# TENGRI 137 — MASTER INDEX OF THE CORPUS

**Corpus root:** `<research-workspace>`
**Index written:** 2026-07-24 14:30 CEST, by the archivist pass closing out the evidence-gathering operation.
**Index scope:** every directory and every meaningful file in the corpus, organised **by theme, not by
directory**, so a cryptanalyst arriving cold can find any artifact in seconds.

**Corpus size — FOUR measurements, because the corpus was live throughout.** Every one of these was
produced by `os.walk` + `os.path.getsize`, symlinks excluded.

| metric | 14:30 CEST indexing snapshot | start of 1st consistency pass | close of 1st consistency pass | **FINAL consistency pass** |
|---|---|---|---|---|
| files | **1126** (incl. 5 GnuPG scratch **sockets**) | **1135** regular files | **1161** regular files | **1901** |
| bytes | **71,142,110** (67.8 MiB) | 73,044,997 (69.7 MiB) | 73,816,520 (70.4 MiB) | **556,813,801 (531.0 MiB)** |
| `artifacts/` | 42 | 42 | 42 | **42** |
| `gaps/` | 79 | 88 | 114 | **808** (426.2 MiB — the `tr1-*` and `c1-*` payload dirs) |
| `harvest/` | 263 | 263 | 263 | **263** |
| `raw/` | 3 | 3 | 3 | **3** |
| `recon/` | 629 | 629 | 629 | **629** |
| `solve/` | 8 | 8 | 8 | **48** (44.8 MiB — `lexicons/` and the dinome grids) |
| `verify/` | 101 | 96 | 96 regular files | **101** |
| root | 1 (`tmp_key.asc`) | 6 | 6 | **7** (`tmp_key.asc`, the five deliverables, `README.md`) |

**Stable: `artifacts/`, `harvest/`, `raw/`, `recon/`.** Everything else moved. The 1161 → 1901 jump
is real work, not churn: the `tr1-*` gap round (§11.3a), the `c1-*` gap round (§11.3b) and the trained
language models in `solve/lexicons/` (§11.7). **The corpus was STILL being written while this final
pass ran** — the file count rose from **1863 to 1924** during it, and the byte total from 526 MB to
582 MB, as the `c1-*` agents finished. The 1901 column above is a mid-pass reading. **Any file count
in any corpus file is a timestamp, not a fact about the corpus.** Re-measure before quoting:

```
find <research-workspace> -type f | wc -l
du -sh <research-workspace>
```

Extension profile at the final pass: 644 `.md`, 410 `.txt`, 207 `.html`, 155 `.png`, 140 `.json`,
88 `.py`, 82 `.asc`, 73 `.jpg`, 21 `.ui`, 15 `.tsv`, 9 `.dict`, 6 `.pyc`, 5 `.jsonl`, 3 `.sh`,
3 `.aff` (`collections.Counter` on `os.path.splitext`).

> **LIVE-CORPUS WARNING.** Gap-closing agents were writing into `gaps/` while this index was written
> and never stopped. `LEDGER.md` and `ARTIFACTS.md` were written against the 1121-file state; this
> index against 1126; the numbers above against 1901. That is a **timestamp difference, not a
> disagreement**. **Cite a count only with the moment it was taken, or re-measure.**
> Everything described below was read, not assumed.

---

## 0. HOW TO READ THIS INDEX

### 0.1 Tier legend (provenance)

| tier | meaning |
|---|---|
| **PRIMARY** | 2016–2017 contemporary, or the author's own bytes, or PGP-signed by `0xD152D6C5666AB731`. The book page images, the signed pastebins, the signed tarballs, the MP3. |
| **PRIMARY-derived** | A faithful contemporary reproduction of a primary artifact whose original host is dead (e.g. `themessage.txt` re-posted into a 2017 blog comment). |
| **SECONDARY** | Contemporary third-party reporting: Klaus Schmeh's Cipherbrain articles, the Tengri 137 Wikia, the r/tengri137 threads, the AboveTopSecret threads. |
| **SPECULATION** | Later forum / Discord / Reddit / blog / AI guesswork, or any proposed *meaning* of the matrix. Includes the entire 2026 `bartman081523` repo analysis layer. |
| **ANALYSIS** | Computation performed **inside this corpus** by a corpus agent, reproducible from PRIMARY inputs. Not a source; a derivation. |

### 0.2 Data-grade legend (the distinction that matters most)

- **[CIPHER]** — the file *contains raw cipher-grade payload*: letter matrices, digit strings, fractions,
  ciphertext, binary blocks, key material, page pixels. **These are the files you can compute on.**
  Copy characters out of these, never out of prose.
- **[COMMENTARY]** — narrative, provenance, argument, method notes, verdicts. Useful for orientation
  and for knowing *why* something is believed. **Never harvest a cipher string from a [COMMENTARY]
  file** — go to the [CIPHER] file it cites.
- **[MIXED]** — long analysis documents that embed verbatim payload inside prose. Safe to harvest from,
  but only from the fenced blocks, which are marked verbatim in those files.

### 0.3 The one-line orientation

Pages 1–16 = rune substitution (solved). Pages 17–22 = arithmetic → repeating decimal → dinomes →
atomic numbers → element-symbol first letters (solved, Tappeiner, March 2017). **Page 23 = the same
arithmetic method applied to 11 fractions, producing an 11 × 14 = 154-letter matrix whose MEANING is
still unsolved.** That is the open problem. Separately, a March-2017 audio chain (MP3 → spectrogram →
WAV → octal → A/x block → `666666m7x6x5regc.onion`) opened a "gate" on ~3 April 2017 exposing
`themessage.txt` and `nothingisrandom.txt`. **The audio chain and the page-23 matrix are separate
threads** — any claim that the BURUMUTRE matrix is the decode of the second audio file is FALSE, and
this corpus documents the origin of that error (see §12.2).

---

## 1. START HERE — the twelve files a cryptanalyst opens first

Ranked. Everything else in this index supports these.

| # | file | grade | tier | why |
|---|---|---|---|---|
| 1 | `solve/page23_forward.txt` | **[CIPHER]** | ANALYSIS over PRIMARY | The 154-letter matrix, forward orientation, 11 lines of 14. Machine-clean, no prose. **Feed this to your solver.** |
| 2 | `solve/page23_reversed_as_published.txt` | **[CIPHER]** | PRIMARY (transcribed from signed paste) | The author's own reversed edition, **including the row-10 `N`**. Differs from a true mirror in exactly one cell. |
| 3 | `solve/page23_reversed_mirror.txt` | **[CIPHER]** | ANALYSIS | The exact mirror of file 1, i.e. what the reversed edition *would* be with no author slip. |
| 4 | `solve/page23_canonical.json` | **[CIPHER]** | ANALYSIS | Machine-readable full derivation: per row, the period length, the repeating decimal block, the dinome list, the element symbols, the letters. 435 lines. |
| 5 | `solve/verify_derivation.py` | tool | ANALYSIS | 99 lines, offline, deterministic. Recomputes all 11 rows from the printed fractions and enumerates every legal dinome segmentation. **Run this before trusting anything.** |
| 6 | `recon/book-source/page23-VERBATIM-arithmetic-derived-matrix-and-diagrams.md` | **[MIXED]** | PRIMARY | The 11 page-23 fractions verbatim (double-verified: visual read + Apple Vision OCR), the five nucleobase diagrams and their positions, and the from-scratch recomputation. |
| 7 | `gaps/seed-06-files/author-signed-original-pages/P001.png … P023.png` | **[CIPHER]** | **PRIMARY, cryptographically authenticated** | The 23 book pages as **byte-identical extractions of the author's own PGP-signed tarballs**. Higher fidelity than the Schmeh PDF. See §3.1. |
| 8 | `harvest/020-pastebin-FAJNLpLZ-raw.txt` | **[CIPHER]** | PRIMARY, signature re-verified in this pass | The forward matrix as the author published it, with signature, "Nothing is random.", `2, 8, 20, 28, 50, 82, ...` and `http://bit.ly/2mUF7Xy`. 1309 bytes. |
| 9 | `recon/code-hosts/verified-originals/pastebin-raw/pastebin_YUPZsz9n_raw.txt` | **[CIPHER]** | PRIMARY, signature re-verified | The reversed matrix under the heading "NOTHING IS RANDOM". |
| 10 | `gaps/seed-01-themessage-body-6448.txt` | **[CIPHER]** | **PRIMARY, cryptographically authenticated** | Exactly 6448 bytes, 6448 letters, full A–Z alphabet. The onion drop's ciphertext, now proven author-issued (§6.1). |
| 11 | `gaps/seed-00-pgp-signature-verification.md` | **[MIXED]** | ANALYSIS over PRIMARY | The corpus-wide signature census. Tells you which artifacts are *authenticated bytes* and which are merely *attributed*. |
| 12 | `solve/INDEPENDENT-VERIFICATION.md` | **[COMMENTARY]** | ANALYSIS | **Written in Polish.** The row-9 ambiguity result: the dinome segmentation is forced for 10 rows but admits 5 readings for row 9. Read this before discarding any hypothesis on row-9 grounds. |

---

## 2. THE OPEN PROBLEM — page 23 and the 154-letter matrix

### 2.1 The payload itself, in machine-clean form — `solve/` (8 files)

All **[CIPHER]** unless noted. This directory is the corpus's single point of truth for the matrix.

| file | contents | verified in this pass |
|---|---|---|
| `solve/page23_forward.txt` | 11 rows × 14 cols, `BURUMUTREFAMTU` first | 11 rows, all length 14, 154 letters total ✔ |
| `solve/page23_reversed_as_published.txt` | reversed edition **as the author printed it** | differs from the true mirror at exactly one cell ✔ |
| `solve/page23_reversed_mirror.txt` | mechanical row-reversal of the forward grid | equals `[r[::-1] for r in forward]` ✔ |
| `solve/page23_flat.txt` | the 154 letters as one run, no newlines | length 154; equals `"".join(forward_rows)` ✔ |
| `solve/page23_columns.txt` | the 14 columns, read top→bottom | equals the transpose of the forward grid ✔ |
| `solve/page23_canonical.json` | full per-row derivation (period, block, dinomes, symbols, letters) | regenerated by running the script ✔ |
| `solve/verify_derivation.py` | the recomputation + segmentation enumerator | ran it; prints `ALL 11 ROWS REPRODUCE FROM PRINTED ARITHMETIC: True` ✔ |
| `solve/INDEPENDENT-VERIFICATION.md` | **[COMMENTARY]**, Polish-language write-up of the above | — |

**Forward grid (reproduced here only for orientation; harvest from the files, not from this table):**

```
BURUMUTREFAMTU
NURESUTREGUMFA
YAPSUAZBEHIMLA
ZANRUAZBENOMBA
TOBIKOTLUBUMYO
SUNOKURGANOZYI
OKUZIKUFAUSIHE
YABEKANSABERHO
NAFERANSAHOTFE
KOREMORBIZUMRO
SUNAKIRFANEMBA
```

### 2.2 Structural facts I recomputed for this index

Every number below was produced by a script run against `solve/page23_flat.txt`, not copied from
any corpus prose.

- **Dimensions:** 11 rows × 14 columns, **154 letters**. `page23_flat.txt` is exactly 154 characters.
- **Alphabet: 19 letters** — `A B E F G H I K L M N O P R S T U Y Z`.
- **Never used: 7 letters** — `C D J Q V W X`. (This is a hard constraint: any proposed reading that
  requires one of these seven is proposing a *different* matrix.)
- **Letter frequencies:** A 19, U 18, R 12, E 12, O 12, B 10, N 10, M 9, S 7, I 7, K 7, T 6, F 6, Z 6,
  Y 4, H 4, G 2, L 2, P 1. (`P` occurs exactly once, at row 3 col 3.)
- **The single author-level discrepancy:** the published reversed edition differs from the exact
  mirror of the forward edition at **exactly one cell** — reversed row 10, position 3 is `N` where
  the mirror gives `M`. Equivalently **forward row 10, column 12 = `M`** by the arithmetic
  (dinome `12` → Mg → M). Both editions are separately PGP-signed by the same key. Resolution:
  **M is correct** (it is forced by the printed fraction); the `N` is an author-side slip made while
  hand-mirroring. My script found no other differing cell.
- **Structure of the derivation:** each row comes from one printed fraction; the fraction's decimal
  expansion has a repeating period; the period is cut into "dinomes" (2- or 3-digit tokens); each
  token is read as an atomic number; the plaintext letter is the **first letter of the element
  SYMBOL** (not of the element name — e.g. 80 → Hg → **H**, 25 → Mn → **M**).

