarballs: Unix `1331734166` = 2012-03-14 14:09:26 UTC = **2012-03-14 15:09:26 UTC+1** → "3.14 15:09:26" = π.** - TIER: **PRIMARY** (the mtime is inside author-signed archive data, not community metadata). - Verified this pass by reading the tar headers directly with Python's `tarfile`: both archives report exactly one distinct mtime, `1331734166`. - Contemporary independent discovery: r/tengri137 `5prc33`, u/tikitembo7, 2017-01-23 — *"The Timestamp of every image is exact 2012, 14. March 15:09:26"*. My computation confirms it. - Consistent π-stamping elsewhere: the first tweet is `2016-03-14T14:09:07Z` (= 15:09:07 CET) with text `3.14 - 15:9`; the Pi-Day matrix tweet is `2017-03-14T14:09:01Z`; the onion's two files carry mtime `2017-03-14 15:09` (F-16). - Confidence: **HIGH**. This is the single cleanest demonstration that "Nothing is random." is a literal design statement about metadata. **F-07. Pages 1–16 are a rune-like (Old Turkic / Orkhon-derived) substitution cipher, solved; the decoded text contains the phrase "ETERNAL LIBRARY" three separate times (pages 3, 11, 21).** - Source: `artifacts/pages-1-16-plaintext--MERGED.md` (community transcription, corroborated across four Wikia revisions); verbatim page-3 line: `THE CHOSEN SOUL WILL GET KNOWLEDGE AND OUR KEY` / `TO OUR ETERNAL LIBRARY.`; page-11: `TENGRI WILL GUIDE THE CHOSEN SOUL AND GIVE HIM TH` / `E KEY TO OUR ETERNAL LIBRARY.` - TIER: **SECONDARY** (community decode of PRIMARY page images). Confidence: **HIGH** on the phrase (four independent wiki revisions plus a Cipherbrain quote agree). **F-08. Pages 17–22 were solved by Klaus Tappeiner (published by Klaus Schmeh, 8 March 2017). The method is: fraction → repeating decimal period → 2- or 3-digit "dinomes" → chemical element atomic number → FIRST LETTER OF THE ELEMENT SYMBOL.** - Source (PRIMARY, method statement verbatim from Schmeh): `https://scienceblogs.de/klausis-krypto-kolumne/2017/03/08/how-a-blog-reader-solved-the-tengri-137-mystery/` — *"the result of each computation must be divided into two or three-digit numbers. Each of these numbers is interpreted as the atomic number of a chemical element. The first letter of each element represents the cleartext letter."* - Schmeh credits one line to Norbert Biermann. - TIER: **PRIMARY** for the method and the raw decode; **SECONDARY** for the Wikia's later "corrected" wording. Confidence: **HIGH**. - Two readings remain genuinely open at letter level and both are preserved: `EVERYTHING THAT EXISTS IS BASED ON AMATHEMA` (PRIMARY raw decode) vs `EVERYTHING THAT EXISTS IS BASED ON A MATHEMATICAL TRUTH` (SECONDARY wiki interpretation). - Page 21 contains, verbatim, the instruction that frames page 23: `THE REWARD IS THE ACCESS TO OUR ETERNAL LIBRARY` / `UPCOMING TEXTS ARE GENETICALLY ENCRYPTED` / `YOUR KNOWLEDGE CAN NOT HELP AT THIS POINT` / `WE HAVE EMBEDDED THESE SKILLS IN OURR GENES` / `WHO HAS THE CORRECT GENETIC CODING WILL UNDERSTAND THIS TEXT` / `ALL OTHERS WILL FAIL`. ## 1.3 Page 23 and the 154-letter matrix **F-09. Page 23 prints 11 division fractions and 5 nucleobase skeletal diagrams. The matrix is NOT printed as letters on the page; it is derived.** - Source: `recon/book-source/page23-VERBATIM-arithmetic-derived-matrix-and-diagrams.md`; page image P023.png SHA-256 `e828a5e7dfbcd4d88b83eb9e75edf6f053f500e8e41de552e248940dfd58a296` (in the signed tarball) — the same pixels as the PDF extract, SHA-256 `aa7b8420d542a3c00e3c72c9dbc84820eb2a7bacfbc6e783ea7c00b1d1cb8318` (differs only by PNG container / alpha channel; pixel content identical per F-05). - Diagram positions, as identified from the primary image by two independent reads (zoom + Apple Vision OCR): **top-left ADENINE, top-right GUANINE, middle-right URACIL, bottom-left CYTOSINE, bottom-right THYMINE**. This matches the case brief exactly. TIER: **PRIMARY**. Confidence: **HIGH**. **F-10. The 154-letter matrix regenerates deterministically from the 11 printed fractions. All 11 rows reproduce exactly.** - Verified this pass by running `solve/verify_derivation.py`, which takes only the 11 printed factored fractions and recomputes: multiplicative order of 10 mod q′ → repeating block → dinome split → Z → symbol → first letter. Output: **`ALL 11 ROWS REPRODUCE FROM PRINTED ARITHMETIC: True`**, flattened length 154, 11 rows × 14 columns. - Row periods: rows 1–8, 10, 11 have period **28** (= 14 × 2); **row 9 has period 30**. - TIER: **PRIMARY** (derived from the author's own printed arithmetic). Confidence: **HIGH**. **F-11. Canonical forward matrix (11 × 14 = 154 letters), verbatim:** ``` BURUMUTREFAMTU NURESUTREGUMFA YAPSUAZBEHIMLA ZANRUAZBENOMBA TOBIKOTLUBUMYO SUNOKURGANOZYI OKUZIKUFAUSIHE YABEKANSABERHO NAFERANSAHOTFE KOREMORBIZUMRO SUNAKIRFANEMBA ``` Flattened (one 154-char string): ``` BURUMUTREFAMTUNURESUTREGUMFAYAPSUAZBEHIMLAZANRUAZBENOMBATOBIKOTLUBUMYOSUNOKURGANOZYIOKUZIKUFAUSIHEYABEKANSABERHONAFERANSAHOTFEKOREMORBIZUMROSUNAKIRFANEMBA ``` - Published PGP-signed as one-letter-per-space rows in `https://pastebin.com/raw/FAJNLpLZ` (signed 2017-03-12 09:47:24 UTC, armor CRC `=m2lf`; local copy SHA-256 `07c9701552b2240d759fdcf75b68a613e20b3c46ccc24d04b60f71eff186383b`), tweeted 2017-03-14T14:09:01Z as `BURUMUTREFAMTU http://pastebin.com/FAJNLpLZ`. - TIER: **PRIMARY** (signed). Confidence: **HIGH**. Recounted this pass: 11 rows, every row exactly 14 chars, 154 total. `154 = 2 × 7 × 11`. It is a **rectangle, not a cube**; it is not 6448, not 6439, not 3151. **F-12. The author also published the exact horizontal mirror, under the heading `NOTHING IS RANDOM`, in `https://pastebin.com/raw/YUPZsz9n` (signed 2017-03-29 18:58:59 UTC, CRC `=IYyw`; local SHA-256 `78d25c97b558b9c3d07fef5771082d267d3b3af2192e779f93666fd920c6b942`). NO author statement ranks the two editions.** - **Orientation, regraded in the consistency pass.** The circulating line "the account called this the correct version of use" is a **Tengri 137 Wikia editor's question**, verbatim: `Last staus update from Tengri 137 Twitter account shows us the correct version of use?: https://twitter.com/666ab731/status/847161664889901056?s=09` (sic). Checked against `recon/twitter-account/666ab731-full-timeline-verbatim.md`: tweet `847161664889901056` (2017-03-29T19:00:55Z) contains **only** the text `https://pastebin.com/YUPZsz9n`. The author's own prose (`nothingisrandom.txt`) says "the first sequence" and "the second sequence distributed", ranking neither. **TIER of "the author declared right-to-left correct": SPECULATION.** Author-independent grounds for preferring the mirror do exist: Orkhon script direction, and the acrostic (F-22), which resolves only right-to-left. - Reversed edition as printed: ``` UTMAFERTUMURUB AFMUGERTUSERUN ALMIHEBZAUSPAY ABMONEBZAURNAZ OYMUBULTOKIBOT IYZONAGRUKONUS EHISUAFUKIZUKO OHREBASNAKEBAY EFTOHASNAREFAN ORNUZIBROMEROK ABMENAFRIKANUS ``` - The reversed edition **drops** the "Nothing is random." line, the magic-number sequence and the bit.ly link that the forward edition carried. TIER: **PRIMARY**. Confidence: **HIGH**. **F-13. There is exactly ONE position-level discrepancy in the entire matrix record: forward row 10 column 12. The arithmetic gives `M`; the author's own reversed edition prints `N` at the mirror cell (reversed row 10 col 3).** - Verified this pass by mirroring the forward grid and diffing against the printed reversed grid: **exactly one differing cell**, `(row 10, reversed col 3): mirror=M, published=N`. - The dinome at that position is `12` = Mg → **M**. Resolution: **M** is correct; **N** is an author-side slip made while hand-mirroring, and that slip is *itself* inside a GOOD PGP signature. - Consequence worth stating plainly: **a valid Tengri signature guarantees authorship, not correctness.** TIER: **PRIMARY** (both editions signed). Confidence: **HIGH**. **F-14. The forward signed paste also contains, below the grid and verbatim:** ``` Nothing is random. 2, 8, 20, 28, 50, 82, ... http://bit.ly/2mUF7Xy ``` - `2, 8, 20, 28, 50, 82` are the **nuclear magic numbers** (proton/neutron shell closures); the next term, 126, is omitted. TIER: **PRIMARY** for the text; the magic-number identification is SECONDARY/contemporary (Wikia, Cipherbrain) and is a plain matter of fact. - `bit.ly/2mUF7Xy` was created **Mar 05 2017 23:50 UTC** and resolves to Dropbox folder `https://www.dropbox.com/sh/5h85rnq6ik6jz2x/AAAujk3V7EhNx0CfN1sgZAala?dl=0` containing exactly `tengri137.mp3`, `tengri137.mp3.asc`, `tengri137.mp3.txt`. **It contains no page-23 instruction.** The only prose there is the clearsigned line `There is a hidden path in front of you. Find it and you will be rewarded.` TIER: **PRIMARY**. Confidence: **HIGH** (I read the local signed copy `harvest/058-files/tengri137.mp3.txt`, which verifies GOOD). **F-15. Matrix alphabet: 19 letters used, `ABEFGHIKLMNOPRSTUYZ`; never used: `C D J Q V W X`. Under the Tappeiner method `J` and `Q` are IMPOSSIBLE; `C D V W X` are AVOIDED.