# Independent Merkle calculations

The parent byte/framing vectors predate Stage6 production code and import no Stage6 runtime. Three G byte arrays have lengths 408, 424, 829; the final entry contains the complete two-journal correction.

Their leaf hashes are 51eb525764cae997c16c18aaf2e248de6fa447a3f4a1b6472fbf65587beb4eb4, f2dee29375164fa8422e9aa841ac38b8b780ec16b5258e5bab85464ff7b54c76, and 2ee5c24ba50e3f0ca2cbe09d88fa16ca7b99529d0dad627233ea216b7237ee6c.

Branch of leaves 0–1 is f7166ff638fdfea0e5b73405e6f4bf58b7d76a0c7199aa84a453d18eeb7d3cd6. Root is SHA256(01 || that 32-byte branch || leaf 2's 32-byte hash), yielding 34ad17bffd657e7227adb7083eb1be5d0a7f9bcd5ba6b404313dce2242393192.

Index 2 uses only the branch of leaves 0–1 as a left sibling. Index 0 uses leaf 1 then leaf 2 as right siblings. Index 1 uses leaf 0 as left sibling then leaf 2 as right sibling. Ordered sibling paths have different lengths within the same three-leaf tree.

The local independent oracle generator uses an iterative binary-carry stack, merging equal-size subtrees during ingestion and folding the remaining stack from the right. It emits literal postorder traces and paths. Verification expectations separately use RFC fn/sn orientation, unlike the production recursive range directions. All 143 full expected outputs were materialized before recursive implementation.

An initial request-construction alias allowed a malformed-entry mutation to contaminate later oracle inputs. Tests exposed this authoring defect. Copying the source list when constructing each request repaired fixture isolation; the independent mathematics and production core were unchanged. This repair is disclosed rather than describing all later byte copies as untouched before-core artifacts.

Supplemental tests independently form a 4096-identical-entry root by taking one leaf digest and applying 12 equal-child branch hashes. Its generated proof has 12 siblings, trace 8191 nodes. Both native runtime implementations execute this full bound.

Empty tree is SHA256(empty), e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855. One empty entry is SHA256(00), a distinct mathematical commitment; it is not a valid D30 G group. Repeated identical entries are allowed by this byte layer and occupy distinct indexes; source duplicate identity rules belong to the upstream financial adapter.