### 2.3 The row-9 degree of freedom — the most important open technical fact

Rows 1–8, 10 and 11 have **period 28 = 14 × 2**, so all fourteen tokens must be two digits: the
segmentation is **unique, zero freedom**. Row 9 has **period 30**, so exactly two tokens must be
three digits, and **five** segmentations produce fourteen valid atomic numbers (1–118):

| # | reading | elements |
|---|---|---|
| 1 | `NANPSSGFAHOTFE` | Na Al Na Pd Se Sb Ga Fl Al Hf Os Ti Fl Eu |
| 2 | **`NAFERANSAHOTFE`** ← the published reading | Na Al **Fl** Eu Rh Al Na Si Al Hf Os Ti **Fl** Eu |
| 3 | `NAFERARNRCSSSE` | Na Al Fl Eu Rh Al Rg Nb Rb Co Sm Sc Si Eu |
| 4 | `RGSERANSAHOTFE` | Rg Ga Si Eu Rh Al Na Si Al Hf Os Ti Fl Eu |
| 5 | `RGSERARNRCSSSE` | Rg Ga Si Eu Rh Al Rg Nb Rb Co Sm Sc Si Eu |

The published reading is pinned by the **author's signature**, not by the rule. Heuristics favouring
it (variants 3 and 5 introduce `C`, a letter absent from the whole matrix; variant 1 introduces a
second `P`; variants 4 and 5 break the column-1 pattern) are suggestive, not probative.
**Consequence for the breaking phase: a hypothesis that works on ten rows and fails only on row 9
deserves a re-test against the four alternative readings before being abandoned.**

Caveat I add from running the script myself: the "unique for rows 1–8, 10, 11" statement holds under
the **2-or-3-digit** token rule. If 1-digit tokens are also permitted, rows 4, 6, 8, 9 and 11 admit
20, 63, 15, 48 and 15 segmentations respectively. The script prints both columns.

### 2.4 Page-23 source pixels and the arithmetic behind the matrix

| file | grade | tier | note |
|---|---|---|---|
| `gaps/seed-06-files/author-signed-original-pages/P023.png` | **[CIPHER]** | PRIMARY, authenticated | The page itself, from the signed tarball. 1332 × 1998, RGBA. |
| `recon/book-source/page-images/tengri137-P23.png` | **[CIPHER]** | PRIMARY | Same page as extracted from the Schmeh PDF (1332 × 1998, RGB). Use as cross-check. |
| `recon/book-source/p23-crops/frac01.png … frac11.png` | **[CIPHER]** | PRIMARY | 6×–7× upscaled crops of each of the 11 fractions, used for glyph-by-glyph verification. |
| `recon/book-source/p23-crops/zoom_f09num.png`, `zoom_f09num_L.png`, `zoom_f09num_R.png`, `zoom_f09den_L.png`, `zoom_f09den_R.png` | **[CIPHER]** | PRIMARY | The row-9 fraction blown up — the one that produces the period-30 ambiguity. (Also `zoom_f01num.png`, `zoom_f04num.png`, `zoom_f05num.png`, `zoom_f07num.png` for the other contested numerators.) |
| `gaps/seed-06-files/P023-FRACTION9-native-3x-NEAREST.png`, `…-numerator-21digit-tail-8x-NEAREST.png` | **[CIPHER]** | PRIMARY | Nearest-neighbour upscales of fraction 9 produced by a later gap pass, for digit-level adjudication. |
| `recon/book-source/_OCR-raw-pages17-23-AppleVision.txt` | **[CIPHER]** | ANALYSIS | Raw Apple Vision OCR of pages 17–23. Its known systematic failure is superscripts (`2^5` → `2`); do not source exponents from it. |
| `recon/book-source/_ocr-tool-AppleVision.swift` | tool | ANALYSIS | The local OCR binary source, built because the vision tool was timing out. |

### 2.5 The matrix as independently published by other channels (cross-checks)

Use these to confirm that the `solve/` grid is not a single-source artifact. All **[CIPHER]** unless noted.

- `recon/fandom-wiki/PAGE-23-MATRIX_both-orientations_VERBATIM.md` — both orientations from the Wikia.
- `recon/twitter-account/page23-BURUMUTREFAMTU-matrix.txt` — matrix + reversal + a computed check of
  the relation between them, from the Twitter channel.
- `recon/code-hosts/page23-BURUMUT-matrix-VERBATIM-two-signed-versions.md` — both signed versions
  side by side, from the GitHub mirror channel.
- `recon/chat-logs/reddit-r-tengri137-complete-translation-5xsno3-PAGE23-MATRIX.md` — the reversed
  form as it appeared on r/tengri137, corroborated byte-for-byte against a Wayback capture.
- `recon/non-english/turkish-material-index-and-page23-matrix.md` — the matrix plus the Turkish
  reading attempt.
- `harvest/052-…-FAJNLpLZ-…-burumutrefamtu.md`, `harvest/053-…-YUPZsz9n-reversed-matrix-utmafertumurub.md`
  — annotated harvest copies of the two signed pastes.
- `recon/forums/abovetopsecret-thread1166663-pg1.md` — an independent 31 March 2017 community posting
  of the whole matrix (as 11 rows of 28 characters, spaced) plus atomic-number scratch work.

### 2.6 The three things published *with* the matrix

Inside `harvest/020-pastebin-FAJNLpLZ-raw.txt`, below the grid:

1. `Nothing is random.`
2. `2, 8, 20, 28, 50, 82, ...` — the **nuclear magic numbers** (proton/neutron shell closures). The
   next term, **126, is conspicuously absent**, and contemporary solvers read `666666 m 7x6x5` as
   "666666 modulo (7 × 6 × 5)" = 126, i.e. the onion address encodes the missing term. Full
   investigation: `gaps/seed-03-magic-numbers-2-8-20-28-50-82.md` **[MIXED]** (35 KB) — every
   contemporary discussion, plus whether anyone tested the sequence as an index set, transposition
   key or row/column selector against the 154 letters.
3. `http://bit.ly/2mUF7Xy` — resolves to the Dropbox folder holding `tengri137.mp3`. Full chase:
   `gaps/seed-02-bitly-2mUF7Xy-destination.md` **[MIXED]** (24 KB), with the captured bitly
   info-page in `gaps/seed-02-files/bitly-2mUF7Xy-plus-infopage-20260724.html`.

### 2.7 Proposed readings of the matrix — all unproven, catalogued honestly

| hypothesis | where | tier | status |
|---|---|---|---|
| **Turkic acrostic** (see §2.8) | `gaps/seed-05-old-turkic-orkhon-linguistic-analysis.md` **[MIXED]**, 50 KB | ANALYSIS over PRIMARY | The one *arithmetically exact* result about the matrix's content. |
| DNA/RNA base-pairing: split each 14-letter row into two 7-letter halves labelled by nucleobase | `recon/blogs-social/blogspot-tengri137page23solution-FULL-post-and-all-comments.md` **[MIXED]**; `harvest/071-`, `harvest/116-`, `harvest/072-`, `recon/blogs-social/pastebin-VR2kc7mc-…txt` | SPECULATION | Author explicitly tentative ("I believe"). A native-speaker comment demolishes one of its Hindi glosses. Letters faithful; readings not. |
| Amino-acid translation of the grid (Michael, Cipherbrain #76) | `artifacts/amino-acid-analysis--MERGED.md` **[MIXED]**, 48 KB | SECONDARY | Grid reproduces arithmetically; no meaning extracted. |
| Codon-count grid (hattadone, 4 Apr 2017) | same file; also `recon/chat-logs/_CHANNEL-NOTES.md` | SECONDARY | Reproduces; no meaning. |
| Simulated annealing over the codon hypothesis (Norbert, #117) | `recon/non-english/cipherbrain-german-reader-cryptanalysis-page23.md` **[MIXED]** | SECONDARY | **Explicit negative result** — "keine Lösung gefunden". Valuable: tells you where not to dig. |
| Index-of-Coincidence argument (Thomas #80 / Norbert #81) | same German file | SECONDARY | IoC ≈ 0.065, no doubled letters. A real structural constraint. |
| Selenoprotein / SECIS / AlphaFold reading | `gaps/seed-04-github-bartman081523-tengri137-selenoprotein.md` **[MIXED]**, 119 KB + `gaps/seed-04-files/` | **SPECULATION** (2026 AI-generated) | Its own repo contains a self-falsification document (`stufe27-befund-SELF-FALSIFICATION.md`). Mine its `original_sources/` inventory; do not inherit its conclusions. |
| "Read it as Turkish via Google Translate" | `recon/web-archives/pastebin-BdK6FD4X-…-READER-SPECULATION.txt`; `harvest/088-` | SPECULATION | Author now attributed: Cipherbrain commenter *anniusverus*, 27 Mar 2017. |

### 2.8 The one hard content result — the Turkish acrostic

`gaps/seed-05-old-turkic-orkhon-linguistic-analysis.md` reports, and
`gaps/seed-05-files/verify_acrostic_from_signed_pastebins.py` proves from the two signed pastebins
alone, that the **first 2 or 3 letters of each of the 11 rows** — equivalently the rightmost 2–3
letters of each row of the mirrored edition, read right-to-left — concatenate with **zero leftovers**
to the modern-Turkish latrine-graffiti idiom:

```
BU NU YA ZAN TO SUN OKU YA NA KO SUN   ->   BUNUYAZANTOSUNOKUYANAKOSUN
```

**I ran that script in this pass. It reproduces from both the forward and the reversed signed
editions, and reports `MATCH: True` for both.** I then recomputed the significance myself from the
matrix's own letter frequencies: the probability of that exact 26-gram is **7.838 × 10⁻³¹**, matching
the file's stated ≈ 7.8 × 10⁻³¹ to four significant figures.

Two multiple-comparison corrections appear in this corpus. **Both are arithmetically correct; they
answer different questions, and neither is a look-elsewhere test.** Quote the one you mean:
- × 2¹¹ = **2048** — *all* 2-or-3 prefix patterns (concatenation lengths 22–33) → **1.61 × 10⁻²⁷**;
- × C(11,4) = **330** — only the patterns that yield a **26-letter** string → **2.59 × 10⁻²⁸**
  (the figure used in `SOLVING-BRIEF.md` C12, `OPEN-PROBLEMS.md` §4.11 and `LEDGER.md` F-22).
Both were re-derived in the consistency pass. Still astronomically small either way; the real
look-elsewhere test needs a Turkish lexicon and has never been run (`SOLVING-BRIEF.md` E3).

The same file records two objective Turkic-language tests on the letter stream: the matrix **passes**
Turkic phonotactics (max consonant cluster = 2 over all 154 letters) but **fails** vowel harmony
(significantly *less* harmonic than a random rearrangement of its own vowels). Reading: the text was
engineered to *sound* Turkic, and carries a planted modern-Turkish joke, but is not Turkic prose.
Scripts: `gaps/seed-05-files/harm.py`, `harm2.py`, `null.py`, `stat.py`, `m.py`, `elem.py`.

**Superseded and sharpened by the trained models in `solve/lexicons/` (§11.7), built after this
index was first written.** They add: the matrix scores like **English**, not Turkish, on a validated
char-5-gram (z = −0.07); only 3.74 % of real Turkish sentences are writable in its alphabet; and the
frequently-quoted "all 68 of its syllables are attested Turkish syllables" is **nearly vacuous**,
because Turkish attests 1124 of the 1125 syllables that alphabet can form. The full corrected
account is `SOLVING-BRIEF.md` Part 4a. **Do not cite 68/68 as evidence of Turkishness.**

Adjacent: `gaps/r1-2-turkish-forum-eksisozluk-penetration.md` **[COMMENTARY]** — the Turkish-forum
space (eksisozluk.com) that had bot-walled every earlier fetch, finally penetrated.

---

## 3. THE BOOK ITSELF — 23 pages of primary pixels

### 3.1 The highest-fidelity copy: the author's own signed tarballs

This is the corpus's most under-appreciated asset. **I verified all of this in this pass:**

| file | bytes | what |
|---|---|---|
| `recon/code-hosts/verified-originals/137.tar.gz` + `.asc` | 2,701,349 | `P001.png … P010.png`. Detached signature **GOOD**, signed **2016-08-18 18:51:18 UTC**. |
| `recon/code-hosts/verified-originals/666ab731.tar.gz` + `.asc` | 3,900,613 | `P011.png … P023.png`. Detached signature **GOOD**, signed **2016-08-23 13:59:14 UTC**. |
| `harvest/096-files/137.tar.gz` + `.asc` + `137.txt` | 2,701,349 | Second copy of the first tarball, from the live Dropbox folder. Signature **GOOD** (same timestamp). |
| `gaps/seed-06-files/author-signed-original-pages/P001.png … P023.png` + `SHA256SUMS.txt` | 23 files | **Byte-identical extractions of the two tarballs.** I confirmed by re-extracting the tarballs into scratch and comparing SHA-256 for P001, P017 and P023 — all identical. |

**Why this matters:** the page images in `gaps/seed-06-files/author-signed-original-pages/` are not a
community scan and not a PDF re-render. They are the author's bytes under a good RSA-4096 signature,
and the signing dates independently corroborate the "book published around August 2016" timeline.
**Use these as the pixel ground truth for any glyph dispute.**