** - Recomputed this pass. Letters reachable as the first letter of an element symbol (Z ≤ 99 or Z ≤ 118, same answer): `ABCDEFGHIKLMNOPRSTUVWXYZ` (24). Used: 19. Reachable-but-unused: `CDVWX`. Unreachable: `JQ` (no element symbol begins with either). - `C` alone was reachable via **11** different atomic numbers if you restrict to 2-digit dinomes, Z ≤ 99 (6 C, 17 Cl, 20 Ca, 24 Cr, 27 Co, 29 Cu, 48 Cd, 55 Cs, 58 Ce, 96 Cm, 98 Cf) — and **12** under Z ≤ 118, adding 112 Cn. (The derivation *does* use 3-digit dinomes: row 9 needs 114. The same caveat adds 105 Db and 110 Ds to the `D` set alongside 66 Dy. Corrected in the consistency pass; the *set* of reachable first letters is 24 either way.) It still never appears. TIER: **INVESTIGATOR-DERIVED** from PRIMARY data. Confidence: **HIGH**. Implication: the author steered the fractions to hit a restricted 19-letter output alphabet. That is a *design constraint*, independent of any language theory. - Letter frequencies of the 154 (recomputed): `A19 U18 R12 E12 O12 B10 N10 M9 S7 I7 K7 T6 F6 Z6 Y4 H4 G2 L2 P1`. Vowels (AEIOU) = 68/154 = 0.4416. ## 1.4 The March–April 2017 audio / onion chain **F-16. The chain is: Pi-Day tweet → paste `FAJNLpLZ` → `bit.ly/2mUF7Xy` → Dropbox → `tengri137.mp3` → its Sonic-Visualiser spectrogram, which hid ONE thing: the URL `https://instaud.io/private/7fa2c325c0a7395c8856c5bb4f11b5616c6f60c5` → that page's beep WAV `666ab731.wav` → packet-length digits → letters → `LITTLE BIRD KNOWS WHEN THE GATE IS OPEN` + `END END END` → an A/x block → `666666m7x6x5regc.onion`.** - **CORRECTION to the case brief, confirmed by two independent reconstructions and by the discoverer's own words:** the MP3 spectrogram held only the URL. The `LITTLE BIRD…` sentence came from the **second** file (the WAV), and from its **waveform packet lengths**, not from a spectrogram. Primary proof: Reddit comment `deye3yf`, u/NimrodX0, 2017-03-15 — *"It seems there are no hidden images or texts in its spectrogram"* (of the WAV). - **CORRECTION to the case brief:** the packet scheme is **base-9 (digits 0–8, 16–144 ms, ms = (digit+1) × 16)**, not octal 0–7. Norbert's "octal 0–7" was his retracted first hypothesis (Cipherbrain comment #32, corrected #37, confirmed #44). - Verified this pass: the beep transcript is **60 lines, 2994 digits** (59 lines of 50 + 1 of 44), SHA-256 `05c344cc917c2fdf3a80fa0624318e8225201de5510f49ae2885616cecd6c2bc`; digit `8` occurs **exactly 3 times, on lines 5, 23 and 41**. - Verified this pass: the 176-character A/x block (79 `A`, 97 `x`), mapping `A→0, x→1`, packed MSB-first, gives exactly 22 bytes `36 36 36 36 36 36 6d 37 78 36 78 35 72 65 67 63 2e 6f 6e 69 6f 6e` = `666666m7x6x5regc.onion`, with zero residue. `666666 mod (7 × 6 × 5) = 126` — the missing 7th magic number — also recomputed. - TIER: **PRIMARY** (Cipherbrain comments #32–#49 by Norbert/Alex, Reddit `5zisip`, Wikia "Twitter message 2017", all contemporary and mutually byte-identical). Confidence: **HIGH**. - **The MP3 binary survives and is author-signed** (F-02). Newly measured this pass with `ffprobe`: duration **255.111837 s**, bitrate 246,634, 44,100 Hz stereo. (The corpus artifact file still lists MP3 duration and hash as permanent GAPs — see §5, inconsistency I-3.) - **The WAV audio bytes are permanently lost**: the instaudio S3 bucket is deleted, Wayback never captured it, and the only claimed "mirror" in the bartman GitHub repo is a 319-byte `NoSuchBucket` XML error page. Norbert's transcript is the sole surviving representation. **F-17. `themessage.txt` is 6448 uppercase letters and every one of them is cryptographically authenticated.** - Length **6448**, SHA-256 `50bd9c4424db47e15cc3a543c379b6ec722c8eaed76fbaeef738b0427d4e8e75`, first 20 `MYVZZJCKTBWKOWUWZOCZ`, last 20 `JNBBLGAJDGRLUZMVKAWK`, 0 non-alphabetic characters, all 26 letters present. **Recomputed this pass.** - **6448 = 2⁴ × 13 × 31.** Its only divisors are 1, 2, 4, 8, 13, 16, 26, 31, 52, 62, 104, 124, 208, 248, 403, 496, 806, 1612, 3224, 6448. (Recomputed.) - The signed document, reconstructed as `harvest/026-themessage-6448-RECONSTRUCTED-PGP-VERIFIED.asc` (SHA-256 `ddddd29cca2b562cc23f0ce38a9e75ffb9cdb4e76c6bfe43fc059c564b06422e`), verifies **GOOD**, signature made **2017-04-02 11:11:28 UTC**, armor CRC `=MLam`. **I re-ran this verification myself this pass.** The document's canonical shape is `The message:` / blank / the 6448 letters on ONE unbroken line / blank / `Tengri 137` / `0x666ab731`. - The same `=MLam` signature block appears on `https://pastebin.com/raw/5kQsJtRE`, whose body is only the **first 404 characters** — that copy verifies **BAD**. It is a truncation, not a forgery: the 404 chars are a byte-exact prefix of the 6448. - TIER: **PRIMARY, cryptographically pinned**. Confidence: **HIGHEST IN THE CASE**. A single altered, inserted or dropped character anywhere in those 6448 breaks an RSA-4096/SHA-256 signature. - Independent corroboration: contemporary Wayback captures of the Cipherbrain page from **2017-04-04** and **2017-04-05** both carry the identical 6448-character run. **F-18. `themessage.txt` has hard internal structure: it is a deterministic (ECB-like) block cipher with block size 4, aligned at offset 0.** - **Recomputed independently this pass**, from the 6448 bytes: - **All-pairs convention:** every gap between every pair of occurrences of a repeated 5-gram: **577 of 577 are ≡ 0 (mod 4)** (100.00%). For 6-grams: 417 of 417. For 4-grams: 1219 of 1262 (96.6%). GCD = 4. - **Consecutive-occurrence convention** (the two conventions are both valid and must not be mixed — see `ARTIFACTS.md` §14.10): 392 gaps, splitting **237 / 155** between residues 0 and 4 mod 8, so the period is **exactly 4, not 8**. *(Under the all-pairs convention the same split is 331 / 246 of 577 — re-verified in the consistency pass. The earlier text quoted the 577 total and the 237/155 split in one breath, which mixed conventions.)* - Aligned 4-block census, offset 0: 1612 blocks, **1184 distinct**, **265 distinct blocks repeat**, 693 total occurrences of repeated blocks. Offsets 1/2/3 give repeated-distinct 85 / 69 / 84 — the excess sits squarely on offset 0. - Top blocks: `PFYE`×11, `TEMD`×8, `OWUW`×7, `TIWT`×7, `JSJF`×7, `ZMKX`×7, `OUZQ`×7, `TLBZ`×7. - Repeat level matches natural language, not noise (uniform-random controls give ~1–4 repeated-distinct blocks, not 265). - **Recomputed independently this pass**: if the cipher is linear over ℤ₂₆ with block size 4, its key matrix **must be invertible mod 26**. Exhaustive test of all 15 non-zero functionals mod 2 and all 28,560 mod 13 against all 1612 blocks: **0 functionals had a non-surjective image** ⇒ det(K) is odd and not divisible by 13 ⇒ gcd(det K, 26) = 1. - Global statistics (recomputed): IoC **0.03859**, Shannon entropy **4.69523** bits/char (max 4.70044), χ² vs uniform **46.12** on 25 df. - TIER: **INVESTIGATOR-DERIVED** from PRIMARY (signed) bytes. Confidence: **HIGH** for the block-4 structure; **HIGH** for invertibility *conditional* on linearity; the "it is a 4×4 Hill cipher" label is a strong inference, not a proof — see H-05. **F-19. `nothingisrandom.txt` prose is recovered but its PGP signature is NOT. Its embedded 1422-digit string decodes exactly to a 23 × 137 bitmap.** - Prose body: 2975 characters, SHA-256 `69928d59ad83981328f90f7795cb72e084cba6813a48c749f5591ab914c27c02`. Only surviving clear-web reproduction: Cipherbrain comment **#11 by reader "Thomas", 3 April 2017**, at `https://scienceblogs.de/klausis-krypto-kolumne/2017/03/30/tengri-137-has-posted-again/`. **FIDELITY CAVEAT:** what survives is the WordPress-typographed rendering (`—–` for `-----`, curly quotes, `…` for `...`). The raw ASCII armor and the signature block are **NOT recovered** and the source pastes (`u7pFiCpD`, `BcMucDVh`) are 404 with no content ever archived. - Digit payload: **1422 digits**, SHA-256 `450a60bce6f2827972f22662b2abcf4112d9a4e45218aa6bf0b5d48aec48492f`, histogram `{0:867, 1:154, 2:85, 3:58, 4:46, 5:39, 6:29, 7:24, 8:15, 9:105}`. **Recomputed this pass.** - **Recomputed this pass:** the run-length transform (`0` → one `1` bit; nonzero d → d `0` bits) yields exactly **867 + 2284 = 3151 bits = 23 × 137**, and the resulting 137 × 23 bitmap is **EXACTLY EQUAL, row for row**, to the community bitmap at `https://pastebin.com/raw/5r9baQj5`. Independent origin: the digits are byte-identical in Reddit post `r/tengri137/comments/635buu` (u/tikitembo7, 2017-04-03) and in the Cipherbrain comment — two independent channels. - TIER: prose **PRIMARY-derived but SINGLE-ORIGIN and unsigned**; digits **PRIMARY, double-attested**. The "Arecibo-like message" *reading* of the bitmap is a contemporary community DECODE, not a Tengri statement. **F-20. When the gate opened, the onion `666666m7x6x5regc.onion` served exactly TWO listed files, not three.