# Audit — 2018 PGP poem `98DZzeYr`

## Scope and provenance

This document applies only deterministic, source-visible operations to the
seven-line signed poem. It is not a claim that an arbitrary anagram, cipher,
or external association is a solution.

- Source: `archive/recon/code-hosts/verified-originals/pastebin-raw/pastebin_98DZzeYr_raw.txt`
- Source SHA-256: `e00d9037c58ee71b4da38d86a8900c04a484a2fe090e39869f1b4ab5fc6bae90`
- Signature status: preserved corpus records this artifact as `GOOD` under
  fingerprint `2A2C0AD4ED1CAD8353A30056D152D6C5666AB731`.

## Literal signed body

> Just, in sun.
> To run, I x.
> We can create,
> A secret place,
> To hide the reward.
> Beings will hunt,
> One can find.

## Reproducible structure

| Property | Value |
|---|---|
| Lines | 7 |
| Alphabetic words | 23 |
| Words per line | `3, 4, 3, 3, 4, 3, 3` |
| Letters per line (spaces/punctuation excluded) | `9, 7, 11, 12, 15, 14, 10` |
| Word lengths | `4, 2, 3, 2, 3, 1, 1, 2, 3, 6, 1, 6, 5, 2, 4, 3, 6, 6, 4, 4, 3, 3, 4` |
| Word initials | `JISTRIXWCCASPTHTRBWHOCF` |
| Word finals | `TNNONIXENEATEOEEDSLTEND` |
| Line initials | `JTWATBO` |
| Line finals | `NXEEDTD` |

## Bounded hypotheses and results

| Candidate | Reproducible observation | Result / limit |
|---|---|---|
| Line 1 compact form | `Just, in sun.` → `JUSTINSUN` after removing spacing and punctuation. | Exact textual observation. Its match to the name Justin Sun is an external association, not an author-confirmed decode. |
| Line 2 compact form | `To run, I x.` → `TORUNIX` under the identical normalization. | It may be literally respaced as `TOR UNIX`, which fits the earlier onion/Tor context but supplies no address or command. It does not itself equal `TRON`, `TRX`, or `TRONIX`. |
| Mixed outer-letter TRONIX candidate | First letters of To/run give `TR`; their finals give `ON`; singleton I/x give `IX`. | This makes `TRONIX`, but the method changes reading order and leaves the middle U of `run` unused. It is an unselected external association, not a mechanical solution. |
| `I x` as Roman IX | Compacting the last two one-letter words gives Roman `IX = 9`. | The ninth word is CAN and ninth body letter is N. The signed source gives no unit or follow-up rule, so this cannot select an extraction. |
| Acrostic / telestich | Word initials and finals are recorded above; line initials are `JTWATBO`, line finals are `NXEEDTD`. | No source instruction selects a route, key, or alphabet. Treat as structure, not plaintext. |
| 23-word count | The body contains exactly 23 alphabetic words. | Relevant to the 23-page campaign but insufficient to choose a word-index operation. No extraction is asserted. |

## Exact respacings and rejected crypto over-read

- **Line 1:** `JUSTINSUN` is the exact result of removing spaces and punctuation. It can be respaced as `JUSTIN SUN`, but the name association is external to the signed text.
- **Line 2:** `TORUNIX` is the exact same normalization. `TOR UNIX` is a literal respacing (no letter is added, removed, or reordered); it is compatible with the already-known Tor/onion context, but it does not contain an onion address, command, or new destination.
- **Not TRONIX:** `TRONIX` can be made only with the explicitly stated mixed outer-letter selection. It leaves the middle `U` of `run` unused and changes the ordinary text order. The signed source does not select that operation, so the external Justin Sun/TRONIX association is not a decode.
- **IX is not an index rule:** if `I x` is first compacted to Roman `IX`, it can mean 9. The ninth word is `CAN` and the ninth body letter is `N`. No signed material selects a unit or a follow-up operation.

The external association is historically plausible but evidentially weak: a 4 January 2018 finance report explicitly paired TRON, Tronix, and CEO Justin Sun, and the current TRON site calls TRX 'TRONIX'. These sources establish the external vocabulary, not Tengri intent. URLs are recorded in the JSON audit.

## Narrow publication context

- In the fixed recovered account window `2018-01-01T00:00:00.000Z` to `2018-02-15T00:00:00.000Z`, there is exactly `1` post: the bare Pastebin pointer at `2018-01-20T09:17:24.000Z`.
- The saved Reddit thread contains a same-day community comment about a TOR-browser check of the earlier onion route. It is useful chronology, not author evidence: `This is contemporaneous community reporting, not a Tengri-signed instruction or a successful endpoint.`
- The recovered account corpus is known to be incomplete. This bounded window establishes only that no adjacent recovered author tweet supplies a rule or target.

## Literal term check in the preserved author-linked corpus

This searches the recovered tweet bodies and preserved signed-paste text only.
It cannot establish that a deleted post never contained a term.

| Term | Hits | Meaning |
|---|---:|---|
| `JUSTIN SUN` | 0 | No literal recovered-author occurrence. |
| `JUSTIN` | 0 | No literal recovered-author occurrence. |
| `TRON` | 0 | No literal recovered-author occurrence. |
| `TRX` | 0 | No literal recovered-author occurrence. |
| `TRONIX` | 0 | No literal recovered-author occurrence. |
| `WALLET` | 0 | No literal recovered-author occurrence. |
| `CRYPTO` | 0 | No literal recovered-author occurrence. |
| `BLOCKCHAIN` | 3 | tweet 1127657024005734400; tweet 1127659394353782784; tweet 2070801926782955910 |

## Conclusion

The poem has deliberate-looking compact forms and a conspicuous 23-word
structure, but none of the bounded extractions yields a self-authenticating
instruction, location, address, or key. In particular, whitespace removal
of the first two lines yields the exact strings `JUSTINSUN` and `TORUNIX`.
The latter may be respaced as `TOR UNIX`, a plausible allusion to the older
onion branch, but it gives no endpoint. `TRONIX` requires a separate mixed
outer-letter operation that the signed poem never selects. The composite
Justin Sun / TRONIX reading therefore remains **unconfirmed**, not a published decode.

To advance this branch, a new candidate must specify its exact rule before
running it and must reproduce a meaningful output with a negative control.