### 3.2 The PDF route (Klaus Schmeh's wrapper)

| file | note |
|---|---|
| `recon/book-source/Tengri-137.pdf` and `harvest/Tengri-137.pdf` | Identical: SHA-256 `f77fa0e519c98d6eebce68ed262281076310fba016fe087316858f03d65218f2`, 3,980,980 bytes (**I hashed both; they match**). PDF metadata says author "Schmeh, Klaus", Acrobat PDFMaker 15 for PowerPoint, 2017-01-29 12:55 CET. Canonical host `scienceblogs.de/klausis-krypto-kolumne/files/2017/01/Tengri-137.pdf`. Tier: PRIMARY *pixels* inside a SECONDARY wrapper. |
| `recon/book-source/page-images/tengri137-P01.png … -P23.png` | 23 lossless rasters, 1332 × 1998 RGB, extracted with `pdfimages -png`. **[CIPHER]** |
| `recon/book-source/_smasks/` | 23 per-page soft-masks from the same extraction. Rarely needed. |
| `recon/book-source/Tengri-137-PDF-provenance-and-hashes.md` | **[COMMENTARY]** MD5/SHA1/SHA256 of the PDF and all 23 page PNGs; records that the **original** release was an Imgur set titled "3301" on 2016-08-23, mirrored to the (now dead) Wikia as `P001.png…P023.png`. |
| `recon/book-source/per-page-description-all-23-pages.md` | **[COMMENTARY]** one-line description of each page + layout facts. The fastest way to find which page holds what. |
| `harvest/011-tengri137-book-pdf-23-pages-cipherbrain.md` | **[COMMENTARY]** provenance of the PDF on the blog. |
| `harvest/108-yumpu-flipbook-mirror-alpinbrakisefal.md` | **[COMMENTARY]** a Turkish-uploader Yumpu flip-book mirror of the 23 pages, 2017-03-09. |

---

## 4. PAGES 1–16 — the rune substitution cipher (SOLVED)

| file | grade | tier | contents |
|---|---|---|---|
| `artifacts/pages-1-16-plaintext--MERGED.md` (33 KB) | **[MIXED]** | merged A+B | The authoritative decoded English of P001–P016 **plus the rune→Latin substitution alphabet**. A and B were built from deliberately disjoint channels and agree letter-for-letter and digit-for-digit. |
| `artifacts/pages-1-16-plaintext--A.md` (32 KB) | **[MIXED]** | SECONDARY | Cipherbrain + Wikia + Wayback reconstruction. |
| `artifacts/pages-1-16-plaintext--B.md` (29 KB) | **[MIXED]** | SECONDARY | Independent: Fandom wiki, pastebin `tgsAz11B`, reddit `5xsno3`, plus a direct visual read of `P01.png`. |
| `verify/pages-1-16-plaintext-and-rune-alphabet--VERIFY.md` | **[COMMENTARY]** | ANALYSIS | Adversarial audit. Verdict: payload genuine and byte-faithful, but a **confirmed false provenance claim** about P014. Read before citing provenance from the MERGED. |
| `recon/book-source/pages01-16-runic-alphabet-and-magic-cubes.md` | **[MIXED]** | PRIMARY-derived | The runic script confirmed non-Latin by OCR; the digraph runes (`nd/nt`, `lt/ld`, `ng`); and the **eight magic cubes** — four "666" cubes on P5–P6 verbatim, four Cicada-warning cubes on P16. |
| `recon/blogs-social/pastebin-tgsAz11B-community-translation-pages-1-10.txt` | **[CIPHER]** | SECONDARY (unsigned, NOT by the author) | Community working translation of P001–P010. |
| `harvest/075-community-translation-p001-p010-unsigned.md` | **[MIXED]** | SECONDARY | Annotated copy of the above. |

Substitution quirks recorded (do not "fix" these): A and E share a rune; K stands for H; B stands
for V; P stands for F. Author's own typos are deliberately preserved throughout the corpus —
`Tenri 137`, `RECIEVE`, `KNOWLEDGS`, `UNICUE`, `OURR`, `PRECENT`, `LENGHT OEND`, `INT HE MIDDLE`,
`AMATHEMA`, `THE REARE PEOPLE`, `MEASURMENT`.

---

## 5. PAGES 17–22 — the Tappeiner arithmetic chain (SOLVED)

### 5.1 The raw digits

| file | grade | tier | contents |
|---|---|---|---|
| `artifacts/pages-17-22-raw-arithmetic--MERGED.md` (32 KB) | **[CIPHER]** | PRIMARY | **All 91 printed fractions, digit-for-digit**, in numerator / bar / denominator layout. **I recounted them with a script: P17=16, P18=16, P19=13, P20=19, P21=14, P22=13, total 91.** ✔ |
| `artifacts/pages-17-22-raw-arithmetic--A.md` / `--B.md` | **[CIPHER]** | PRIMARY | The two independent transcriptions that were merged. |
| `recon/book-source/pages17-22-arithmetic-VERBATIM-and-verification.md` | **[MIXED]** | PRIMARY | The same 91 fractions cross-verified against OCR **and** by decoding each to its published plaintext line (61/91 exact, +25 under final-dinome rounding, +5 after fixing wiki typos → 100 % accounted for). |
| `verify/pages-17-22-raw-arithmetic--VERIFY.md` | **[COMMENTARY]** | ANALYSIS | Adversarial audit; digit deliverable stands, one prose discrepancy flagged. |

**Known print error, recorded twice on purpose:** page 19, fraction 2 has its leading `2` typeset in
the **denominator**, joined by an upright `×` unlike the italic `x` used elsewhere. The literal form
decodes to gibberish; the working form moves the `2` into the numerator and yields
`A CALCULATION THAT CAN NOT BE REVIEWED`. Both forms are preserved. **Use the working form to decode;
cite the literal form as the artifact.**

### 5.2 The method and the plaintext

| file | grade | contents |
|---|---|---|
| `artifacts/tappeiner-method--MERGED.md` (64 KB — the largest artifact) | **[MIXED]** | The full method, re-derived from first principles with big-integer long division and an independently built periodic table. Solver identified as Klaus Tappeiner = Reddit u/Adam31415. |
| `artifacts/tappeiner-method--A.md` (41 KB) / `--B.md` (31 KB) | **[MIXED]** | Cipherbrain-based and non-Cipherbrain reconstructions. |
| `verify/tappeiner-method--VERIFY.md` | **[COMMENTARY]** | Adversarial audit: verifier rebuilt the periodic table from scratch and re-derived every load-bearing string. |
| `artifacts/pages-17-22-plaintext--MERGED.md` (19 KB) | **[MIXED]** | The decoded English of pages 17–22, in both the PRIMARY blog form and the SECONDARY wiki form. |
| `artifacts/pages-17-22-plaintext--A.md` / `--B.md` | **[MIXED]** | The two inputs. |
| `verify/pages-17-22-plaintext--VERIFY.md` | **[COMMENTARY]** | Flags one **inverted adjudication** in the MERGED and an open letter-level alternative (`AMATHEMA` vs `A MATHEMATICAL TRUTH`). |

**The canonical worked example** (verified independently by more than one corpus agent, and it is the
cleanest way to learn the rule): `0.43772563877637228063…` → `43 77 25 63 87 76 37 22 80 63` →
Tc Ir Mn Eu Fr Os Rb Ti Hg Eu → `T I M E F O R T H E` = `TIMEFORTHE…`.

**Plaintext lines that matter for the case** (PRIMARY — they are in the book, not later invention):
`THE REWARD IS THE ACCESS TO OUR ETERNAL LIBRARY`,
`NO ONE EXCEPT THE CHOSEN ONE WILL HAVE ACCESS TO OUR DATABASE`,
`UPCOMING TEXTS ARE GENETICALLY ENCRYPTED`,
`WHO HAS THE CORRECT GENETIC CODING WILL UNDERSTAND THIS TEXT`.
The last two are why the genetics/codon line of attack on page 23 exists at all — the *premise* is
primary; no codon *solution* was ever found.

---

## 6. THE AUDIO CHAIN AND THE GATE (March–April 2017) — a SEPARATE thread

### 6.1 The gate drop — `themessage.txt` and `nothingisrandom.txt`

| file | grade | tier | contents |
|---|---|---|---|
| `gaps/seed-01-themessage-body-6448.txt` | **[CIPHER]** | **PRIMARY, authenticated** | **6448 bytes, 6448 letters, alphabet = full 26 A–Z** (I counted). Head `MYVZZJCKTBWKOWUWZOCZMPJHWHFATRZVLFNCLQID`, tail `QXUNYKNBMIHGDQHFZEEQJNBBLGAJDGRLUZMVKAWK`. SHA-256 `50bd9c4424db47e15cc3a543c379b6ec722c8eaed76fbaeef738b0427d4e8e75`. |
| `harvest/026-themessage-6448-RECONSTRUCTED-PGP-VERIFIED.asc` | **[CIPHER]** | **PRIMARY, authenticated** | 7354 bytes. **I ran `gpg --verify`: GOOD signature from `D152D6C5666AB731`, signed 2017-04-02 11:11:28 UTC.** This is the single most important tier upgrade in the corpus — the 6448 letters are proven author-issued bytes, not a community transcription. |
| `recon/web-archives/ARTIFACT-themessage-txt-6448-chars-onion.txt` | **[CIPHER]** | PRIMARY-derived | The same string recovered from a 2017 blog comment, with a full provenance header, the letter-frequency table and every rectangular factorisation of 6448. |
| `gaps/seed-01-nothingisrandom-body-ASCII-DERIVED.txt` and `…-wordpress-rendered.txt` | **[CIPHER]** | PRIMARY-derived | The `nothingisrandom.txt` body in two renderings. Both contain the same **1422-digit** contiguous run (I measured), starting `601010109301050107020303`, ending `040000100001000010000997`. |
| `recon/web-archives/ARTIFACT-nothingisrandom-digit-string-1422.txt` | **[CIPHER]** | PRIMARY-derived | Same digit string with provenance, digit histogram and factorisation. |
| `gaps/seed-01-themessage-and-nothingisrandom-recovery.md` (35 KB) | **[MIXED]** | ANALYSIS | The recovery, the character-exactness proof, the onion directory listing, structural analysis. |
| `gaps/seed-01-imgur-FoIi5-HD9qrYY-onion-page-screenshot.png` | **[CIPHER]** | PRIMARY-derived | A contemporary screenshot of the onion page — the closest thing to seeing the hidden service. |
| `artifacts/themessage-txt--MERGED.md` / `--A.md` / `--B.md` | **[MIXED]** | — | The A/B/merged reconstruction triad. |
| `artifacts/nothingisrandom-txt--MERGED.md` / `--A.md` / `--B.md` | **[MIXED]** | — | Ditto. |
| `verify/themessage.txt raw contents--VERIFY.md`, `verify/nothingisrandom-txt--VERIFY.md` | **[COMMENTARY]** | ANALYSIS | Adversarial audits. Note: the themessage VERIFY predates the signature discovery and **understates** the artifact's tier — §6.1's gpg result supersedes it. |
| `harvest/024-pastebin-5r9baQj5-arecibo-bitmap-23x137.txt`, `harvest/025-pastebin-5r9baQj5-raw.txt` | **[CIPHER]** | SECONDARY | The Arecibo-style bitmap rendering. **I measured it: 137 lines × 23 characters = 3151 cells**, and 3151 = 23 × 137. |
| `harvest/083-nothingisrandom-arecibo-9PA3HMW.png` / `.md` / `-rawpage.html`, `harvest/027-imgur-T5XgwzV-arecibo-annotated.jpg` | **[CIPHER]**/[COMMENTARY] | SECONDARY | The contemporary Arecibo-reading imagery. |
| `harvest/113-nothingisrandom-themessage-dead-pastes.md` | **[COMMENTARY]** | — | Proof that both re-upload pastes (`BcMucDVh`, `u7pFiCpD`) are 404 in every Wayback capture. |

**Asymmetry to remember:** `themessage.txt` is cryptographically authenticated. `nothingisrandom.txt`
is **not** — no signature survives anywhere. Grade it ATTRIBUTED.
Second asymmetry: 6448 ≠ 6439 = 47 × 137, so the seductive "137" factorisation does **not** apply.
6448 = 2⁴ × 13 × 31, admitting grids 2×3224, 4×1612, 8×806, 13×496, 16×403, 26×248, 31×208, 52×124,
62×104. And themessage's alphabet is the **full 26 letters**, unlike the matrix's 19 — they are
different objects.