** - Primary artifact: imgur `https://imgur.com/a/FoIi5` / `https://i.imgur.com/HD9qrYY.png` (album created 2017-04-02T20:54:09Z; local copy `gaps/seed-01-imgur-FoIi5-HD9qrYY-onion-page-screenshot.png`), a tor2web render of the Apache `mod_autoindex` directory listing: ``` Index of / Name Last modified Size Description nothingisrandom.txt 2017-03-14 15:09 3.8K themessage.txt 2017-03-14 15:09 7.2K ``` - "The gate is open now" was the **announcement** (pastebin `P59Kf0cs` / `iA558C4F`, tweeted 2017-04-02T20:00:03Z), *not* a file on the onion. - Both onion files carry the π mtime `2017-03-14 15:09` — staged 19 days before the gate opened. - TIER: **PRIMARY**. Confidence: **HIGH**. Caveat honestly stated: an unlinked file would not appear in an autoindex, so this bounds the *listed* contents only. - File-size cross-check (INVESTIGATOR-DERIVED, from Apache `apr_strfsize` rounding): the reconstructed signed `themessage.txt` is 7354/7380 bytes, inside the `7.2K` window [7322, 7423]; the reconstructed `nothingisrandom.txt` lands inside the `3.8K` window [3840, 3942], bounding any missing prose at **under one line (~≤40 bytes)**. **F-21. Two impostor artifacts are positively identified.** - `https://pastebin.com/raw/CJsN0KWL` ("Eat your spinach! / Peace out!") carries the **byte-identical signature block** of the authentic `d2qAQgBD` ("Stop bullying Defango."), same CRC `=Ermz`, same claimed time 2017-04-04 20:37:04 — and verifies **BAD**. I re-ran this verification: `BADSIG D152D6C5666AB731 Tengri 137`. It is a deliberate signature splice. - `https://pastebin.com/raw/c4cQG6Z2` (Mojave coordinates `34.5144437137, -115.510147137`) is not a signature at all — hand-typed base64 whose first decoded byte is `0x61`, illegal as an OpenPGP signature packet header. Verified this pass: gpg returns no signature. **Those coordinates are not author material.** - TIER: **PRIMARY** (cryptographic). Confidence: **HIGH**. ## 1.5 The one verified natural-language content in the matrix **F-22. The row-initial acrostic of the matrix, taken right-to-left, is an exact, pre-existing Turkish idiom: `BUNU YAZAN TOSUN OKUYANA KOSUN`.** (Right-to-left is the Orkhon script direction, not an author instruction — see F-12.) - Construction: take the first 2 or 3 letters of each forward row (identically: the rightmost 2–3 letters of each *reversed* printed row, read right-to-left) and concatenate top to bottom: `BU NU YA ZAN TO SUN OKU YA NA KO SUN` = `BUNUYAZANTOSUNOKUYANAKOSUN` (26 letters). - **Verified this pass** by running `gaps/seed-05-files/verify_acrostic_from_signed_pastebins.py`, which parses *only* the two PGP-signed pastebin files. Output: both editions independently yield `BUNUYAZANTOSUNOKUYANAKOSUN`; `MATCH (forward): True`, `MATCH (reversed): True`. - The idiom is real and long predates the book: Ekşi Sözlük topic `https://eksisozluk.com/bunu-yazan-tosun-okuyana-kosun--75053`, earliest entry `#171097` dated `25.05.2000 00:42` — **sixteen years before** the book. It is Turkish latrine-graffiti doggerel ("Kilroy was here" register). - Chance estimate (INVESTIGATOR-DERIVED, recomputed): under an i.i.d. model on the matrix's own empirical letter frequencies, P(a *specified* 26-letter string) = **7.838 × 10⁻³¹**; multiplying by C(11,4) = 330 prefix-length assignments gives **2.6 × 10⁻²⁸**. Honest caveat: this is a post-hoc observation and the look-elsewhere correction over all 2¹¹ = 2048 prefix assignments against a full Turkish lexicon was never run. - TIER: string is **PRIMARY** (read out of two signed artifacts); intent is **UNPROVEN**. - Confidence: **HIGH that the string is there and is exact; UNRESOLVED whether it was intended.** - Two consequences: (a) it is **orientation-diagnostic** — it favours the right-to-left reading on internal grounds (reading the reversed edition left-to-right instead gives `UT AF AL AB OY IY EH OH EF OR AB` — nothing); (b) it constrains row 9 to begin `NA`, killing two of the five arithmetically-valid row-9 readings (see F-23). **F-23. Row 9 is the ONLY degree of freedom in the whole derivation. Its period is 30, so two dinomes must be 3-digit, and FIVE segmentations are arithmetically valid.** - Verified this pass (script output): rows 1–8, 10, 11 admit **exactly 1** valid 2-or-3-digit segmentation each; **row 9 admits 5**. Row-9 period block: `111311463451311141372762211463`. | # | reading | elements | |---|---|---| | 1 | `NANPSSGFAHOTFE` | Na Al Na Pd Se Sb Ga Fl Al Hf Os Ti Fl Eu | | 2 | **`NAFERANSAHOTFE`** ← published | Na Al Fl Eu Rh Al Na Si Al Hf Os Ti Fl Eu | | 3 | `NAFERARNRCSSSE` | Na Al Fl Eu Rh Al Rg Nb Rb Co Sm Sc Si Eu | | 4 | `RGSERANSAHOTFE` | Rg Ga Si Eu Rh Al Na Si Al Hf Os Ti Fl Eu | | 5 | `RGSERARNRCSSSE` | Rg Ga Si Eu Rh Al Rg Nb Rb Co Sm Sc Si Eu | - The naive all-2-digit split gives 15 tokens → `NANPSSGNNRCSSSE`, the reading the community debunked; reproduced here character-for-character. - **The published reading is pinned by the author's signature, NOT by the rule.** The acrostic (F-22) independently eliminates #4 and #5. Variants #3 and #5 introduce `C`, a letter that never occurs anywhere in the matrix, which is heuristic evidence against them but not proof. - TIER: **INVESTIGATOR-DERIVED** from PRIMARY. Confidence: **HIGH** that five readings exist; **HIGH** that #2 is the author's; **the rule alone does not determine it.** ## 1.6 Author statements about page 23 **F-24. The author has made direct, dated statements about page 23. Verbatim:** - `2017-03-14T14:09:01Z` (id 841652390877106176): `BURUMUTREFAMTU http://pastebin.com/FAJNLpLZ` - `2017-03-29T19:00:55Z` (id 847161664889901056): `https://pastebin.com/YUPZsz9n` - `2025-04-23T05:45:15Z` (id 1914918471940350300, reply to @tactical_nook): `@tactical_nook Seek also for 2222, 4444, 6666 and 8888.` - `2025-07-10T13:32:04Z` (id 1943302200622567872, reply to @elonmusk): `@elonmusk One thing @grok 4 cannot solve. [MEDIA]` - `2025-07-27T18:49:53Z` (id 1949542777634664690, reply to @isaac17992600): `@isaac17992600 Indeed, there is an animal name in the text of the page 23 but not the fox.` - `2025-12-20T12:04:28Z` (id 2002349378254541164, reply to @EMBII4U): `🐺` - TIER: **PRIMARY** (the account's own posts via Twitter's syndication endpoint). Confidence: **HIGH that these are the author's words; the CONTENT is an unverifiable claim by an anonymous party.** They are not evidence *for* a solution; they are evidence the author asserts one exists. **F-25. The account is still alive; page 23 remains UNSOLVED as of 2026-07-24. No claimed solution has ever been independently reproduced or author-confirmed.** - TIER: **PRIMARY** (account activity) + exhaustive negative sweep across Reddit (**265 submissions, 1,762 archived comment objects** — recounted from `recon/reddit/_INDEX-r-tengri137-all-submissions.md` in the consistency pass: 265 table rows, comment column sums to exactly 1762, of which 242 submissions are from 2017; the earlier "277 / 1,832" in this entry was wrong), Cipherbrain (4 article comment threads), the Wikia, AboveTopSecret, Hive/Steemit and the blogspot. Confidence: **HIGH**. - The only computational attack on record from 2017 is Norbert's simulated annealing over his own codon hypothesis: **"keine Lösung gefunden"** (Cipherbrain comment #117). --- ## Entries added by the FINAL consistency pass These four postdate the first writing of this file. Every number in them was recomputed from the on-disk bytes during that pass, not copied from the file being graded. **F-26. The `nothingisrandom.txt` bitmap is the 1974 Arecibo message extended from 73 rows to 137.** - Re-derived here straight from the 1422 primary digits (sha256 `450a60bce6f2827972f22662b2abcf4112d9a4e45218aa6bf0b5d48aec48492f`, digit sum **2284**) by the run-length rule `0 → one 1 bit; d > 0 → d 0 bits`: **3151 bits, 867 ones, 2284 zeros, 3151 = 23 × 137.** All-zero rows (1-indexed): `5, 11, 16, 18, 21, 26, 56, 74, 83, 110, 130, 137`. - **The first 1679 bits are byte-for-byte the canonical Arecibo 1974 message: 1679/1679 = 100.00 %** against `gaps/seed-08-files/arecibo-1974-canonical-1679bits.txt`. So the construction is `1679 = 23 × 73` real Arecibo + `1472 = 23 × 64` author-added = `3151 = 23 × 137`. Width unchanged, height extended, both heights prime. - The page-23 anchor re-verified: rows 75–81, columns 6–19, column-wise MSB-top → `56 92 37 92 12 92 22 45 63 87 13 12 22 92` → `BURUMUTREFAMTU` = matrix row 1. Row 74 blank; row 82 = `00000111111111111110000`, ones exactly over columns 6–19. - TIER: **INVESTIGATOR-DERIVED** over PRIMARY digits. Confidence **HIGH**. Sources: `solve/BITMAP-VERIFICATION.md`, `gaps/tr1-06-…`. → supersedes the vaguer F-19 framing. **F-27. Matrix rows 2–11 are NOT hidden in the bitmap, and physically cannot be.** - `gaps/tr1-06-nothingisrandom-bitmap-exhaustive-sweep.md`: both rectangular wraps, all eight dihedral presentations, both polarities, band depths 1–24, three row-strides, eleven column-read modes — **139 648 bands / 4 160 384 column tokens / 7 767 900 decoded letters**. Only row 1 occurs. - The negative is load-bearing for three independent reasons: the same scan re-found the known anchor at an observed/expected ratio of **5.1 × 10⁹**; the bitmap is *less* dictionary-like than random (Turkish 1397 real vs 1461 null mean, p = 0.933); and **capacity forbids it** — 64 added rows, 8 rows per block, ≤ 8 slots of which 3 are used, against the 88 rows an 11 × 14 republication needs. - TIER: **INVESTIGATOR-DERIVED**. Confidence **HIGH (negative)**. - Still open in that artifact: two pictogram regions, rows **84–100** and **111–129**, untouched by the number-block rule; and the exact digit→bit scheme, since 867 ones imply ~868 gaps but there are 1422 digits. **F-28. On a validated Turkish language model the matrix scores like English, not like Turkish.** - `solve/lexicons/`, models trained on 20 000 000 chars, calibrated at length 154, AUC 1.0000 separating real Turkish from shuffled Turkish. Forward flat-154: char-5-gram **−5.1036** (model A23) against real Turkish −3.0326 ± 0.2736, English −5.0708 ± 0.4733, i.i.d. random −7.2387 ± 0.3745. **z vs Turkish −7.57; z vs English −0.07; 0.00th percentile of held-out Turkish.** Model B19 agrees. - Supporting: `P(none of C, D, J, V in 154 i.i.d. folded-Turkish letters) = 6.51 × 10⁻⁶`; only **3.74 %** of real Turkish sentences (8 of 214) are writable in the 19-letter alphabet. - TIER: **INVESTIGATOR-DERIVED**. Confidence **HIGH**. **F-29. The "all 68 matrix syllables are attested Turkish syllables" result is TRUE but carries no information about language. Do not cite it as evidence of Turkishness.** - The claim itself is exact and was reproduced three independent ways in the final pass: 68 syllable tokens, 51 distinct, shapes `CV 44 / CVC 20 / VC 2 / V 2`, **68/68 attested**. - **But Turkish saturates the alphabet.** Of the 1125 possible V/VC/CV/CVC syllables over `ABEFGHIKLMNOPRSTUYZ`, Turkish attests **1124** — the sole exception is `FUB`. Given the shape profile alone, `P(all 68 attested) = (979/980)^20 = 0.9798`. - **Cross-language control** (`gaps/c1-03-syllable-attestation-cross-language-control.md`, 2026-07-24): Finnish, Hungarian, Italian, Spanish and Indonesian each score **68/68 and 51/51 distinct, identically to Turkish**; size-controlled at 20 000 word types, Turkish 67.60 ± 0.58 vs Spanish 67.33, Hungarian 67.22, Italian 66.97, Indonesian 66.40 — tied. **No Turkic variety fits better.** Hawaiian fails cleanly (38/68, saturation 61/1125, zero VC and zero CVC), proving the test is falsifiable and simply is not selective here. The Finnish and Italian rows were independently re-derived in the final pass from the raw frequency lists and reproduce. - Note the clash this resolves: the one metric with the resolution to detect Turkish (F-28) puts the matrix at the 0th percentile of Turkish. The syllable test was never measuring Turkishness. - TIER: **INVESTIGATOR-DERIVED**. Grade: **the arithmetic CONFIRMED; the Turkic inference REFUTED.** **F-30. Seven pre-registered cryptanalytic experiments were executed on 2026-07-24 and ALL SEVEN returned calibrated negatives.** Recorded here so that no future pass repeats them. Each was scored against `solve/lexicons/turkish_score.py` with a pre-declared PASS threshold, and each states its own method; they landed while this ledger was being closed and are reported at face value from their files, not independently re-derived, except where marked. | # | Experiment | Outcome | File | |---|---|---|---| | 1 | The ~65 undecoded **intermediate-quotient digit blocks** — the largest open lead in the corpus | **CLOSED.** Only 10 of 65 admit any valid 14-token reading; 148 of 171 decodings contain a letter the matrix never uses; **zero** clear the bar; best strict decode `DBSTRFMANENSBP` at percentile 0.00. Confirms Tappeiner's own "zwingende mathematische Folge" caveat. | `gaps/c1-00-…` | | 2 | Statistics on the **atomic-number layer** | **NO plaintext, no key.** Magic numbers absent as values; as indices `URUABZE` / `TTENZNN` at percentile 0.05 / 0.0. Column-major reading z = −20.5, worse than row-major. But the layer is calibratedly non-random three independent ways. | `gaps/c1-01-…` | | 3 | **Cross-language syllable control** | **NEGATIVE** — see F-29. | `gaps/c1-03-…` | | 4 | The **five nucleobase diagrams at pixel level** | **NEGATIVE, and it closes the premise:** all five are canonical textbook A/G/U/C/T with **no structural deviation** to serve as a hidden index. H-bond {2,3} alphabet cannot generate the 11-value prefix pattern; no corner-layout reading beats forward; every genuine transposition falls below random. | `gaps/c1-04-…` | | 5 | **tomtoo's proton-in / neutron-out remap** — long ranked the best untried 2017 idea | **REFUTED, structurally.** 33 of 154 cells, including **all 18 uranium cells**, have no neutron-image element; 0 of 11 rows decode under every isotope rule × orientation × row-9 variant. | `gaps/c1-06-…` | | 6 | The **matrix as a key against `themessage.txt`** | **NEGATIVE, positive-control-validated** — control fires at −4.1003, best real score −7.7333. 22 of 24 matrix-derived matrices are non-invertible mod 26 while the true key is provably invertible. | `gaps/c1-07-…` | | 7 | The three author **Dropbox folders** + six 2017 Twitter images | Enumerated / downloaded. 13 filenames, **three carrying detached `.asc` signatures**; six media IDs of which two are byte-identical, so five distinct images. **No Dropbox file was downloaded** — listing only. | `gaps/c1-05-…` | **Still unfinished from that round:** `gaps/c1-02-classical-cryptanalysis-154-letters.md` — periodic IoC, Kasiski, transposition, Vigenère/Beaufort/affine, Playfair and Hill over the 154 letters. Its decision rule is pre-registered; all seven result sections read `[pending]`. **What these seven negatives collectively mean.** Every mechanism anyone had specified for extracting a message from page 23 — a second channel in the arithmetic, an additive/index key on the numbers, a neutron remap, a diagram-derived operation, a cross-artifact key — has now been tested and failed under a calibrated null. That is not proof there is nothing there. It does mean the remaining live possibilities are narrower and better defined than at any previous point: the classical-cipher families (untested), the acrostic's look-elsewhere status (untested, and the one test that could reframe the whole case), and the possibility that there is no plaintext at all. --- --- # §2. TESTABLE HYPOTHESES Each is stated so that a specific computation or document retrieval would falsify it. Nothing here is asserted as fact. **H-01. The 154-letter matrix conceals an intended natural-language message readable right-to-left.** - Support: the acrostic (F-22) is exact and only works R→L; pages 1–16 are Orkhon script, which is written R→L; the phonotactics are deliberately syllabified (H-02). **Not** support: an author declaration — there is none (F-12). - **Falsifier:** produce a demonstration that the eleven fractions were chosen only to satisfy the 19-letter-alphabet + max-2-consonant-run constraints, with the acrostic arising as a by-product of choosing row prefixes from a small pronounceable syllable set. Alternatively: an author statement, signed, that there is no message. - Status: **OPEN.** Grade: PLAUSIBLE. **H-02. The author constrained the fractions so the output would be *pronounceable*, not so it would be *Turkic*.** - **Recomputed this pass, and it is strong:** the maximum consonant run anywhere in the 154 letters is **2** — within every row and across the whole flat string with row breaks ignored. Run histogram {1: 42, 2: 22, ≥3: 0}; 18 distinct clusters, all 2-letter. Vowel fraction 0.4416. Under a null that reshuffles the matrix's own 154 letters into the same 11 × 14 grid (200,000 trials, seed 137): **P(max run ≤ 2) = 0 / 200,000 (< 5 × 10⁻⁶)**; the null distribution peaks at a max run of 6 and produced a run of 3 only 14 times in 200,000. - Conversely, **vowel harmony — the actual diagnostic of Turkic morphophonology — FAILS**, and fails *below* chance (corpus computation: harmonic adjacent-vowel pairs 37/57 = 0.649 vs null mean 42.29, P(null ≥ observed) = 0.9943; V-C-V proxy 19/32 = 0.594, P = 0.9941). - **Falsifier:** show a Turkic-language reading of the full 154 that respects vowel harmony, or show the low harmony is an artifact of the scoring (e.g. by treating `I` differently and getting an above-null result). - **Strengthened by the final consistency pass (F-28, F-29).** Two further independent measurements now point the same way: on a calibrated char-5-gram the matrix sits at the **0.00th percentile** of real Turkish and is indistinguishable from English; and the syllable-attestation result that had been read as Turkic evidence turns out to be language-blind (five unrelated non-Turkic languages score identically). "Pronounceable, not Turkic" is now supported by four independent metrics — consonant-run null, vowel harmony, char-5-gram, cross-language syllable control — and contradicted by none. - Status: **STRONGLY SUPPORTED for "pronounceable"; the Turkic-content claim is separately falsified as stated.