### 6.2 The audio artifacts

| file | grade | tier | contents |
|---|---|---|---|
| `harvest/058-files/tengri137.mp3` and `recon/code-hosts/verified-originals/tengri137.mp3` | **[CIPHER]** | **PRIMARY, authenticated** | Identical (SHA-256 `b424c155221cd62a5af23d33d68105dac72e0c41311d9ea57cc2901bc63134d7`, **7,864,927 bytes** — I hashed and sized both). Their `.asc` detached signatures **verify GOOD**, signed **2017-03-05 23:33:21 UTC**. The mtime on `harvest/058-files/tengri137.mp3` is preserved as 2017-03-06. |
| `recon/code-hosts/verified-originals/tengri137.mp3.txt`, `harvest/058-files/tengri137.mp3.txt` | **[CIPHER]** | PRIMARY | The clearsigned companion note, "There is a hidden path in front of you…", armor CRC `=QWxa`, signed 2017-03-05 23:00:09 UTC — 33 minutes before the MP3 itself. |
| `recon/audio-files/01_…mp3_hosting-file-metadata-and-signed-note.md` | **[MIXED]** | — | Hosting chain, byte size, the three Dropbox files, the signed note verbatim. |
| `recon/audio-files/02_beeps-wav_instaudio_file-metadata-VERBATIM.md` | **[MIXED]** | PRIMARY-derived | The beep-WAV host page metadata: duration 113,152 ms (1:53.152), 1.73 MB, download name `666ab731.wav`, uploaded 2017-03-05 22:39:26 UTC. **The WAV binary itself is LOST** — S3 404, never archived. |
| `recon/audio-files/03_beeps-wav_OCTAL-TRANSCRIPT-and-letter-table-VERBATIM.md` | **[CIPHER]** | PRIMARY-derived | The full transcript + Norbert's 27-token run-length letter key + plaintext. |
| `recon/web-archives/ARTIFACT-wav-beep-transcript-2994-digits.txt` | **[CIPHER]** | PRIMARY-derived | **The transcript. I recounted it: 59 lines of 50 digits + 1 line of 44 = 2994 digits**, held both as wrapped lines and as one contiguous 2994-character line. **Its alphabet is 0–8, NINE symbols, not octal 0–7** — the file's own header says so and my histogram confirms (0:964, 1:1046, 2:330, 3:312, 4:306, 5:21, 6:3, 7:9, 8:3). Digit *n* = a packet of 16·(n+1) ms. **Anyone treating this as base-8 will be wrong.** |
| `recon/audio-files/04_Ax-block-to-onion-address_VERBATIM-and-decode.md` | **[CIPHER]** | PRIMARY-derived | The 176-character A/x block in two published layouts. **I re-decoded it in this pass**: the mapping is **`A` = bit 0, `x` = bit 1** (counter-intuitive — do not assume A=1), 176 bits → 22 bytes → hex `36 36 36 36 36 36 6d 37 78 36 78 35 72 65 67 63 2e 6f 6e 69 6f 6e` → **`666666m7x6x5regc.onion`**. Byte-exact. |
| `recon/audio-files/05_cipherbrain-comments_audio-thread-VERBATIM.md`, `06_spectrogram-images_inventory-and-status.md`, `07_reddit-5zisip_…VERBATIM.md` | **[MIXED]** | SECONDARY | The solving thread, the image inventory, the discovery thread. |
| `harvest/060-cipherbrain-tengri-mp3-spectrogram-instaudio-url.md`, `harvest/061-norbert-waveform-beeps.md` + `.png`, `harvest/057-`, `harvest/091-instaudio-…` | **[MIXED]** | SECONDARY | Spectrogram screenshot, the waveform showing the packets, the instaud.io host pages. |
| `artifacts/mp3-spectrogram--{A,B,MERGED}.md`, `artifacts/wav-octal--{A,B,MERGED}.md`, `artifacts/onion-derivation--{A,B,MERGED}.md` | **[MIXED]** | — | The three A/B/merged triads for this thread. |
| `verify/mp3-spectrogram--MERGED--VERIFY.md`, `verify/wav-octal-transcription--VERIFY.md`, `verify/onion-derivation--MERGED--VERIFY.md` | **[COMMENTARY]** | ANALYSIS | Adversarial audits; all three conclude the cipher payloads are byte-perfect. |
| `recon/code-hosts/spectrogram-octal-onion-DERIVATION-INDEPENDENTLY-VERIFIED.md` | **[MIXED]** | ANALYSIS | A fourth independent re-derivation of the same chain. |

**"LITTLE BIRD" vs "LITTLE MIND" — settle this before quoting it.** The raw octal decode gives
**MIND**. `BIRD` is a *community emendation* proposed by commenter Alex (#57, 16 Mar 2017) on the
grounds that it fits "END END END" and Twitter's bird logo; Norbert (#59) agreed; Schmeh adopted BIRD
in his 30 March article. Both readings are preserved in the corpus. Also note the spectrogram itself
contained a **URL** (`instaud.io/private/7fa2c325…`), not the sentence — the sentence came out of the
beep decode. See `recon/cipherbrain-articles/_CHANNEL-NOTES.md` §4.4 and `recon/audio-files/_CHANNEL-NOTES.md`.

**`regc` is still unexplained.** `666666m7x6x5` is accounted for (666666 mod (7·6·5) = 126, the missing
magic number). One contemporary reader pointed at `github.com/lachesis/scallion`, i.e. a vanity
generator, which would make `regc` arbitrary padding. Unresolved.

**A second onion name exists and is a trap:** `nothingwasrandom.onion`, in the PGP-signed
"WE OPEN THE SECOND GATE" paste (`GJ7Gqhws`, 2017-04-12). It is **not** a valid v2 address (v2
requires 16 base32 characters) — it is rhetoric, not a reachable host. Files:
`harvest/041-we-open-the-second-gate-pgp-signed.md`, `verify/scratch/pgp/blocks/0486_GJ7Gqhws_clearsigned.asc`.

---

## 7. AUTHOR IDENTITY AND THE CRYPTOGRAPHIC BACKBONE

**This is the sharpest instrument in the whole corpus.** It is what separates authentic Tengri 137
material from impostor and later-era noise.

### 7.1 The key

```
pub   rsa4096/0xD152D6C5666AB731  created 2016-04-24 11:05:11 UTC  [SCE]
      Key fingerprint = 2A2C 0AD4 ED1C AD83 53A3  0056 D152 D6C5 666A B731
uid   Tengri 137
uid   Tengri (137)
```

| file | note |
|---|---|
| `harvest/037-tengri137-pubkey-0x666AB731-ubuntu-keyserver.asc` (5994 B) | The fullest armored copy, from keyserver.ubuntu.com. **This is the file to import.** SHA-256 `bdfc87d0a46ffc2a342af074cdb2dfc210ea79fb363d4a37a02880ba50d52ded`. |
| `harvest/key_ubuntu_666ab731.asc`, `harvest/.raw-tengri137-pubkey-666AB731.asc` | Identical copies (5994 B each). |
| `recon/pgp-crypto/key_ubuntu_666ab731.asc`, `key_openpgporg_666ab731.asc`, `github_verifier_embedded_key.asc` | Three keyservers/sources, all the same fingerprint. `keys.openpgp.org` copy is stripped. `pgp.mit.edu` is defunct. |
| `recon/code-hosts/tengri137-PGP-PUBLIC-KEY-D152D6C5666AB731.asc`, `recon/code-hosts/verified-originals/tengri137-key-keyserver.ubuntu.com-with-3rd-party-sigs.asc` | Copy carrying the four third-party certifications. |
| `tmp_key.asc` (root, 854 B) | A stray truncated working copy left at the corpus root. **Do not use it** — use `harvest/037-…asc`. |

Four third-party certifications exist (`0x040484988228DD98` 2017-05-03, `0xA49BDCD5BC224010`
2017-05-07, `0xD2FBEC71DB65A36D` 2017-05-27, `0x6966D8E21ACC064F` 2017-11-23). They are community
members certifying the key; they say nothing about who the author is.

### 7.2 The signature census — `gaps/seed-00-pgp-signature-verification.md` (27 KB) **[MIXED]**

The most rigorous single document in the corpus. It walked all corpus files with a custom armor
extractor (handling markdown `>` quoting, JSON string values and HTML entity-unescaping),
deduplicated to **45 unique armored blocks**, and ran `gpg --verify` / `--list-packets` on each.
Raw machine log: `gaps/seed-00-pgp-files/gpg-verify-full-log.txt` (248 lines, unedited).

**19 clearsigned author messages verify GOOD**, plus **4 detached signatures over binaries**
(23 in total — see `LEDGER.md` F-02 for the full 19-row clearsigned table with UTC timestamps).
I spot-re-verified **14 of them myself in this pass** (10 clearsigned + 4 detached) against
`harvest/037-…asc` in an isolated `GNUPGHOME`, and every one returned
`Good signature from "Tengri 137"`:

| artifact | signed (local time as gpg printed it) | file I verified |
|---|---|---|
| identity / key announcement `fvRGu37W` | 2016-05-14 11:06:52 CEST | `recon/pgp-crypto/pastebin_identity_fvRGu37W.txt` |
| paraportal.org German announcement | 2016-09-16 11:25:13 CEST | `gaps/seed-00-pgp-files/paraportal-2016-09-16-GERMAN-RECONSTRUCTED-VERIFIED.asc` |
| `137.tar.gz` (P001–P010) | 2016-08-18 20:51:18 CEST | `recon/code-hosts/verified-originals/137.tar.gz.asc` |
| `666ab731.tar.gz` (P011–P023) | 2016-08-23 15:59:14 CEST | `recon/code-hosts/verified-originals/666ab731.tar.gz.asc` |
| `tengri137.mp3` | 2017-03-06 00:33:21 CET | `recon/code-hosts/verified-originals/tengri137.mp3.asc` (and the `harvest/058-files` copy) |
| **forward matrix `FAJNLpLZ`** | **2017-03-12 10:47:24 CET** | `harvest/020-pastebin-FAJNLpLZ-raw.txt` |
| Genesis 36:24 paste `fBNFWhNf` | 2017-03-27 13:10:23 CEST | `gaps/seed-00-pgp-files/pastebin-fBNFWhNf-raw.txt` |
| **reversed matrix `YUPZsz9n`** | **2017-03-29 20:58:59 CEST** | `recon/code-hosts/verified-originals/pastebin-raw/pastebin_YUPZsz9n_raw.txt` |
| **`themessage.txt`, all 6448 letters** | **2017-04-02 13:11:28 CEST** | `harvest/026-themessage-6448-RECONSTRUCTED-PGP-VERIFIED.asc` |
| "the gate is open" + onion `P59Kf0cs` | 2017-04-02 21:48:00 CEST | `recon/pgp-crypto/pastebin_gate-is-open_P59Kf0cs.txt` |
| "We are Tengri and we are real" `LNsb3n4G` | 2017-04-08 20:02:44 CEST | `gaps/seed-00-pgp-files/pastebin-LNsb3n4G-raw.txt` |
| "You can judge Tengri?" `ngWyJhDy` | 2017-08-02 14:05:10 CEST | `gaps/seed-00-pgp-files/pastebin-ngWyJhDy-raw.txt` |
| `rendezvous.png` | 2017-11-22 00:35:37 CET | `recon/code-hosts/verified-originals/rendezvous.png.asc` |
| "I am the method." `Xxx3ypsK` | 2018-01-25 20:40:25 CET | `gaps/seed-00-pgp-files/pastebin-Xxx3ypsK-raw.txt` |

**The signing dates in the case brief are confirmed to the second:** forward matrix
2017-03-12 09:47:24 UTC, reversed matrix 2017-03-29 18:58:59 UTC.

Two behavioural findings from the census worth carrying forward:
1. **Three messages — and only three — were signed with APG v1.1.1 / SHA-512** (`d2qAQgBD` 2017-04-04
   "Stop bullying Defango", `LNsb3n4G` 2017-04-08, `98DZzeYr` 2018-01-20). APG is *Android Privacy
   Guard*. Everything else is desktop GnuPG v2 / SHA-256. Same private key, at least three
   environments, and the mobile ones cluster in the emotionally reactive messages.
2. **`5kQsJtRE` verifies BAD, and that is informative, not damning.** Its signature armor is
   **byte-identical** to the good one over the full 6448-letter message; its *body* is truncated to
   404 letters. So it is a truncation, not a forgery. Verified live: still 1336 bytes, still BAD.
   Same for `CJsN0KWL` (I re-ran it: BAD).

### 7.3 The author's own signed publications, as raw bytes

| location | contents |
|---|---|
| `recon/code-hosts/verified-originals/pastebin-raw/` (8 files) | `FAJNLpLZ`, `YUPZsz9n`, `X0pJtqfD`, `YmrA3rDS`, `98DZzeYr`, `a1nqC79N`, plus the unsigned community pastes `BdK6FD4X` and `tgsAz11B`. **[CIPHER]** |
| `recon/twitter-account/pastebins-linked-from-tweets/` (10 files) | Every paste the account ever linked, byte-exact, each with a provenance header. **[CIPHER]** |
| `recon/pgp-crypto/pastebin_*.txt` (5 files) | Identity, forward matrix, gate/onion, the ruled-out `khQff3xV`, and the CCR5 answer `JpbgD7Yh`. **[CIPHER]** |
| `gaps/seed-00-pgp-files/pastebin-*-raw.txt` (6 files) | `CJsN0KWL`, `LNsb3n4G`, `Xxx3ypsK`, `c4cQG6Z2`, `fBNFWhNf`, `ngWyJhDy` — the newly-found pastes the earlier passes had missed. **[CIPHER]** |
| `recon/cipherbrain-comments/linked-artifacts/` (5 files) | The pastes linked from blog comments. **[CIPHER]** |
| `verify/scratch/pgp/blocks/`, `blocksA/`, `blocksB/` (19 + 14 + 17 files) | Every armored block mechanically extracted from the corpus, named `NNNN_<pasteid>_clearsigned.asc`. **This is the fastest way to grab any single signed message in isolation.** **[CIPHER]** |
| `recon/code-hosts/pastebin-ALL-SIGNED-TENGRI-MESSAGES-verbatim.md` | One consolidated verbatim file of all signed messages. **[MIXED]** |
| `harvest/037` – `harvest/044` (8 `.md` files) | Per-message annotated harvest copies: "only one step until the ultimate proof", "no one found the hint / rendezvous137", "you found the searched 137", key announcement, "we open the second gate", "stop bullying Defango", the riddle poem "Just, in sun", the imgur pointer paste with the full fingerprint. **[MIXED]** |
| `recon/pgp-crypto/01_…08_….md` (8 files) | The narrative PGP channel: key, three verified messages, the two unsigned gate files, the ruled-out foreign key, the CCR5 paste, the fan verifier repo. **[MIXED]** |
| `artifacts/pgp-artifacts--MERGED.md` (48 KB) + `--A.md` + `--B.md` | The A/B/merged triad. MERGED is 1022 lines and is the most complete narrative. **[MIXED]** |
| `verify/pgp-artifacts--VERIFY.md` | Adversarial audit; found one wrong timestamp on a **ruled-out foreign** key, nothing wrong on any Tengri artifact. **[COMMENTARY]** |

**Explicitly ruled out — do not let these into the evidence set:**
- `harvest/090-non-tengri-pgp-paste-khQff3xV.md` + `recon/pgp-crypto/06_NON-tengri_paste_khQff3xV.md`:
  signed by `0x950F7FD7DE0923E6` (created 2011), **not Tengri**.
- `harvest/030-r-tengri137-61tbtu-ky2khl-pgp-3301-red-herring.md`: a Cicada-3301-flavoured onion PGP
  message, red herring.
- `harvest/115-tmmac-thread-33096-…` / `recon/forums/tmmac-33096-…-NEGATIVE.md`: false-positive thread.