** Grade: CONFIRMED (phonotactics) / REFUTED (harmony). **H-03. The author's 2025 "animal name in the text of the page 23 but not the fox" refers to a substring of the 154 letters.** - **Computed this pass** — an exhaustive substring scan of rows, columns and the flat string in both orientations against a 60-word English/Turkish/Old-Turkic animal list returned exactly: - `SNAKE` — reversed edition row 8 `OHREBASNAKEBAY`, positions 7–11, read **left-to-right**. - `OKUZ` — forward row 7 `OKUZIKUFAUSIHE`, positions 1–4, i.e. read **right-to-left in the reversed printed edition**. `öküz` = "ox" in Turkish. (`KUZI` also appears at positions 2–5; `kuzu` = "lamb".) - Nothing else. No `WOLF`, `KURT`, `BORI`/`BORU`, `TILKI`, `YILAN`, `AYI`, `ARSLAN`, `BARS`, `GEYIK`, `KARTAL`, `DEVE`, `BALIK`, `MAYMUN`, `DOMUZ` — in either orientation, row, column or wrapped. - Note the tension: `SNAKE` requires reading the *reversed* edition **left-to-right**; `OKUZ` sits in the right-to-left direction. (Neither direction is author-endorsed — see F-12.) The corpus records `SNAKE` (`verify/author-statements-page23-and-how-to-solve--VERIFY.md`). - **CORRECTION applied in the consistency pass.** An earlier draft of this entry said `OKUZ` "is not flagged as an animal word anywhere in the corpus and appears to be new here". **That is false.** It is attested contemporaneously and is on disk: u/GaziMemo, r/tengri137 `622idf` ("wild guess page 23"), comment `dfjd8tm`, **2017-03-29 00:13:29 UTC**, verbatim: `Etrafimda = around me ( turkish) okuz = bull or cow ( turkish)` — file `recon/reddit/r-tengri137-622idf-wild-guess-page-23.md`. [PRIMARY] - A third candidate exists but is **not** a substring of the 154 letters: `TOSUN` (Turkish "young bull"), which comes out of the row-initial acrostic (F-22). Two of the three candidates are cattle. - The 2025-12-20 `🐺` reply is an obvious lure toward wolf (Bozkurt / *böri*, sacred in Turkic cosmology). No spelling of "wolf" is present in any orientation. - **Falsifier:** the author naming the animal; or a segmentation scheme under which a wolf word appears; or evidence that "the text of the page 23" means something other than the 154 letters (e.g. the fractions' digits). - Status: **OPEN.** Grade: PLAUSIBLE. Concrete next test: run the same scan over the 11 period blocks and over `themessage.txt`, not just the letter matrix. **H-04. The author's 2025 hint "Seek also for 2222, 4444, 6666 and 8888" points at a digit substrate that is NOT the page-23 arithmetic and NOT `nothingisrandom.txt`.** - **Tested and refuted for the two obvious substrates, this pass:** across all 11 page-23 repeating period blocks (**310** digits total = 10 rows × period 28 + row 9 × period 30; the "318" printed in an earlier draft of this entry was an arithmetic slip, corrected in the consistency pass) the substrings `2222`, `4444`, `6666`, `8888` occur **0 times each** — as do `1111`, `3333`, `5555`, `7777`, `9999`, `0000`. Across the 1422-digit `nothingisrandom.txt` payload: `2222` = 0, `4444` = 0, `6666` = 0, `8888` = 0 (`9999` = 3, `0000` = 54). Across the 2994-digit beep transcript: all four = 0 (`1111` = 6). - **Falsifier / next test:** the hint may point at the *full* decimal expansions before periodicity, at the tarball/other digit artifacts, at the "Vumarii" 2024 images, or at nothing at all. - Status: **OPEN, with three substrates eliminated.** Grade: the hint is PRIMARY; its referent is UNKNOWN. **H-05. `themessage.txt` is a 4×4 Hill cipher over ℤ₂₆ (or another deterministic 4-letter polygraphic substitution) with an invertible key.** - Support: F-18 (block-4 alignment at 100% on 577 gap pairs; language-like repeat rate; offset-0 excess; a difference spectrum with a 37 σ peak resolving into scalar-multiple families). - **Falsifier:** find any repeated 5-gram pair whose gap is not a multiple of 4 (there are none in 6448 chars); or exhibit a non-linear 4-block cipher fitting the same statistics; or actually recover a key and get plaintext. - Hard constraint proven this pass: **gcd(det K, 26) = 1** if the cipher is linear over ℤ₂₆ with block size 4. Any candidate key that is singular mod 26 is ruled out *a priori*. - Status: **STRONGLY SUPPORTED, not proven.** Grade: PLAUSIBLE→LIKELY. **H-06. The plaintext of `themessage.txt` is drawn from the same restricted 19-letter alphabet as the page-23 matrix.** - If true, only 19⁴ = 130,321 of 456,976 blocks are legal plaintexts, and all 1184 observed ciphertext blocks must pull back into that set — a very strong key filter. - **Falsifier:** show no invertible K maps all 1184 observed blocks into the 19-letter set. - Status: **UNTESTED.** Grade: SPECULATIVE but cheap to test and high-value. This is the single most actionable open computation in the case. **H-07. Row 9 of the matrix is `NAFERANSAHOTFE` because it is the intended reading, not merely because the author signed it.** - Support: the acrostic requires row 9 to begin `NA`, which eliminates readings #4 and #5 of F-23 by a route independent of the signature. - **Falsifier:** any solution of the matrix that works on 10 rows and requires row 9 to read `NANPSSGFAHOTFE` or `NAFERARNRCSSSE`. Such a solution would NOT be automatically disqualified — those readings are arithmetically legal. - Status: **OPEN.** Practical instruction: never discard a hypothesis solely because it breaks on row 9; retest it against all three surviving `NA…` variants first. **H-08. The magic-number sequence `2, 8, 20, 28, 50, 82, ...` in the forward paste is a pointer to the missing 7th term (126) and the onion address, not a key for the grid.** - Support: `666666 mod (7 × 6 × 5) = 126` (recomputed). The reversed edition **drops the sequence entirely**, which is what you would expect of a spent pointer, not of a key. - Against: the only executed contemporary test on the grid (u/pHumn, comment `dflquur`, 2017-03-30 13:51:22 UTC) pulled letters at flat positions 2, 8, 20, 28, 50, 82 and (silently) 126 from the reversed grid and got **`TTENZNN`** — **reproduced byte-for-byte this pass**. It went nowhere; nobody replied. - **Also recomputed this pass:** the sequence cannot be a columnar transposition key for a 14-wide grid — `[2,8,20,28,50,82,126] mod 14 = [2,8,6,0,8,12,0]`, which has duplicates and is not a permutation. It cannot be a row order either (only 2 and 8 fall in 1..11). - Status: **SUPPORTED.** Grade: LIKELY. **H-09. The single M/N discrepancy (F-13) is a human transcription slip, not a deliberate signal.** - Support: the arithmetic is unambiguous (dinome 12 = Mg); the error is in the *derived* mirror, the edition the author produced by hand. - **Falsifier:** a signed author statement pointing at that cell; or a solution that requires N. - Contemporary observation on record (r/tengri137 `62a2t1`, eiggaMAD, 2017-03-29): *"Now that it has been reversed, is missing the magic numbers, and has an error in line 10 (N when the original had M)…I'm not so sure."* - Status: **SUPPORTED.** Grade: LIKELY. **H-10. The onion address `666666m7x6x5regc` was found by vanity brute-force with a partial prefix, not "computed".** - The 2017 wiki argued the 16-char address was infeasible for humans (1.89 billion GPU-years). The contemporary rebuttal (Arminius, Cipherbrain 2017-03-18, comment-860885) is the standard post-hoc-selection argument: fix a short prefix (`666666`), take whatever tail you get, and build a story around it afterwards. - **Falsifier:** demonstrating that a 16-character prefix was actually enforced (it was not — the meaningful reading only covers `666666m7x6x5`, 12 characters, with `regc` conceded as meaningless even by the wiki: "Don't ask me what 'regc' means"). - Status: **SUPPORTED.** Grade: LIKELY. The "supercomputer/alien" framing is REJECTED (see R-13). --- --- # §3. REJECTED CLAIMS Each with the specific reason. "Rejected" here means *demoted below the evidence bar*, not "disproved" unless stated. **R-01. "The BURUMUTRE matrix is the decoding of the second audio file."** — **REJECTED, FALSE.** - Reason: they are different threads, a year and several media apart. The beep WAV chain (March 2017) terminates at `666666m7x6x5regc.onion`; the matrix is derived from the arithmetic printed on page 23 of the **2016** book. **None** of `BURUMUTREFAMTU`, `UTMAFERTUMURUB`, any matrix row, or the 11 × 14 shape appears anywhere in the 2994-digit beep stream or its derived letters, and none of the beep output appears in the matrix. No 2016–2017 primary source draws a derivation from one to the other. The *only* structural link between the threads is the bit.ly URL printed in the same signed paste as the matrix — and that URL leads to the audio folder and carries **no page-23 instruction** (F-14). Independently reached by both reconstructions and confirmed here. **R-02. "The 47 × 137 grid for `themessage.txt`."** — **REJECTED, ARITHMETICALLY IMPOSSIBLE.