### 7.4 The fan-made verifier

`recon/pgp-crypto/08_github_verifier_repo.md`, `github_verifier_index.html`,
`github_verifier_script.js`; `harvest/049-tengri137-signature-verifier-repo.md`;
`harvest/093-reddit-63igqv-…`; `recon/code-hosts/github-tengri137.github.io-signature-verifier.md`.
Its README states the authors are "not affiliated with Tengri 137". Its embedded key is genuine.

---

## 8. THE AUTHOR'S OWN WORDS AND CHANNELS

| file | grade | contents |
|---|---|---|
| `artifacts/author-statements--MERGED.md` (32 KB) | **[MIXED]** | **Every statement the author made about page 23 and how it is meant to be solved**, verbatim, tier-tagged, with all four clearsigned pastes cryptographically verified during the merge. **If you want to know what the author actually told solvers, start here.** |
| `artifacts/author-statements--A.md` / `--B.md` | **[MIXED]** | Cipherbrain-channel and independent-channel reconstructions. |
| `verify/author-statements-page23-and-how-to-solve--VERIFY.md` | **[COMMENTARY]** | Adversarial audit. Its one substantive catch: the MERGED asserted "pure reversal" without caveating row 10. |
| `recon/twitter-account/666ab731-full-timeline-verbatim.md` (37 KB) | **[MIXED]** | **90 tweets** by @666ab731, oldest→newest, verbatim, with IDs, UTC timestamps, reply parents, counts and media URLs. |
| `recon/twitter-account/status-id-timestamp-index.txt` | **[CIPHER]** | 322 lines: every discovered status ID with a snowflake-decoded UTC timestamp. |
| `recon/twitter-account/wayback-cdx-inventory.txt` | **[CIPHER]** | 381 lines of raw Wayback CDX across `twitter.com`, `x.com`, `mobile.twitter.com`. |
| `recon/twitter-account/outbound-links-and-redirect-resolutions.md` | **[MIXED]** | Every outbound URL with live redirect resolutions for all seven bit.ly links. |
| `recon/twitter-account/account-profile-metadata-over-time.md` | **[COMMENTARY]** | Bio changes across archive captures. |
| `harvest/045-twitter-syndication-848626100393693184-gate-is-open.md`, `046-wayback-cdx-index-666ab731.md`, `047-twitter-profile-666ab731-20170401.md`, `048-…-2017-06-23.md`, `raw_047_profile.html` | **[MIXED]** | Individual tweet/profile captures. |
| `harvest/020-reddit-5zdvlq-tweet-screenshot.png` | **[CIPHER]** | Screenshot of the Pi-Day tweet. |

**Short links, resolved live (from `recon/blogs-social/_CHANNEL-NOTES.md`):**
```
bit.ly/2bFjsQO            -> dropbox.com/sh/pt11xdtnr8pk1up/AABPtwX9lXW8JWMLD9jQn9ZZa?dl=0
bit.ly/2bMuGEv            -> dropbox.com/sh/rqchf150ucb4akg/AACgZhMQbxeMZvqCTaQsaj8pa?dl=0
bit.ly/2mUF7Xy            -> dropbox.com/sh/5h85rnq6ik6jz2x/AAAujk3V7EhNx0CfN1sgZAala?dl=0
bit.ly/timetosharenow     -> dropbox.com/sh/evukdbz3cqbesiv/AAAj24GREGfFfDB5xjVOyVcWa?dl=0
bit.ly/rendezvous137      -> dropbox.com/sh/hetnigj96mih66u/AADKejS_DHQLKOHY2ROliTk1a?dl=0
bit.ly/timeforthenextstep -> itsalmo.st/#timeforthenextstep
```

---

## 9. THE CONTEMPORARY COMMUNITY RECORD (SECONDARY, but where the solving actually happened)

### 9.1 Cipherbrain / Klausis Krypto Kolumne — the de-facto solver chat

Exactly **four** Tengri articles were ever published (established by four independent enumeration
routes: tag archive, category archive, exhaustive on-site search, Wayback CDX sweep of 35 URLs).

| file | contents |
|---|---|
| `recon/cipherbrain-articles/2017-01-29_tengri-137-who-can-solve-this-encrypted-book.md` | Article 1. |
| `recon/cipherbrain-articles/2017-03-08_how-a-blog-reader-solved-the-tengri-137-mystery.md` | Article 2 — **contains the full cleartext of pages 17–22 and the worked `TIMEFORTHE` example.** **[MIXED]** |
| `recon/cipherbrain-articles/2017-03-18_tengri-137-second-challenge-solved.md` | Article 3 — **contains the 2994-digit octal transcript, the 27-symbol key and the hex→onion bytes.** **[MIXED]** |
| `recon/cipherbrain-articles/2017-03-30_tengri-137-has-posted-again.md` | Article 4 — **contains both letter matrices.** **[MIXED]** |
| `recon/cipherbrain-articles/_linked-artifact_pgp-signed-message_2017-03-29_pastebin-YUPZsz9n.asc` | The reversed matrix with its full signature block. **[CIPHER]** |
| `recon/cipherbrain-articles/_outbound-links-and-artifact-status.md`, `_peripheral-mentions-2017-2022.md` | **[COMMENTARY]** Link status; three later posts with passing mentions. |
| `recon/cipherbrain-comments/*.md` + matching `.raw.html` (14 files) | **All 208 comments** across the four posts (30 / 151 / 8 / 19), verbatim with WordPress comment IDs, plus the raw HTML they were extracted from. **[MIXED]** |
| `recon/cipherbrain-comments/_KEY-RAW-ARTIFACTS-INDEX.md` (1175 lines) | **Consolidated index of every raw string in the comment threads.** **[MIXED]** — a very high-value entry point. |
| `recon/chat-logs/cipherbrain-comments-2017-{01-29,03-08,03-30}-*.md` | A second, independently produced capture of three of the four threads. Useful as a cross-check. |
| `recon/web-archives/blog-scienceblogs-2017-*-ALLCOMMENTS.txt` (4 files) | Wayback `id_` raw captures of all four posts with comments. **[MIXED]** |
| `harvest/000` – `harvest/010`, `harvest/070`, `harvest/081`, `harvest/098` – `harvest/100` | Annotated harvest copies of the articles, the 151-comment thread, the Red Triangle article, the op011 article, the Golden Alice Awards. |
| `verify/evidence/cipherbrain-cap-201704{04175657,05185353}.html` | Two contemporary raw page captures kept as evidence. |

> **PAGINATION TRAP — read before re-fetching anything from this blog.** Three of the four articles
> are split across sub-pages by the ScienceBlogs theme. A naive fetch of the article URL silently
> returns only the first portion and *looks complete*. **Always append `?all=1`.** Without it you lose
> the onion address, the periodic-table explanation and the second letter matrix.

### 9.2 r/tengri137 — `recon/reddit/` (271 files)

The single richest running-commentary source. Retrieved via `api.pullpush.io` (Pushshift successor);
every `.md` is generated programmatically from raw JSON, so bodies are byte-exact.

**Counts I verified from the index file itself:** **265 submissions** (table has exactly 265 data
rows), **1762 comment objects** (the per-thread comment counts sum to 1762 exactly), of which
**242 submissions are from 2017** (then 10 in 2018, 4 in 2019, 3 in 2020, 1 in 2021, 1 in 2023,
2 in 2024, 2 in 2025).

| file | why |
|---|---|
| `recon/reddit/_KEY-ARTIFACTS-verbatim.md` (903 lines) | **START HERE for reddit.** The 16 load-bearing raw artifacts, byte-for-byte from the API JSON, each with provenance and tier: both matrix orientations, the dinome grid, the 11 repeating-decimal strings, the Pi-Day signed message, the beep decode + A/x binary, the gate ciphertext + signature, the 3151 bitmap, the Arecibo walkthrough, the 62 two-letter groups, the page-11 "Eternal Library" text, an nmap probe. **[CIPHER]** |
| `recon/reddit/_INDEX-r-tengri137-all-submissions.md` | The full 265-row table: date, id, author, comment count, title, filename. **[COMMENTARY]** |
| `recon/reddit/_CHANNEL-NOTES.md` | Method, coverage, what is irrecoverable. 128 comments (7.3 %) survive only as `[removed]`/`[deleted]` tombstones. **[COMMENTARY]** |
| `recon/reddit/_CROSS-SUBREDDIT-sweep.md` | Threads seeded outside r/tengri137 — r/cicada, r/cryptography, r/crypto, r/riddles, r/ARG, r/C_S_T, r/holofractal, r/conspiracy. Earliest: r/cicada `4zi96y`, 2016-08-25 (now `[removed]`). **[COMMENTARY]** |
| `recon/reddit/_EXTERNAL-LINK-MANIFEST.md` | Every outbound link, including the **separate** "sevens.exposed"/Defango audio rabbit hole (`LadenWithConsumption.wav`, `DeepSound.wav`, `TheFluddApproaches.wav`, `QueenMary.wav`, `AManifesto.wav`, `repeatthepast.wav`, `32617is667.wav`, `FinalDogsofWar.mp3`, `AMessageOfHope.wav`). **That is a DIFFERENT puzzle line of contested authenticity — do not merge it into the Tengri audio chain.** **[COMMENTARY]** |
| `recon/reddit/r-tengri137-<id>-<slug>.md` (266 files, 265 distinct thread IDs) | One file per submission, body + all comment objects verbatim. **[MIXED]** |

**Highest-value individual threads:** `5xsno3` (complete translation p1–23, the flagship — carries the
page-23 matrix and is corroborated byte-identically against Wayback), `5zisip` (spectrogram discovery,
u/NimrodX0), `5zdvlq` (the Pi-Day signed message), `62a2t1` (**page-23 line-9 resolution to
`NAFERANSAHOTFE`**), `635buu` (the 3151/Arecibo digit string), `63x2es` (the gate ciphertext),
`6460va` (themessage.txt Hill-cipher attempt), `61la3e` ("Regarding page 23", later user-deleted),
`5wsgjw` (page-23 DNA/RNA nucleotides), `5wf3ft` (u/defango's independent page-17 working).

`recon/chat-logs/` (7 files) is a small sibling channel whose headline finding is worth knowing:
**there is no Discord/IRC/Telegram/Matrix log for Tengri 137 anywhere.** The subreddit sidebar
designated a **TorChat** contact — `torchat: 666666m7x6x5regc`, the same string as the onion. TorChat
is P2P with no server-side logs, so those conversations do not survive. It also traces every
"Discord-era" claim to its earliest appearance: **KIWI, GARLIC, `rjzdqt4z3z3xo73h.onion`, IPv6
addresses and `tengri137@torbox3uiot6wchz.onion` are UNTRACEABLE — zero contemporary basis found.**
Meanwhile "Eternal Library" is **PRIMARY** — it is a line in the book itself.

### 9.3 The Tengri 137 Wikia / Fandom (deleted site, fully recovered)

`recon/fandom-wiki/` (11 files). MediaWiki 1.19.24 on Wikia, `cityId=1464015`, main article
`articleId=119`; sole visible editor signed `137solver…`. Deleted between 2020-01-03 and 2022-05-19;
`api.php` now 404s. All five articles were archived while alive and are recovered.

| file | contents |
|---|---|
| `tengri137-wikia_Tengri-137-Translation_2017-09-29.md` | **The single richest community artifact in the case:** complete transcription of the book, all seven pages of prime-factor calculations, and the page-23 matrix. **[CIPHER]** |
| `…_EARLIER-REVISION_2017-03-22.md`, `…_PRE-SOLUTION_2017-01-09.md` | Earlier revisions — useful for seeing what was known when. **[MIXED]** |
| `PAGE-23-MATRIX_both-orientations_VERBATIM.md` | Both orientations isolated. **[CIPHER]** |
| `tengri137-wikia_Twitter-message-2017_2017-04-03.md` | The second-challenge page — carries the octal transcript. Only one successful Wayback capture exists of it. **[CIPHER]** |
| `tengri137-wikia_Main-page_…md`, `_Quickstart_2017-01-08.md`, `_For-beginners_2017-01-09.md` | Orientation pages, incl. the rune-substitution rules. **[MIXED]** |
| `tengri137-fandom_Translation-comments_2017-04_to_2019-06_PARTIAL.md` | The article comment thread. **[MIXED]** |
| `EXTERNAL-ARTIFACT-POINTERS_from-wiki.md` | Every outbound artifact pointer the wiki carried. **[COMMENTARY]** |
| `recon/web-archives/wikia-*.txt` (3 files) | Independent Wayback raw captures of the same pages. **[MIXED]** |
| `harvest/012` – `harvest/018`, `harvest/062`, `harvest/080`, `harvest/082`, `harvest/092`, `harvest/102` | Harvest copies incl. pre-flip (`oldid=353`) and post-flip (rev 634) revisions of the Translation page, and the deletion proof. |

### 9.4 Forums

`recon/forums/` (11 files). Headline: **AboveTopSecret thread1166663**, where member
`SonOfTheLawOfOne` posted on 31 March 2017 the complete page-23 matrix plus his atomic-number scratch
pad, a vowel/consonant binary grid, and a large verbatim block of the page 17–22 plaintext.
**ATS thread1165683** carries high-precision π⁷ decimal expansions and a fully worked
dinome → element → first-letter decode yielding `TIME FOR THE TRUTH`.