** - Reason: `47 × 137 = 6439`. The message is **6448** characters — a fact now pinned by a GOOD RSA-4096 signature (F-17), so it is not a transcription artifact. `6448 = 2⁴ × 13 × 31`; 137 is not a factor; the complete divisor list (recomputed) contains no 47 and no 137. There is no way to lay 6448 letters into a 47 × 137 rectangle. - Secondary note: `6439` and `47×137` appear **nowhere** in any contemporary 2017 source in this corpus — not in the Cipherbrain comment threads, not on Reddit, not on the wiki. The grid is a later invention that back-projected the 23 × 137 = 3151 Arecibo shape (which is real, F-19) onto the wrong file. Genuine rectangles for 6448 include 4 × 1612, 8 × 806, 13 × 496, 16 × 403, 26 × 248, 31 × 208, 52 × 124, 62 × 104. - What IS supported instead: block size **4** (F-18). **R-03. "KIWI" (as a Tengri 137 entity, codename or artifact).** — **REJECTED, UNTRACEABLE.** - Reason: exhaustive case-insensitive word-boundary grep over the whole corpus (1121 files at the time of that sweep; re-checked against the 1135-file tree in the consistency pass, same result) returns occurrences **only inside negative findings** — i.e. every hit is an investigator writing "KIWI was not found". Zero occurrences in any primary artifact, any signed message, any 2017 Reddit post, any Cipherbrain comment, any wiki revision, any forum thread. No GOOD signature exists on any KIWI claim. Grade: **SPECULATION, unsupported, no known origin.** - Note a corpus disagreement: `recon/code-hosts/_CHANNEL-NOTES.md` says KIWI "appears only in Reddit thread HTML"; no such HTML is retained on disk and no other channel corroborates it. I therefore treat KIWI as having **no on-disk witness at all**. **R-04. "GARLIC" (as a Tengri 137 entity).** — **REJECTED as a Tengri entity; ACCEPTED as a third-party tool.** - Reason and correction: GARLIC is **real and contemporary**, but it is a **vanity-.onion address generator**, named by *community members*, never by Tengri. Verbatim primary/secondary attestations: - Cipherbrain, 2017-03-18, comment #2 by reader **Alex** (id `comment-860871`): `The tool GARLIC shows you how it works.` - Tengri 137 Wikia, "Twitter message 2017" (Wayback capture 2017-04-03): `We tested this with a tool named GARLIC too (download here: https://garlic7ravilyupx.onion.to/ )!` It is named in the same breath as SCALLION (`https://github.com/lachesis/scallion`) and Eschalot. - So: a claim that "GARLIC" is a Tengri codename, gate, or artifact is **REJECTED**. A claim that the community used a tool called GARLIC in March 2017 is **CONFIRMED (SECONDARY)**. **R-05. "Eternal Library" as later Discord folklore.** — **REJECTED. It is genuine book vocabulary.** - Reason: the phrase is in the decoded plaintext of the book itself, in three places: page 3 `THE CHOSEN SOUL WILL GET KNOWLEDGE AND OUR KEY / TO OUR ETERNAL LIBRARY.`; page 11 `TENGRI WILL GUIDE THE CHOSEN SOUL AND GIVE HIM TH / E KEY TO OUR ETERNAL LIBRARY.`; page 21 `THE REWARD IS THE ACCESS TO OUR ETERNAL LIBRARY` (quoted in Cipherbrain comment #12 by Klaus Tappeiner, 2 March 2017). - **Grade: PRIMARY-derived vocabulary.** What IS rejected is any claim that the Eternal Library is a *reachable resource* — a site, an archive, a file drop. No such thing is attested anywhere, and zero signed artifacts mention it. **R-06. `rjzdqt4z3z3xo73h.onion`.** — **REJECTED, UNTRACEABLE.** - Reason: exact-string search across every channel (Cipherbrain articles + all comment threads, Reddit archive, Wikia, forums, Twitter timeline, web archives, code hosts including the 356 MB bartman mirror) returns **zero real hits**. Every occurrence in the corpus is an investigator recording its absence. No signed artifact, no 2017 source, no screenshot. Grade: **SPECULATION, unsupported.** The only Tengri onion service with contemporary evidence is `666666m7x6x5regc.onion`. **R-07. `tengri137@torbox3uiot6wchz.onion`.** — **REJECTED, AND CONTRADICTED BY A PRIMARY SOURCE.** - Reason: zero hits anywhere in the corpus outside of negative findings. What the contemporary record actually gives is a *different* address: the Tengri 137 Wikia "Quickstart" page (Wayback `http://web.archive.org/web/20170108104002id_/http://tengri137.wikia.com:80/wiki/Quickstart`, the only 200-OK capture, January 2017) says verbatim: `After you mail the right answer (Fine-structure constant, 1515009125) to the "Onion" mail address (tengri137@sigaintevyh2rzvw.onion) you get a mail like this -> http://pastebin.com/X0pJtqfD` — a single `.onion` string on the whole page, zero hits for `torbox`. - SIGAINT was a real darknet mail provider of that era (defunct ~Feb 2017), which is consistent with a 2016 puzzle. A later TorBox address is *plausible* but **not evidenced**. The circulating `torbox3uiot6wchz` string is **SPECULATION**. (A separate community write-up, pastebin `tgsAz11B`, gives `tengri137@gmail.com` with subject `137` — also contemporary, also not TorBox.) **R-08. "IPv6 addresses" in the Tengri material.** — **REJECTED, UNTRACEABLE.** - Reason: zero hits in any Tengri context across every channel. Every corpus occurrence is an investigator recording the absence. No signed artifact contains an IPv6 address. Grade: **SPECULATION, unsupported, no known origin.** **R-09. "The hidden codon table."** — **SPLIT VERDICT.** - The **genetic premise is PRIMARY**: page 21 says `UPCOMING TEXTS ARE GENETICALLY ENCRYPTED` and `WHO HAS THE CORRECT GENETIC CODING WILL UNDERSTAND THIS TEXT`, and page 23 draws all five canonical nucleobases. That is real. - A **concrete "hidden codon table" is REJECTED**: no such table exists in any primary artifact. What exists is a series of reader *hypotheses*, all of which failed — Michael's amino-acid grid (Cipherbrain #76, 18 Mar 2017, beginning `Asx Sec Arg Sec Met Sec Thr Arg Glu Phe Ala Met Thr Sec`); Norbert's codon-triplet split (#79: `BUR UMU TRE FAM TUB URU MUT REF AMT UBU RUM UTR EFA MTU`); hattadone's codon-count grid (4 Apr 2017); u/pHumn's independent Reddit rediscovery (`63enxq`, comment `dfv19mw`). - **The central obstruction is stated in the primary record itself** (Norbert, Cipherbrain, in German): most amino acids map to *several* codons (Asn = AAU or AAC), so letters→codons is not unique; and `Asx` is itself only shorthand for "Asn **or** Asp". The mapping is not a function. - Norbert's own computational test (simulated annealing, comment #117) returned **"keine Lösung gefunden"**. Grade for any specific codon table: **SPECULATION.** **R-10. "The information is contained in just 4 amino acids… it is IMPOSSIBLE to figure out… it has to be unpacked and installed into a certain human brain."** — **REJECTED as an author statement.** - Reason: this is **not** Tengri. It is three consecutive comments (#98/#99/#100, ids `comment-862956` / `862958` / `862959`, 23 March 2017) by a pseudonymous Cipherbrain commenter **"Jamess"**, who appears nowhere else in the corpus, is never linked to @666ab731, signed nothing, and attributes the idea to "JHWH". It fuses the author's genuine page-22 "highly compressed data" language with Michael's amino-acid mapping. - Internal tell: the page-23 diagrams depict **5 nucleobases**, not "4 amino acids". Grade: **SPECULATION, misattributed.** **R-11. "Page 23's third formula has a 592,620-digit repetend containing deliberate 666666/333333 runs, impossible without a distributed computing system."** (@rebelskum, Steemit/Hive 2017-04-19, crediting @fortified.) — **REJECTED.** - Reason: argument from incredulity with **no worked arithmetic shown**, and it contradicts the arithmetic that actually reproduces the signed matrix. The period lengths recomputed here from the printed fractions are **28** (ten rows) and **30** (row 9) — nowhere near 592,620. Grade: **SPECULATION.** **R-12. "Page 23 read as Turkish"** (pastebin `BdK6FD4X`) — **REJECTED, THE CIPHERTEXT WAS MUTATED.** - Reason: the paste contains a faithful matrix copy *and* a second copy the solver altered — byte comparison shows row 1 grew from 14 to 15 letters, row 5 lost an `L`, row 11 had `N` changed to `K`, and Turkish diacritics were inserted. The readings (`UYGULAMA ŞEKLİ`, etc.) exist only because the cipher text was changed. Worthless as a solution. **R-13. "The onion address is not human-computable / proves a supercomputer or non-human origin."** — **REJECTED.** - Reason: only the 12-character portion `666666m7x6x5` carries the claimed meaning, and even the wiki concedes `regc` is unexplained. Post-hoc selection over a short enforced prefix fully accounts for it (Arminius, Cipherbrain 2017-03-18). The wiki's own numbers are also internally inconsistent (it has a "supercomputer" only 6× faster than a PC on an embarrassingly parallel task). Grade: **SPECULATION.** **R-14. "Page 23 is not meant to be solved — read the digits aloud and meditate."** — **DEMOTED to interpretation, and now actively undercut.** - It rests on genuine page-22 plaintext, so the *sentiment* is primary. But the inference "therefore page 23 has no cipher answer" is a reader's, and it is directly undercut by the author's own 2025 statement that there **is** "an animal name in the text of the page 23" (F-24) — which presupposes a readable text. Grade: **SPECULATION.