- `recon/forums/_RAW-ARTIFACTS-from-forums.md` (320 lines) — **the consolidated, deduplicated index of
  every raw string from the forums.** **[CIPHER]** Start here.
- `abovetopsecret-thread1166663-pg{1,2,3}.md`, `abovetopsecret-thread1165683-pg{1,2,3}.md` — **[MIXED]**
- `projectavalon-t96975-…md`, `rogue-nation3-tid3117-…md` — SECONDARY, low value.
- `tmmac-33096-…-NEGATIVE.md` — a documented false positive. Keep it filed as negative evidence.
- Harvest copies: `harvest/034`, `035`, `036`, `085`, `094`, `095`, `103`, `104`, `114`, `115` + three
  `*-SOURCE-RAW.html`.
- `recon/chat-logs/abovetopsecret-debunk-thread-pg1.md` — a second capture of the debunk thread.

### 9.5 Blogs, Steemit/Hive, video

`recon/blogs-social/` (69 files) and `recon/video-media/` (61 files).

**The important discovery in blogs-social was not a blog post** — it was that eight original Tengri
pastebins are still live on the clear web and were fetched raw by following links out of 2017 Steemit
posts. Those are catalogued in §7.3.

| item | grade | note |
|---|---|---|
| `hive-2017-04-08-fortified-tengri-137-your-faith-will-weaken-you.md` | **[CIPHER]** | The single richest blog post: the Job 15:2 rune translation, four @666ab731 tweet IDs with exact UTC times, **both matrix orientations**, and **the full octal beep transcript plus the 27-symbol letter mapping**. Promised Parts 2 and 3 were never published. |
| `blogspot-tengri137page23solution-FULL-post-and-all-comments.md` | **[MIXED]** | The DNA base-pairing page-23 reading, captured via Blogger's JSON feed (the rendered page *truncates* the post — an HTML scrape would have silently lost most of it). Exactly one post and six comments; that is the whole blog. |
| `pastebin-VR2kc7mc-page23-blogspot-author-clean-copy.txt` | **[CIPHER]** | The blogspot author's own clean copy. |
| The **@mes / MathEasySolutions 8-part series** (2017-06-29 → 2017-07-07) — short posts + long "video notes", plus 2018 DTube and 2023 3Speak re-uploads; all three generations captured in `recon/blogs-social/` and `recon/video-media/hive-mes-*.txt` | **[MIXED]** | **The strongest sceptical material in the corpus.** MES concludes the Tengri cubes are *not* magic cubes (triagonals fail), are trivially replicable by Gauss-Jordan elimination, and that the page-15 "calculation of their name" is easily manufactured by dividing by repunits. Covers the MATH pages only — **not** page 23. |
| `blog-phoenix-1111-tengri137-manifesto-2017-05-31.md` | **[COMMENTARY]** | Written in the first person as Tengri 137 and signed "Tengri 137" — but **carries no PGP signature**, unlike every confirmed publication. Authorship **UNVERIFIED**. |
| `blog-decodingsatan-…`, `blog-markdclarkusa-{wordpress,weebly}-…`, `blog-freetofindtruth-…`, `blog-thephaser-…`, `blog-medium-makkerc-…` | **[COMMENTARY]** | Video-embed reposts with no original analysis. The finding here is the *absence* of independent blog analysis. |
| `recon/video-media/youtube-*.txt` (7 files) | **[COMMENTARY]** | MES series inventory; Pavana's "A talk with Tengri137" (2017-05-03); Wonder Boy's 3-part "Hidden Path"; Sub Zero's 2026 recap; the empty @tengri1378 channel. |
| `recon/video-media/hive-COMMENT-THREADS-mes-defango.txt` | **[MIXED]** | Includes a @twitterbot quoting the **actual April 2017 tweet exchange** between @666ab731, @MathEasySolns and @defango. |
| `recon/blogs-social/github-bartman081523-QUELLEN_INDEX-source-inventory-german.md` | **[COMMENTARY]** | German source inventory. SPECULATION as analysis, but a genuinely useful *map* of where artifacts live. |

Harvest counterparts: `harvest/064` – `067`, `071` – `078`, `084`, `087` – `089`, `096` – `098`,
`105` – `111`, `116` – `118`.

### 9.6 Non-English

`recon/non-english/` (3 files). Headline: outside English there is essentially no independent corpus.
The only genuinely non-English primary material is:

- `cipherbrain-german-reader-cryptanalysis-page23.md` **[CIPHER]** — 47 verbatim **German** comments
  (13–30 March 2017) containing: Norbert's codon-triplet split of the matrix
  (`BUR UMU TRE FAM TUB URU MUT REF AMT UBU RUM UTR EFA MTU`); commenter Klaus's **raw 28-digit
  intermediate period strings** for the page-17–22 fractions; Steve's amino-acid row; kud gt's
  letter-frequency table confirming the absent letters `C D J Q V W X`; the IoC argument; and
  **Norbert's explicit negative result** on simulated annealing.
- `turkish-material-index-and-page23-matrix.md` **[MIXED]** — Yumpu mirror provenance and the matrix
  plus the Turkish reading attempt.

---

## 10. POST-2017 ACTIVITY, LATER CHALLENGES, AND CLAIMED SOLUTIONS

| file | grade | contents |
|---|---|---|
| `artifacts/later-activity--MERGED.md` (54 KB, 969 lines) | **[MIXED]** | The authoritative record of everything after March 2017: the November 2017 "rendezvous137" wave, the Kolams puzzle, the Red Triangle offshoot, the 2018–2019 pastes, the 2022 and 2025–2026 tweets, and every claimed page-23 solution with its status. |
| `artifacts/later-activity--A.md` (35 KB) / `--B.md` (45 KB) | **[MIXED]** | The two independent reconstructions. |
| `verify/later-activity--VERIFY.md` | **[COMMENTARY]** | Adversarial audit; no fabricated material found; three metadata inaccuracies flagged. |
| `recon/code-hosts/verified-originals/rendezvous.png` + `.asc` | **[CIPHER]** | **PRIMARY, authenticated** — the November 2017 image, detached signature GOOD, signed 2017-11-22 00:35:37 CET. |
| `harvest/051-bitcoin-inscription-block-469177.md` + `051-…-indexer-0469-raw.txt` | **[MIXED]** | A Bitcoin blockchain inscription (block 469177) tagging `#tengri137 #defango #666ab731`. |
| `harvest/107-archive-org-tengri-137-decoded-apk.md`, `harvest/079-expired-domain-list-tengri137-com.md` | **[COMMENTARY]** | Later ephemera. |
| `harvest/042-stop-bullying-defango-pgp-denial.md` | **[MIXED]** | The author's signed denial that Defango is Tengri 137. |
| `recon/blogs-social/hive-*defango*`, `recon/video-media/hive-defango-*` | **[COMMENTARY]** | The Defango / Red Triangle / Cicada-3301 offshoot. **SPECULATION tier and a different puzzle line.** |
| `gaps/seed-04-github-bartman081523-tengri137-selenoprotein.md` (119 KB) + `gaps/seed-04-files/` (23 files) | **[MIXED]** | Full capture of a **2026** AI-generated analysis repo (229 commits, all by a synthetic identity `PhiMind Investigator`, 0 stars, 0 forks). **SPLIT tier:** its `original_sources/` is a PRIMARY mirror; everything else is SPECULATION. Includes its own `stufe27-befund-SELF-FALSIFICATION.md`, the BLAST input FASTA, the EBI BLAST output, the Moltbook post/comment JSON, the verbatim 229-commit log, and a script named `v105_wort9_patch-WRONG-CELL.py` — the filename is itself the finding. |

---

## 11. THE AUDIT LAYER — how this corpus was built and checked

This is the corpus's methodological spine and is worth understanding before you trust any file.

### 11.1 `artifacts/` (42 files) — the A / B / MERGED triads

Fourteen artifact keys, each reconstructed **twice, from deliberately disjoint channel sets**, then
merged with a character-by-character diff:

`amino-acid-analysis`, `author-statements`, `later-activity`, `mp3-spectrogram`,
`nothingisrandom-txt`, `onion-derivation`, `page23-matrix`, `pages-1-16-plaintext`,
`pages-17-22-plaintext`, `pages-17-22-raw-arithmetic`, `pgp-artifacts`, `tappeiner-method`,
`themessage-txt`, `wav-octal`.

- **Strategy A** = the contemporary primary record, spined on Klaus Schmeh's Cipherbrain articles and
  comment threads plus the Wikia.
- **Strategy B** = deliberately **non-Cipherbrain**: Reddit via pullpush, Fandom, pastebin `/raw/`,
  GitHub, Dropbox, Blogger JSON feeds, Twitter syndication, Wayback CDX.
- **MERGED** = the adjudicated record, with a VARIANTS section listing every A-vs-B disagreement and
  how it was resolved.

**Read the MERGED for the answer; read A and B when you need to know whether two independent channels
really agree.** Largest: `tappeiner-method--MERGED.md` (64 KB, 1203 lines). Smallest:
`mp3-spectrogram--A.md` (13 KB).

### 11.2 `verify/` (101 files) — the adversarial audits

Fourteen `*--VERIFY.md` files, one per artifact key, written by a verifier whose explicit posture was
**"attempt to refute"**. Every one returns `agrees = false`, because the rule was *any* discrepancy
however small forces non-agreement. **Do not misread that as failure.** Read each verdict paragraph:
in every case the finding is that the **cipher-bearing payload is byte-perfect and reproduces**, and
the flagged discrepancies are in provenance prose, labelling, whitespace or attribution.

The genuinely substantive catches, worth carrying forward:
- `pages-1-16-…--VERIFY.md`: a **confirmed false provenance claim** about page 14.
- `pages-17-22-plaintext--VERIFY.md`: an **inverted adjudication** in the MERGED.
- `author-statements-…--VERIFY.md`: an uncaveated "pure reversal" claim that is false for row 10.
- `pgp-artifacts--VERIFY.md`: one wrong signature timestamp — on a **ruled-out foreign** key.
- `themessage.txt raw contents--VERIFY.md`: its provenance narrative *understates* how well-sourced
  the string is, and it has since been **superseded** by the signature discovery in §6.1.

Supporting: `verify/evidence/` (2 contemporary HTML captures) and `verify/scratch/` (13 scripts +
`amino/` with 15 more + `pgp/` with the extracted armor blocks and an isolated GnuPG home). Notable
scratch tools: `verify/scratch/pgp/decode.py` (an **independent OpenPGP packet parser with CRC24**,
written so the audit did not have to trust gpg), `verify/scratch/amino/repro.py`,
`verify/scratch/mindbird.py` (the MIND-vs-BIRD substitution-consistency test).

> **Caution:** `verify/scratch/pgp/gpghome/` is a throwaway GnuPG home containing agent sockets, a
> `pubring.kbx` and a `trustdb.gpg`. It is scratch, not evidence. `private-keys-v1.d/` is empty.

### 11.3 `gaps/` (808 files at the final pass) — the gap-closing passes

**Four rounds, in order: `r1-*` → `seed-*` → `tr1-*` → `c1-*`.** Each file targets one specific hole
left by the channel sweeps and reports honestly whether it was closed. **These are the newest and
often the sharpest documents in the corpus.** The `tr1-*` and `c1-*` rounds (§11.5, §11.6) postdate
the first writing of `LEDGER.md` and `ARTIFACTS.md` and are indexed here for the first time.

| file | KB | what it closed |
|---|---|---|
| `seed-00-pgp-signature-verification.md` + `seed-00-pgp-files/` (9 files) | 27 | Ran gpg against everything. **Upgraded `themessage.txt` to authenticated; found 6 new signed pastes; reconstructed and verified the German paraportal.org announcement from an orphan signature.** |
| `seed-01-themessage-and-nothingisrandom-recovery.md` + 4 payload files | 35 | Recovered and character-verified both gate files; onion directory listing; structural analysis. |
| `seed-02-bitly-2mUF7Xy-destination.md` + `seed-02-files/` | 24 | Chased the shortlink inside the matrix pastebin to its destination. |
| `seed-03-magic-numbers-2-8-20-28-50-82.md` | 35 | Every contemporary reading of the magic-number sequence, and whether anyone tested it against the grid. |
| `seed-04-github-bartman081523-tengri137-selenoprotein.md` + `seed-04-files/` (23 files) | 119 | Full capture of the 2026 AI repo, tier-split. |
| `seed-05-old-turkic-orkhon-linguistic-analysis.md` + `seed-05-files/` (9 files) | 50 | **The Turkish acrostic result** (§2.8), the two Turkic-language tests, and one new primary artifact (r/Turkey thread `6270ns` + 15 comments). |
| `seed-06-highest-resolution-page23-and-book-scan.md` + `seed-06-files/` (35 files) | 30 | **The narrative WAS written after the indexing snapshot** (this index previously said it never was — corrected). The author-signed original page PNGs and the fraction-9 upscales. |
| `seed-07-post-2017-author-status.md` + `seed-07-files/` (9 files) | 23 | **Narrative written after the snapshot** (previously recorded as missing — corrected). Post-2017 author activity; 8 `twimg-*` images + `uniqmos-2025-05-23-matter-replication.txt`. |
| `seed-08-arecibo-connection.md` + `seed-08-files/` (32 files) | 39 | **Narrative written after the snapshot** (previously recorded as missing — corrected). The Arecibo thread, incl. `arecibo-1974-canonical-1679bits.txt`, which is what makes §11.7's bitmap identity provable. |
| `seed-09-folklore-claim-origins.md` + `seed-09-files/` (6 files) | 43 | **NOT empty — corrected.** This index previously called seed-09 "a pass that produced nothing". Origins of the folklore claims circulating about the case. |
| `r1-0-phumn-evernote-notebook-and-tinyupload-line9.md` | 19 | u/pHumn's page-23 Evernote notebook: **confirmed unrecoverable**, but its substantive content recovered from the reddit thread it was posted to, including the exact line-9 calculation and the flerovium/114 dinome table. |
| `r1-2-turkish-forum-eksisozluk-penetration.md` | 11 | The Turkish forum space that had bot-walled every prior fetch. |

### 11.3a `gaps/tr1-*` (8 narratives, 589 payload files) — the second gap round

Run 16:35–19:56 on 2026-07-24, **after** `LEDGER.md` and `ARTIFACTS.md` were written. Not indexed
anywhere until this pass.

| file | KB | what it produced |
|---|---|---|
| `tr1-00-vumarii-script-corpus-transcribed.md` + 37 files | 30 | The Vumarii script corpus, transcribed. Includes `tr1-00-files/twimg-orig/` (8 author tweet images). |
| `tr1-01-pgp-certifier-identities.md` + 36 files | 36 | Who signed the author's key, and who they are. |
| `tr1-02-seed-07-and-seed-08-raw-file-inventory.md` + 7 files | 29 | Raw-file inventory reconciling the seed-07/08 payload dirs against their narratives. |
| **`tr1-03-turkish-old-turkic-lexicon-and-ngram-model.md`** + 86 files | 27 | **Built the Turkish/Old-Turkic lexicons and n-gram models that became `solve/lexicons/` (§11.7).** The most consequential file of the round. |
| `tr1-04-4chan-x-archive-sweep.md` + 60 files | 21 | 4chan/X archive sweep. |
| `tr1-05-vk-cicadaz3301-deleted-russian-community.md` + 95 files | 25 | The deleted VK `cicadaz3301` Russian community. |
| **`tr1-06-nothingisrandom-bitmap-exhaustive-sweep.md`** + 12 files | 21 | **The exhaustive bitmap sweep. Decisive NEGATIVE: matrix rows 2–11 are not in the bitmap, and cannot be — see §11.7.** |
| `tr1-07-youtube-XV2AlgPBZPE-recovered-and-wiki-comment-loss-bounded.md` + 256 files | 27 | Recovered the YouTube artifact; bounded how much wiki comment history is lost. |

### 11.3b `gaps/c1-*` (8 narratives) — the third gap round, **7 of 8 COMPLETE**

Driven by `gaps/CRITIC-REPORT-c1.md` (2026-07-24 23:08), which lists **eight specified,
never-executed experiments** standing between this corpus and a solve or refutation of page 23.
**Read the critic report; it is the sharpest single document about what has not been done.**

> **This round ran to completion DURING the final consistency pass — the narratives were being
> written while this index was being finalised. Open each file and believe it over this table.**
> Every completed experiment was **pre-registered** (threshold declared before searching) and scored
> against `solve/lexicons/turkish_score.py` with a calibrated null. **All seven returned negatives.**

| file | status | result |
|---|---|---|
| `c1-00-intermediate-quotient-blocks-decoded.md` | **COMPLETE** | **The largest open lead in the corpus, CLOSED.** Of 65 non-canonical intermediate blocks only **10** admit any valid 14-token element reading; **148 of 171** decodings contain a letter the matrix never uses; **zero** clear the pre-registered bar; best strict decode `DBSTRFMANENSBP` at percentile **0.00**. Also reconciles the 2017 block set: 76 distinct blocks, 75 reproduced from the 11 printed fractions, the 76th belonging to a different blog post entirely. |
| `c1-01-dinome-number-layer-grids-and-statistics.md` | **COMPLETE** | **The dinome grids in `solve/` — independently verified correct in this pass.** No plaintext and no key on the number layer: magic numbers absent as values, and as indices give `URUABZE` / `TTENZNN` at percentile 0.05 / 0.0. **Column-major reading tested and negative** (z = −20.5, worse than row-major) — that lead is closed. The layer is nonetheless calibratedly non-random three ways. |
| `c1-02-classical-cryptanalysis-154-letters.md` | **UNFINISHED — §§1–7 all `[pending]`** | A **pre-registered** decision rule (§0b) and `c1-02-files/{common,cipher,ioc_kasiski,transposition,fast_scorer}.py` + two result JSONs. The one live item from this round. |
| `c1-03-syllable-attestation-cross-language-control.md` | **COMPLETE** | **VERDICT NEGATIVE.** 11 languages, size-controlled resampling, and a Hawaiian should-fail control. Two rows re-derived independently in this pass. See §11.7. |
| `c1-04-nucleobase-diagrams-pixel-level.md` | **COMPLETE** | **NEGATIVE, and it closes the premise.** All five diagrams are canonical textbook A/G/U/C/T — **no structural deviation exists** to serve as a hidden index. H-bond {2,3} alphabet cannot generate the 11-value acrostic prefix pattern; no corner-layout reading order beats forward; every genuine transposition falls below random. Crops: `c1-04-files/crops/`. |
| `c1-05-author-dropbox-folders-and-2017-twitter-images.md` | **COMPLETE** | Six twimg originals (two byte-identical, so **five distinct images**) and `dropbox/ALL_LISTINGS.json` — all three author Dropbox folders enumerated, **filenames only, nothing downloaded**. 13 entries, **three with detached `.asc` signatures**, and files dated 2024–2025 inside a 2017 folder. |
| `c1-06-tomtoo-proton-in-neutron-out-remap.md` | **COMPLETE** | **REFUTED, structurally.** 33 of 154 cells — including **all 18 uranium cells** — have no neutron-image element, so 0 of 11 rows decode under every isotope rule × orientation × row-9 variant. Long ranked the best untried 2017 idea. |
| `c1-07-cross-artifact-key-themessage.md` | **COMPLETE** | **NEGATIVE, positive-control-validated.** Control fires at −4.1003; best real score −7.7333. 22 of 24 matrix-derived matrices are non-invertible mod 26 while the true key is provably invertible. |

### 11.4 `harvest/` (263 files) — the first-pass sweep

The chronological capture layer, numbered `000` – `118`, each `.md` carrying a provenance header.
It is **partly superseded by `recon/`** (which is organised by channel and generally more complete),
but harvest holds several things nothing else does:

- `harvest/Tengri-137.pdf`, `harvest/058-files/` (the MP3 + `.asc` + `.txt`), `harvest/096-files/`
  (`137.tar.gz` + `.asc` + `137.txt`) — **binaries**.
- `harvest/026-themessage-6448-RECONSTRUCTED-PGP-VERIFIED.asc` — the authenticated 6448-letter drop.
- `harvest/024-pastebin-5r9baQj5-arecibo-bitmap-23x137.txt` — the 137 × 23 bitmap.
- `harvest/026-imgur-zLxdw-*.png` (4 images) and `harvest/083-…9PA3HMW.png`,
  `harvest/027-imgur-T5XgwzV-arecibo-annotated.jpg`, `harvest/061-norbert-waveform-beeps.png`,
  `harvest/020-reddit-5zdvlq-tweet-screenshot.png` — contemporary imagery.
- `harvest/050-companion-QUELLEN_INDEX.md` and `050-companion-REDDIT_INHALT.md` — German source
  inventories (SPECULATION as analysis, useful as maps).
- **Raw source captures** kept alongside the digested `.md`: `001-source-raw.html`,
  `013-`/`013b-`/`014-source-raw.html`, `017-…-RAW.html`, `019-`/`028-`/`029-`/`033-source-raw-*`,
  `031-pullpush-tengri137-submissions.raw.json` (552 KB), `032-source-raw-cdx-tengri137-298rows.txt`,
  the ATS `*-SOURCE-RAW.html` files, and ~20 hidden `.raw-*` / `.wb-*` working captures.
  **These exist so any digest can be re-derived from the bytes it came from.**
- Tools: `harvest/build_corpus.py`, `harvest/fetchall.py`.
- Aggregates: `alldata.json` (116 KB), `raw_part1..8.json`, `content-extracted.txt`, `_cdx_raw.txt`.
- `harvest/025-INVALID-*.html` — deliberately kept **negative** captures (a Reddit anti-bot shell and
  a 403) so nobody re-walks that path.

### 11.5 `raw/` (3 files)

`020-arctic-shift-post-5zdvlq.json`, `020-arctic-shift-comments-5zdvlq.json`,
`020-pastebin-FAJNLpLZ.txt`. The last is byte-identical to `harvest/020-pastebin-FAJNLpLZ-raw.txt`
and `recon/pgp-crypto/pastebin_solution-FAJNLpLZ_FAJNLpLZ.txt` — **I hashed all three: SHA-256
`07c9701552b2240d…`, 1309 bytes each.** This directory is a vestigial early scratch; nothing unique
is in it.

### 11.6 `solve/` (48 files) — the machine-readable layer and the scoring toolchain

At the indexing snapshot this directory held 8 files. It now holds 48. **This is where a
cryptanalyst starts.** `SOLVING-BRIEF.md` Part 3 documents every file; the additions since the
snapshot are:

| path | what it is |
|---|---|
| `solve/page23_dinomes.tsv`, `page23_dinomes.json` | the 11 × 14 atomic-number pre-image grid — the **un-lossy** layer the letters were projected from |
| `solve/page23_dinomes_row9_*.tsv` (5) | one grid per arithmetically legal row-9 reading |
| `solve/page23_dinomes_reversed_mirror_row9_*.tsv` (5) | the same, mirrored |
| `solve/BITMAP-VERIFICATION.md` | independent verification of the `nothingisrandom.txt` bitmap **(written in Polish)** |
| `solve/lexicons/` (21 entries + `folded/`, 44.8 MiB) | trained + calibrated Turkish language models — see §11.7 |

**Verified in the final consistency pass:** `page23_dinomes.tsv` re-parses to exactly the dinome
lists in `page23_canonical.json`; each of the ten variant grids differs from canonical **only** in
row 9; each row-9 token list re-concatenates to the printed repeating block
`111311463451311141372762211463` and re-decodes to the reading its filename names.

### 11.7 `solve/lexicons/` — the validated Turkish scorer

Built by the `tr1-03` pass; the single most reusable thing the investigation produced, because it
replaces "does this look like Turkish?" with a number that has a calibrated null.

| path | what it is |
|---|---|
| `MANIFEST.md` | read this first |
| `turkish_score.py` | char-5-gram, syllable-bigram and word objectives over folded Turkish |
| `model_A23.npz` / `model_B19.npz` | order-5 char models over the 23-letter folded-Turkish alphabet / **restricted to the matrix's own 19 letters**. Use B19 when scoring the matrix. |
| `calibration.json` | null distributions at lengths 14 / 26 / 154, n = 2000 each |
| `VALIDATION-LOG.txt`, `VALIDATION-RESULTS.json` | the validation suite: **AUC 1.0000** real-Turkish vs shuffled at length 154; the scorer ranks the acrostic above 100.00 % of 1000 shuffles of its own letters |
| `MATRIX-POSITION-LOG.txt`, `MATRIX-POSITION-RESULTS.json` | every linguistic statistic quoted in `SOLVING-BRIEF.md` Part 4a |
| `tr_syllable_inventory.tsv` / `tr_syllable_bigrams.tsv` | 28 060 distinct Turkish syllables, 312 846 015 tokens (re-counted this pass) |
| `folded/*_19letter.txt` | `tr`, `tk`, `mn`, `otk` lexicons folded into the 19-letter alphabet |
| `raw-sources` | symlink → `../../gaps/tr1-03-files` |

**The three results that matter, all re-verified in the final pass:**
1. On char-5-gram the matrix sits **50.8 %** of the way from i.i.d. random letters to real Turkish
   and is **indistinguishable from English** (z = −0.07). It is not Turkish text.
2. `P(none of C, D, J, V in 154 i.i.d. folded-Turkish letters) = 6.51 × 10⁻⁶`; only **3.74 %** of
   real Turkish sentences are writable in the matrix's alphabet.
3. **The much-quoted "68/68 syllables attested in Turkish" is vacuous as evidence of Turkishness.**
   Turkish attests **1124 of the 1125** possible V/VC/CV/CVC syllables over `ABEFGHIKLMNOPRSTUYZ`
   (the sole exception is `FUB`), so 68/68 has probability **0.9798** given the shape profile alone.
   The cross-language control (`gaps/c1-03-…`, 2026-07-24) closes it: Finnish, Hungarian, Italian,
   Spanish and Indonesian all score **68/68 and 51/51 distinct, identically to Turkish**, and at
   equal vocabulary size Turkish is statistically tied with them; no Turkic variety fits better;
   Hawaiian fails cleanly (38/68), proving the test *can* fail. Evidence of syllabic construction,
   not of language.