** **R-15. "The gate exposed THREE PGP-signed files."** — **REJECTED, it exposed TWO.** - Reason: the primary onion directory listing (F-20) shows exactly `nothingisrandom.txt` and `themessage.txt`. "The gate is open now" was the *announcement* paste, not an onion file. The corpus's own `artifacts/nothingisrandom-txt--MERGED.md` §1 still says three; that is superseded. **R-16. "The Mojave coordinates `34.5144437137, -115.510147137` are a Tengri clue."** — **REJECTED, FORGED.** Reason: pastebin `c4cQG6Z2` carries hand-typed base64 that is not an OpenPGP signature at all (first decoded byte `0x61`; a signature packet must begin `0x88`/`0x89`/`0xc2`). Contemporary r/tengri137 posts `62d37m` and `62n5fs` already called it fake; cryptography confirms them. **R-17. "Eat your spinach! / Peace out!" (pastebin `CJsN0KWL`) is a Tengri message.** — **REJECTED, FORGED.** Reason: it carries the byte-identical genuine `=Ermz` signature block lifted from `d2qAQgBD`, and verifies **BAD** (re-verified this pass). **R-18. Any post-2017 "solution" to page 23.** — **ALL REJECTED / UNREPRODUCED.** - The DNA base-pairing + multilingual free-association reading (`http://tengri137page23solution.blogspot.com/2017/03/adenine-guanineb-u-r-u-m-u-t-r-e-f-m-t.html`, 2017-03-26) is the only "solution" that reads the whole matrix; the author hedges throughout, a Hindu commenter refutes a load-bearing gloss ("there is no such a thing as sahot in hindi"), and it has never been reproduced. Note the author's 2025 "**not the fox**" appears aimed at precisely this reading, which glossed `Ref` as Norse for fox. - Reddit threads `622idf`, `637ex7`, `637f2z`, `637fif`, `637fyq`, `639usp`, `63enxq`, `62pr5l`, `62py8e`, `658yw6`, `66zrcl`, `67ls81`, `67t54h`, `68qazk` ("Page 23 solved?" — a *question*), `6flec2`, `6r83pf`, `7y56fq`: none reproduced, none author-confirmed. - The Cicada-3301 linkage claims (r/tengri137 `61tbtu`) rest on a signature by key `0x181F01E57A35090F` — **the Cicada key, not Tengri's**. Cross-branding, not evidence. --- --- # §4. UNRESOLVED QUESTIONS Ordered by how tractable they look. **Q-01. What does the 154-letter matrix mean?** The open problem. Every letter is pinned; nothing about the meaning is. **Q-02. What is the key to `themessage.txt`?** This is arguably now the *more* tractable target, because F-18 gives real structure (block 4, deterministic, invertible key) and F-17 gives byte-exact author-signed ciphertext. Concrete untried step: **H-06** — filter candidate keys by requiring all 1184 observed ciphertext blocks to pull back into the 19-letter alphabet. **Q-03. Is the `BUNU YAZAN TOSUN OKUYANA KOSUN` acrostic intentional?** If yes, the matrix is at least partly a joke aimed at the solver, and the "solemn revelation" framing is misdirection. If no, it is an extraordinary coincidence (~10⁻²⁸ before look-elsewhere correction). **The one test that would settle the look-elsewhere objection was never run:** search all 2¹¹ = 2048 prefix-length assignments against a full Turkish lexicon and count how many yield *any* attested idiom. **Q-04. What animal name is in page 23, and in which reading direction?** `SNAKE` and `OKUZ` are both present but in opposite directions (H-03). The 🐺 reply suggests wolf, which is **not** present in any orientation. The author has never resolved it. **Q-05. What substrate does "2222, 4444, 6666, 8888" refer to?** Eliminated this pass: the page-23 period blocks, the 1422-digit `nothingisrandom.txt` payload, the 2994-digit beep transcript (H-04). **Q-06. What was the full, raw, ASCII form of `nothingisrandom.txt`, and where is its signature?** Both source pastes (`u7pFiCpD`, `BcMucDVh`) are 404 and were never archived with content. Only the WordPress-mangled rendering survives. The file-size test bounds the missing prose at under one line. **Next move:** hunt any mirror/cache preserving the clearsigned block, then brute-verify a reconstruction exactly as `themessage.txt` was. **Q-07. Does page 23 carry a graphical hint about the row-9 dinome segmentation?** The five valid readings (F-23) exist because nothing tells you where to cut. A higher-resolution scan than the available 1332 × 1998 px might show print spacing. The corpus has crops (`recon/book-source/p23-crops/zoom_f09num*.png`, `gaps/seed-06-files/P023-FRACTION9-*.png`) but no written verdict — the seed-06 investigation produced images and **no report**. **Q-08. Who are the four third-party keys that certified Tengri's key in May and November 2017?** `0x040484988228DD98`, `0xA49BDCD5BC224010`, `0xD2FBEC71DB65A36D`, `0x6966D8E21ACC064F`. Never fetched. Their UIDs would show who was close enough to the author to sign the key. **Q-09. What is `regc`?** Debated in 2017 ("register c" — Thomas; a brute-force artifact — Arminius); never resolved; the wiki itself says "Don't ask me what 'regc' means." **Q-10. What is the final unmapped word `rssstuvwx` (9 symbols) in the beep pattern string?** Unconstrained by the fitted letter map and, per every source checked, never decoded. A genuine loose end in an otherwise fully solved chain. **Q-11. Content of imgur album `tdYJJet`** (pointed at by the GOOD 2019-02-22 signed message) **and YouTube video `XV2AlgPBZPE`** (pointed at by the GOOD 2017-04-08 signed message). Both are author-signed pointers whose targets were never analysed. **Q-12. The 2024 "Vumarii" script images** (tweets 1841552471740526722, 1841920130583810314). Never solved; images not downloaded. **Q-13. Was the author German?** The earliest first-person framing is the paraportal.org post, which is **German**, cryptographically bound to the key (F-02), and carries a native-adjacent grammar slip (`ein Intelligenztest` for `einen Intelligenztest`) plus the odd literal `bis zum Schuss schaffen`. Suggestive; not identifying. --- --- # §5. INCONSISTENCIES FOUND IN THE CORPUS WHILE WRITING THIS These are recorded so a later reader is not misled by files that were correct when written and have since been superseded. **No file under `artifacts/`, `harvest/`, `recon/`, `verify/`, `gaps/`, `raw/` or `solve/` was modified.** The five top-level deliverables (`MASTER-INDEX.md`, `ARTIFACTS.md`, `LEDGER.md`, `OPEN-PROBLEMS.md`, `SOLVING-BRIEF.md`) *were* edited by the closing consistency pass, which is what items I-11 … I-14 below record. **I-1. `themessage.txt` is graded far too weakly in the older files.** `artifacts/themessage-txt--MERGED.md` §3c grades the 6448-char tail **MEDIUM** ("rests on a single source", "no independent witness"), and `verify/themessage.txt raw contents--VERIFY.md` never mentions a signature at all. Both are superseded: `harvest/026-…` and `gaps/seed-00-pgp-signature-verification.md` §3 establish a **GOOD RSA-4096 signature over the whole 6448**, which I re-verified this pass. Correct grade: **PRIMARY, cryptographically pinned.** **I-2. `recon/code-hosts/_CHANNEL-NOTES.md` §5 says "Treat the whole themessage.txt/6448 story as unsupported until someone produces a contemporary source."** Superseded by the signature (I-1) *and* by two contemporary 2017-04-04 / 2017-04-05 Wayback captures carrying the identical 6448-char run. **I-3. `artifacts/mp3-spectrogram--MERGED.md` §1 lists the MP3's duration and SHA-256 as permanent GAPs** ("never hashed; 7.86 MB binary not downloaded"). The binary is on disk in two places (`harvest/058-files/tengri137.mp3`, `recon/code-hosts/verified-originals/tengri137.mp3`, identical), is **PGP-signed GOOD**, and I measured it this pass: SHA-256 `b424c155221cd62a5af23d33d68105dac72e0c41311d9ea57cc2901bc63134d7`, 7,864,927 bytes, duration **255.111837 s**, 246,634 bps, 44.1 kHz stereo. Gap closed. **I-4. `recon/book-source/Tengri-137-PDF-provenance-and-hashes.md` says the original individual `P0xx.png` files could not be retrieved.** They are in the corpus, inside the two PGP-signed tarballs, and their pixels are identical to the PDF extracts (F-05). Gap closed. **I-5. `artifacts/nothingisrandom-txt--MERGED.md` contains three now-wrong statements:** the onion exposed "THREE PGP-signed items" (it listed two, R-15); imgur album `FoIi5` is "MISSING / not archived" (it is live and is on disk); and §0 says the prose block is "2975 characters, 65 lines" (measured: 2975 characters, **63** lines). **I-6. KIWI's provenance is stated inconsistently across channels.** `recon/chat-logs/_CHANNEL-NOTES.md` says NOT FOUND anywhere; `recon/code-hosts/_CHANNEL-NOTES.md` says it "appears only in Reddit thread HTML". No such HTML is on disk. My grep finds **zero** occurrences outside investigators' own negative findings. Treat as R-03. **I-7. GARLIC is graded inconsistently.** `recon/chat-logs/_CHANNEL-NOTES.md` says "NOT FOUND anywhere accessible"; `recon/code-hosts/_CHANNEL-NOTES.md` says "attested"; and `harvest/050-…` grades `garlic7ravilyupx.onion` as SPECULATION. The chat-logs entry is simply wrong — the string is present verbatim in the Wikia and the Cipherbrain comment thread (R-04). The right answer is "attested, but as a third-party tool, not a Tengri artifact". **I-8. `iJNtBJHC` signature timestamp.** `artifacts/pgp-artifacts--{A,B,MERGED}.md` state `2019-12-31 12:37:42 UTC`; the signature packet says `created 1577798262` = **13:17:42 UTC**. Caught by `verify/pgp-artifacts--VERIFY.md` (D1) and by seed-00; the artifact files still carry the wrong value. **I-9. Two gap investigations produced no report.** `gaps/seed-06-files/` holds page-23 fraction-9 crops and the 23 signed original pages but **no `seed-06-*.md`**; `gaps/seed-09-files/` is **empty**. Whatever those passes were meant to answer (Q-07 is the obvious candidate for seed-06) is unrecorded. **I-10. `verify/themessage.txt raw contents--VERIFY.md` was itself wrong about the record.** Its D1 finding correctly refutes the MERGED file's "2024 edit" theory using 2017 captures — but it then grades confidence on transcription grounds without noticing the signature. Both the graded artifact and its adversarial verifier missed the strongest available evidence, which sat in a sibling file of the same date. --- ### Found and fixed by the closing consistency pass (2026-07-24) **I-11. The orientation claim was over-graded across four of the five top-level files.** `ARTIFACTS.md` §1.14/§14.9 got it right; `SOLVING-BRIEF.md`, `OPEN-PROBLEMS.md` and this file asserted that the author "declared" the right-to-left edition correct. Adjudicated against the primary record (tweet `847161664889901056` is a bare URL; the "correct version of use?" line is a Wikia editor's *question*) and demoted to SPECULATION everywhere (F-12). **One `artifacts/` file still carries the stronger wording and was deliberately not rewritten:** `artifacts/page23-matrix--MERGED.md` lines 26 and 142, which say "the author's Twitter calls this the 'correct' orientation" / "the author's Twitter asserts … 'the correct version'". That is wrong; the Twitter account said nothing of the kind. (By contrast `artifacts/author-statements--MERGED.md` and `--B.md` attribute the phrase correctly, to the wikia.) Treat this ledger entry and `ARTIFACTS.md` §1.14 as controlling. **I-12. Four numeric errors in this file, corrected in place.** (a) F-25 said Reddit held "277 submissions, 1,832 comments"; the corpus's own index gives **265 / 1762** (recounted). (b) H-04 said the page-23 period blocks total "318 digits"; they total **310** (10 × 28 + 30). (c) F-18 quoted an all-pairs gap total (577) next to a consecutive-gap mod-8 split (237/155, of 392) without naming the conventions. (d) F-15's "`C` reachable via 11 atomic numbers" is the Z ≤ 99 figure; under Z ≤ 118 it is 12 (adds 112 Cn). **I-13. H-03 wrongly claimed `OKUZ` was a new observation.** It is attested in the corpus: u/GaziMemo, r/tengri137 `622idf`, comment `dfjd8tm`, 2017-03-29 00:13:29 UTC. Corrected in H-03. **I-14. FIVE different corpus file-counts are in circulation (1121 / 1126 / 1135 / 1161 / 1901)** because `gaps/` and `solve/` were being written to throughout. All five are correct at their own timestamp; none is a disagreement about content. The 1161 → 1901 step is the `tr1-*` round, the `c1-*` round and `solve/lexicons/`. **The tree was still growing during the final consistency pass itself** (1863 → 1901 while it ran). See the header of this file and `MASTER-INDEX.md` §0, and **re-measure rather than quoting**: ``` find -type f | wc -l ``` **I-15. The five top-level deliverables were, until the final pass, silent about an entire round of work.** `LEDGER.md`, `ARTIFACTS.md`, `MASTER-INDEX.md`, `OPEN-PROBLEMS.md` and `SOLVING-BRIEF.md` were all written between 15:24 and 15:33 on 2026-07-24; the `tr1-*` gap round ran 16:35–19:56, the trained models in `solve/lexicons/` were built 19:09–19:28, and the `c1-*` round ran from 22:45. None of the five cited a single `tr1-*` or `c1-*` file, or `solve/lexicons/`, or `solve/BITMAP-VERIFICATION.md`. **This was an omission, not a contradiction** — nothing they said was wrong — but it meant the handoff document pointed an analyst at neither the validated scoring toolchain nor the decisive bitmap negative. Corrected in the final pass: `SOLVING-BRIEF.md` §3.1, §3.2, Part 4a, §6.3, E12, Part 10 §§11–13; `MASTER-INDEX.md` §11.3a, §11.3b, §11.6, §11.7; `LEDGER.md` F-26…F-29; `OPEN-PROBLEMS.md` §4.14 and the closure notes. **I-16. One statement in `SOLVING-BRIEF.md` had gone stale rather than wrong.** Part 3 said a machine-readable dinome grid and the row-9 variant grids were "not yet on disk, worth creating". They were created at 22:46 by the `c1-01` pass. Corrected; the letter-level row-9 variants still do not exist and are still worth creating. **I-17. Four `MASTER-INDEX.md` §11.3 entries were stale in the other direction** — it recorded that the `seed-06`, `seed-07`, `seed-08` narrative `.md` files "never existed" and that `seed-09-files/` was "still empty". All four narratives were written after the indexing snapshot (15:45–16:47) and `seed-09-files/` holds 6 files. Corrected in place. --- --- # §6. ONE-PAGE ADJUDICATION TABLE (the items the brief asked to be settled) | Claim | Verdict | Evidential basis | |---|---|---| | **Eternal Library** | **CONFIRMED as book vocabulary** (pages 3, 11, 21); **REJECTED as a reachable resource** | Decoded plaintext of the book itself, quoted verbatim in Cipherbrain comment #12 (2 Mar 2017) and four Wikia revisions. Zero signed artifacts describe it as a place or file. → F-07, F-08, R-05 | | **KIWI** | **REJECTED — untraceable** | Zero occurrences in any primary artifact, signed message, 2017 Reddit post, Cipherbrain comment, wiki revision or forum thread. Every corpus hit is an investigator recording its absence. → R-03, I-6 | | **GARLIC** | **REJECTED as a Tengri entity; CONFIRMED as a community vanity-onion tool** | Verbatim in Cipherbrain comment #2 (Alex, 18 Mar 2017) and the Tengri 137 Wikia: `https://garlic7ravilyupx.onion.to/`, alongside SCALLION. Named by readers, never by Tengri. → R-04, I-7 | | **`rjzdqt4z3z3xo73h.onion`** | **REJECTED — untraceable** | Exact-string search over every channel including a 356 MB code mirror returns zero real hits. No signed artifact, no screenshot, no 2017 source. → R-06 | | **Hidden codon table** | **SPLIT: premise PRIMARY, table REJECTED** | Page 21 genuinely says `UPCOMING TEXTS ARE GENETICALLY ENCRYPTED`; page 23 genuinely draws 5 nucleobases. But no table exists in any artifact, the amino-acid→codon map is provably non-unique (stated in the primary record), and the only computational test returned "keine Lösung gefunden". → R-09 | | **IPv6 claims** | **REJECTED — untraceable** | Zero hits in any Tengri context in any channel; no signed artifact contains an IPv6 address. → R-08 | | **`tengri137@torbox3uiot6wchz.onion`** | **REJECTED — and contradicted** | Zero hits corpus-wide. The only contemporary onion mail address, from the January-2017 Wikia Quickstart (the sole 200-OK Wayback capture), is `tengri137@sigaintevyh2rzvw.onion`. → R-07 | | **BURUMUTRE matrix comes from the second audio file** | **REJECTED — FALSE** | Different threads, a year apart, zero shared content in either direction, no primary source deriving one from the other. The matrix is derived from the 11 fractions printed on book page 23 — I re-derived all 11 rows from that arithmetic this pass. → R-01, F-10 | | **"The author declared the right-to-left orientation the correct one"** | **REJECTED as an author statement; the R→L *preference* survives on other grounds** | Tweet `847161664889901056` contains only `https://pastebin.com/YUPZsz9n`. The "correct version of use?" phrasing is a Tengri 137 Wikia editor's question. The author's own signed prose ranks neither edition ("the first sequence" / "the second sequence distributed"). Orkhon script direction and the acrostic (F-22) independently favour R→L. → F-12, I-11 | | **47 × 137 grid for `themessage.txt`** | **REJECTED — arithmetically impossible** | `47 × 137 = 6439 ≠ 6448`, and 6448 is now pinned by a GOOD RSA-4096 signature. `6448 = 2⁴ × 13 × 31`; no divisor is 47 or 137. The real structure is block size **4**. → R-02, F-17, F-18 | --- ## Appendix — reproduction commands used this pass ``` gpg --import recon/code-hosts/tengri137-PGP-PUBLIC-KEY-D152D6C5666AB731.asc TZ=UTC gpg --batch --status-fd 1 --verify TZ=UTC gpg --batch --status-fd 1 --verify .asc python3 solve/verify_derivation.py python3 gaps/seed-05-files/verify_acrostic_from_signed_pastebins.py shasum -a 256 -c gaps/seed-06-files/author-signed-original-pages/SHA256SUMS.txt ffprobe -v error -show_entries format=duration,bit_rate harvest/058-files/tengri137.mp3 ``` Everything else in §1–§3 was computed with short ad-hoc `python3` scripts over the on-disk primary bytes (matrix mirroring and diff, alphabet reachability, consonant-run null model, acrostic probability, 1422-digit run-length → 23×137 bitmap equality, `themessage.txt` Kasiski/block census and mod-2 / mod-13 functional surjectivity, tar-header mtimes, pixel-identity of the 23 pages).