---

## 12. TRAPS, CORRECTIONS AND INCONSISTENCIES FOUND WHILE INDEXING

Read this section before you spend a day on a dead end.

1. **The dinome rule is the first letter of the element SYMBOL, not the name.** 80 → Hg → `H`
   (not "Mercury" → M); 25 → Mn → `M`. Schmeh's own phrasing is loose; the arithmetic settles it.
2. **The BURUMUTRE matrix vs page 23 — a genuine framing dispute inside the corpus.**
   `recon/cipherbrain-articles/_CHANNEL-NOTES.md` §4.1 argues, quoting Schmeh, that the matrix is an
   *intermediate result of the sound-file decode* and is **not** page 23. The book-source channel and
   `solve/verify_derivation.py` show the opposite: the 154 letters are **deterministically generated
   from the eleven fractions printed on page 23**, all 11 rows, from the pixels. **The arithmetic
   wins.** Schmeh's remark is a 2017 misunderstanding faithfully preserved by the corpus. This is
   also the origin of the false claim that the matrix decodes the second audio file.
3. **The reversed edition's row 10 `N` is an author slip**, not a key and not a corpus typo.
   Both editions are separately signed. Forward row 10 col 12 = `M` is forced by dinome 12 = Mg.
3b. **"The author called the right-to-left orientation the correct one" is NOT an author statement.**
   It traces to one Tengri 137 Wikia editor's line, phrased as a *question* —
   `Last staus update from Tengri 137 Twitter account shows us the correct version of use?:` — and
   the tweet it points at (`847161664889901056`) contains **only the bare URL**
   `https://pastebin.com/YUPZsz9n` (checked against
   `recon/twitter-account/666ab731-full-timeline-verbatim.md`). The author's own signed wording is
   "the first sequence" / "the second sequence distributed", ranking neither. **Grade: SPECULATION.**
   The genuine argument for the mirror is linguistic (Orkhon is written right-to-left) plus the
   acrostic, which only resolves right-to-left. See `ARTIFACTS.md` §1.14 / §14.9.
4. **The beep transcript is base-9 (0–8), not octal.** Several corpus filenames still say "octal"
   (`ARTIFACT-wav-beep-transcript-2994-digits.txt`, `artifacts/wav-octal--*.md`,
   `verify/wav-octal-transcription--VERIFY.md`). The files' *contents* state the correction; the
   *names* do not. My histogram confirms symbol `8` occurs 3 times.
5. **The A/x mapping is `A` = 0, `x` = 1.** I re-derived it; the intuitive A=1 gives garbage.
6. **`nothingwasrandom.onion` is not an address.** It is rhetoric in the "second gate" paste. Only
   `666666m7x6x5regc.onion` was ever real, and it is a dead v2 service, unreachable by design.
7. **Filename/slug mismatches** the VERIFY files themselves flag: there is no
   `mp3-spectrogram--MERGED--MERGED.md`, no `onion-derivation--MERGED--MERGED.md`, and no
   `wav-octal-transcription--MERGED.md`. The real files are `--MERGED.md` and `wav-octal--MERGED.md`.
8. **Duplicate reddit capture:** thread `5xsno3` has **two** files —
   `r-tengri137-5xsno3-complete-translation-page-1-23.md` (11,703 bytes, richer: full comment set,
   Wayback cross-check, tier notes) and `r-tengri137-5xsno3-tengri-137-the-complete-translation-page-1-23.md`
   (6,333 bytes). Different SHA-256; the second is a thinner earlier capture. **Use the larger one.**
   This is why the directory holds 266 per-thread files for 265 submissions.
9. **`solve/INDEPENDENT-VERIFICATION.md` is written in Polish** while every other analysis file is in
   English. Its content is load-bearing (the row-9 ambiguity); do not skip it because of the language.
10. **`tmp_key.asc` at the corpus root is a truncated stray.** Use `harvest/037-…asc`.
11. **The `--VERIFY.md` files all say `agrees = false`.** That is an artifact of the "flag any
    discrepancy however small" rule, not a quality signal. Read the verdict paragraphs.
12. **Cipherbrain pagination:** always `?all=1` (see §9.1).
13. **My own unresolved measurement:** a naive line-based recount of fraction bars in
    `artifacts/pages-17-22-raw-arithmetic--MERGED.md` gave 90; a stricter counter that requires
    digit-bearing lines above and below each bar gave exactly **16/16/13/19/14/13 = 91**, matching the
    file's own claim. I report both so the discrepancy is on the record rather than smoothed away.
    The 91 figure is the correct one.
14. **Tooling failures recorded across nearly every channel** (they explain thin coverage, not
    laziness): `WebSearch` was broken for the entire harvest (`output_config.effort 'xhigh' is not
    supported when thinking is disabled`); `WebFetch`'s summariser refused verbatim reproduction, so
    all content capture was done with `curl` + local HTML-to-text; `web.archive.org` was blocked
    inside WebFetch but worked via curl; `archive.today` returned HTTP 429 on every mirror and is
    **entirely uncovered**; Reddit returned 403 to every unauthenticated route, so pullpush/Arctic-Shift
    were the only ways in; Dropbox folder listings are JavaScript-rendered and yield no filenames.

---

## 13. KNOWN GAPS — what this corpus does NOT contain

- **The beeps WAV binary.** S3 404, never archived. Only its metadata and the derived 2994-digit
  transcript survive.
- **`tengri137.mp3.asc` / `.txt` could not be re-downloaded from Dropbox**, though both are held via
  other routes (`recon/code-hosts/verified-originals/`, `harvest/058-files/`).
- **`nothingisrandom.txt` has no surviving signature** anywhere. Text preserved; authenticity
  attributed only.
- **The onion's original content**, as actually served over `666666m7x6x5regc.onion`. Only
  reproductions and one screenshot exist. Not attempted — unreachable from the clear web by design.
- **archive.today** — the whole half of the web-archive channel. `archive.fo/sa1I2` reportedly holds
  an archived @666ab731 tweet containing BURUMUTREFAMTU. **Not captured.**
- **r/tengri137 comment trees in Wayback** — the archived snapshots lazy-load comments, so only
  pullpush has them; 128 comments (7.3 %) are `[removed]`/`[deleted]` tombstones with bodies lost.
- **u/pHumn's Evernote note bodies** — confirmed unrecoverable; the tinyupload "line 9" file is gone
  at source and was never archived (content partially recovered from reddit).
- **Defango's November 2017 YouTube Tengri live-stream** — referenced by Schmeh as the launchpad of
  the Red Triangle ARG; the stream itself was not located.
- **`@fortified`'s promised Parts 2 and 3** — never published (verified against his full 180-post history).
- ~~**Issuer keys of the four third-party certifications** on the Tengri key — not fetched.~~
  **PARTLY CLOSED by `gaps/tr1-01-pgp-certifier-identities.md`.** Two of the four resolved:
  `040484988228DD98` = `Noah Mercitalis <nomercy777@protonmail.com>`, cert 2017-05-03;
  `A49BDCD5BC224010` = `Varol Tepecik <varoltepecik@gmail.com>`, cert 2017-05-07. Two remain
  unresolved (`D2FBEC71DB65A36D`, 2017-05-27, no issuer-fpr subpacket; `6966D8E21ACC064F`,
  2017-11-23). All four certs sit on the `Tengri (137)` UID, **not** on `Tengri 137`.
- ~~**The `bit.ly/baatarkerei` YouTube video.**~~ **CLOSED by
  `gaps/tr1-07-youtube-XV2AlgPBZPE-recovered-and-wiki-comment-loss-bounded.md`.** The link resolves
  to `youtu.be/XV2AlgPBZPE`, which is **private, not deleted** (`playabilityStatus` =
  `LOGIN_REQUIRED`, "This is a private video"). Metadata recovered from three Wayback captures of
  the watch page that the `archive.org/wayback/available` API does not report — only CDX sees them.
  The video **content** remains unavailable and always will be without the owner's access grant.
- **Any Discord / IRC / Telegram / Matrix log** — none exists (§9.2).
- **A solution to page 23.** The meaning of the 154 letters remains unsolved. That is the point.

---

## 14. THE SNAPSHOT DIRECTORY — `<research-workspace>`

**This is a backup, not new material. It contains nothing you cannot find in the live corpus.**

Verified by a full recursive diff at index time:

| check | result |
|---|---|
| files in snapshot | **1039** |
| bytes in snapshot | 62,346,400 (59.5 MiB) |
| files present in the snapshot but **not** in the live corpus | **0** |
| shared files whose **size differs** between the two | **0** |
| files present in the live corpus but not in the snapshot | **87** (all in `gaps/`, `harvest/`, `verify/`) |
| snapshot directory mtime | 2026-07-24 13:42 |

Per-directory comparison (snapshot → live corpus):

```
artifacts    42 ->  42      raw        3 ->    3
gaps          2 ->  79      recon    629 ->  629
harvest     258 -> 263      solve      8 ->    8
verify       96 -> 101      tmp_key.asc  1 ->   1
```

So the snapshot is a **strict subset** of the live corpus, taken at 13:42 on 2026-07-24, immediately
before the gap-closing passes resumed. The 87 additional files in the live corpus are exactly the
gap-closure output described in §11.3 — chiefly `gaps/seed-00` … `seed-06` and their payload
directories, plus five late harvest files and five late verify files.

**Practical guidance:** never cite the snapshot. Use it only if you need to know what the corpus
looked like before the gap passes, or to recover a live file that was accidentally clobbered. Do not
diff findings against it and report the diff as "new evidence" — it is the same evidence, minus the
newest passes.

---

## 15. APPENDIX — verification log for this index

Every quantitative claim in this file was computed during the indexing pass. Nothing was carried over
from memory or from corpus prose without being re-derived. What I actually ran:

| claim | method |
|---|---|
| 1126 files / 71,142,110 bytes / per-directory and per-extension counts | Python `os.walk` + `os.path.getsize` + `collections.Counter` |
| Snapshot = strict subset, 1039 files, 0 snapshot-only files, 0 size differences | Python set-difference over `(relpath, size)` pairs for both trees |
| Matrix: 11 × 14, 154 letters, 19-letter alphabet, absent `CDJQVWX`, letter frequencies | Python over `solve/page23_flat.txt` |
| `page23_flat.txt` == join of forward rows; `page23_columns.txt` == transpose | direct comparison in Python |
| Reversed-as-published differs from the mirror at exactly one cell (row 10 pos 3, `M`→`N`) | element-wise comparison of the two files |
| All 11 rows reproduce from the printed fractions; row 9 admits 5 segmentations under the 2-or-3-digit rule; rows 4/6/8/9/11 admit 20/63/15/48/15 under a 1-to-3-digit rule | executed `solve/verify_derivation.py` |
| Turkish acrostic reproduces from both signed editions | executed `gaps/seed-05-files/verify_acrostic_from_signed_pastebins.py` |
| Acrostic probability 7.838 × 10⁻³¹; multiple-comparison-corrected ≈ 1.6 × 10⁻²⁷ | product of matrix letter frequencies over the 26-gram, × 2¹¹ prefix patterns |
| `themessage` = 6448 bytes, 6448 letters, 26 distinct letters, SHA-256 `50bd9c44…`; 6448 ≠ 47 × 137 | Python over `gaps/seed-01-themessage-body-6448.txt` |
| `nothingisrandom` longest digit run = 1422, identical in both renderings | regex over both payload files |
| Beep transcript = 59 × 50 + 1 × 44 = 2994 digits, alphabet 0–8, histogram | Python over `recon/web-archives/ARTIFACT-wav-beep-transcript-2994-digits.txt` |
| A/x block = 176 chars → 22 bytes → `666666m7x6x5regc.onion`, mapping A=0 / x=1 | Python bit-decode of the verbatim line |
| Arecibo bitmap = 137 lines × 23 chars = 3151 cells | Python line-width histogram |
| 91 fractions on pages 17–22, split 16/16/13/19/14/13 | Python: bar lines with digit-bearing neighbours, segmented by page markers |
| PDF SHA-256 `f77fa0e5…`, 3,980,980 bytes, both copies identical | `shasum -a 256` |
| MP3 SHA-256 `b424c155…`, 7,864,927 bytes, both copies identical | `shasum -a 256` + `ls -l` |
| `gaps/seed-06-files/author-signed-original-pages/*.png` are byte-identical to the tarball contents | extracted `137.tar.gz` + `666ab731.tar.gz` to scratch, compared SHA-256 for P001/P017/P023 |
| 14 signatures GOOD (10 clearsigned + 4 detached); `CJsN0KWL` BAD | `gpg --verify` in an isolated `GNUPGHOME` with only `harvest/037-…asc` imported |
| Reddit: 265 submissions, 1762 comments, 242 in 2017, one duplicated thread file | Python over `recon/reddit/_INDEX-r-tengri137-all-submissions.md` + directory listing |
| Twitter: 90 tweets, 322-line status index, 381-line CDX inventory | line counts + the timeline file's own header |
| Three copies of `FAJNLpLZ` are byte-identical (1309 bytes) | `shasum -a 256` on all three |

**End of index.**