FORENSIC RESEARCH ARCHIVE

Evidence ledger

A concise adjudication of established facts, derived findings, and unsupported claims.

Proven or primary-derived

Pages 1-16 use a substitution layer; pages 17-22 use the atomic-number fraction method.
The bitmap's 4-by-4 numeric block decrypts all 6,448 signed message letters under a Hill cipher.
VISITBITLYAABBBCCCC means visit bit.ly/aabbbcccc; the working link reaches signed knowledge.txt.
A signed November 2017 statement closes the missed first path and opens the signed rendezvous.png route.
2143762625 is Monday, 7 December 2037, 01:37:05 UTC.
The eleven labels are Turkish numbers 1-11. Each 145-dot kolam transcribes exactly to 256 crossing bits; the specified panel order and one-nibble cyclic phase yield a 352-byte circular English warning.

Investigator-derived

Page 23's Turkish acrostic is uniquely strong under the documented prefix model, but its authorial role is not signed.
137 mod 11 = 5 makes panels 7-11 followed by 1-6 the most literal reading of “make the last ones to the first ones.”
Page 16's repeated adjacent cube pairs visibly give Job 15:2, John 7:12, John 7:4, and Job 13:2; the later charlatan wording is a plausible internal paraphrase, not a quote.

Rejected, blocked, or unsupported

Biological interpretations of Page 23 and numeric readings of the bitmap figures fail their controls.
The bridge/helix pictogram reading fails comparison against authenticated later figures and arbitrary-hourglass controls.
The original WAV, a better Page-23 scan, an authored explanation of the 2037 appointment, and an authenticated identity bridge are absent.

Later-artifact boundaries

The signed 2019 Vumarii image has a pixel-exact glyph transcription, not a verified language translation. Its upper diagram is strongly attributable to a cleaned, re-inked north-polar detail of the Dunhuang Star Map; that identifies a visual reference, not an extraction, traversal, or payload. A source-led 34-group/34-asterism comparison also fails its direct length controls, so the count alone is not an extraction rule. Conditional Turkish, Esperanto, and Swahili completion tests find no readable prose or source-selected alphabet; the latter two directly test names written on a community solver sheet.
The signed 2018 poem 98DZzeYr has exact 23-word structure plus the compact strings JUSTINSUN and TORUNIX. The latter can be respaced as TOR UNIX but supplies no address; a TRONIX reading requires an unselected mixed-letter operation. No deterministic key, identity, or reward follows.
The 2037 rendezvous warning is decoded as bytes; its intended real-world meaning or action is not stated by the signed image.

Vumarii status audit → · Dunhuang comparison → · 34-asterism count control → · Named-language controls → · 2018 poem audit →

EDITORIAL CONTROL · CROSS-BRANCH CLAIMS

10 junctions, each with an evidence boundary

A puzzle route can be mechanically decoded without settling its real-world meaning; a suggestive phrase can be real without being a key. This ledger keeps those categories visible rather than blending them into a single story.

Branch / status	What is established	What is still unsupported or open
BOUNDED 2016 Book page 16: four cube verse addresses	The repeated-position instruction on the page lets the four central adjacent pairs be read directly as 15:2, 7:12, 7:4 and 13:2: Job 15:2, John 7:12, John 7:4 and Job 13:2.	The repeated position and addresses are visible in the source page. Any thematic link from a verse to a later Tengri message is an interpretation, not a quoted instruction or identity proof.
BOUNDED 2016 / 2025 Page 23: candidate acrostic and animal hint	The authenticated 11-by-14 matrix has 154 letters. The published two-or-three-character prefix model produces BUNUYAZANTOSUNOKUYANAKOSUN, and a 2025 account post says an animal name is present but not the fox. In the bounded published-row scan, OKUZ and SNAKE are exact candidates.	No signed message identifies the prefix result as a final endpoint, chooses an animal language or direction, or supplies a next-stage operation. The acrostic is investigator-derived; the animal hint remains two candidates, not a selected answer.
ESTABLISHED 2017 Bitmap Hill key and the first endpoint	The recovered 1,422-digit bitmap expands to the documented 4-by-4 Hill matrix. Applying it to every four-letter block decrypts all 6,448 ciphertext letters and ends VISITBITLYAABBBCCCC. The current public Dropbox ZIP contains exactly one 967-byte knowledge.txt note, whose v4 RSA/SHA-256 clear-signature validates under the established Tengri key.	The reproducible transform and verified endpoint instruction do not validate the manifesto's claims or disclose what the later promised 'last step' was. The preserved signed body has ordinary CRLF layout with no tabs or trailing spaces, so it supplies no simple whitespace-to-binary or Morse stream.
BOUNDED 2017 Beep-WAV route and residual tail	The preserved duration transcript reproduces 2,994 base-9 digits, 710 packets, 27 token classes, three repeated blocks, and the 176-bit A/x onion address 666666m7x6x5regc.onion.	The original WAV remains unrecovered. MIND is non-injective under the documented substitution, BIRD is injective but not unique, and rssstuvwx has no author-selected codebook.
BOUNDED 2017 Nuclear-magic-number clue	The signed note prints exactly 2, 8, 20, 28, 50, 82, ...; the direct periodic-table rendering is He O Ca Ni Sn Pb.	126 is not in the signed line. It comes from a community parse of 666666 mod (7 x 6 x 5), and neither that parse nor the element symbols select a password, matrix extraction, or explanation of regc.
ESTABLISHED 2017 / 2037 Rendezvous image: timestamp and kolam warning	The signed raster yields eleven 16-by-16 crossing matrices (2,816 bits). The Turkish-number labels, source-led block order, Kambi serialization, and one-nibble phase reproduce one 352-character printable warning. The printed timestamp resolves to Monday, 7 December 2037, 01:37:05 UTC.	The image does not name a location, platform, event, or action for the future appointment. The warning's real-world meaning remains open.
BOUNDED 2017 MathEasySolutions exchange: two restored replies	Two April 2017 @666ab731 replies absent from the original archive enumeration are recovered by public status ID, exact syndication text, parent ID, Snowflake UTC, and matching historical screenshots. The later arithmetic explicitly sums to 777.	The preserved exchange describes a separate seven-path math contest. Neither reply supplies an author-selected character extraction, plaintext, or key for the original Tengri puzzle chain.
BOUNDED 2018 Signed 23-word poem	Removing spaces and punctuation from the first two signed lines gives JUSTINSUN and TORUNIX. TOR UNIX is a lossless respacing of the latter.	TOR UNIX supplies no address or command. TRONIX requires an unselected mixed-letter operation that drops U, and IX=9 selects neither a word nor a letter rule. No deterministic wallet, identity, location, or reward follows.
UNRESOLVED 2018 I am the method: no documented handoff	The video lead has two recovered, date-adjacent account posts before the earliest retained community copy of the uploader wording: S. H. and a mechanical hex-to-Base64 decode to Bennu. A separate fixed-overlay control stacks 149 decoded frames by mean and 15 by median without decoded QR text or usable four-corner geometry.	No preserved author text selects either post as the video's next message. The platform reply is not PGP-signed and the recovered tweet corpus has a lower bound of 33 unrecovered or unenumerated posts. The stack limits only a fixed visual overlay in the preserved lossy transcode; it cannot rule out arbitrary encoding or an unavailable original.
BOUNDED 2019 Vumarii: chart attribution, not plaintext	The upper diagram is strongly attributable to a cleaned, re-inked north-polar detail of the Dunhuang Star Map. The image body has a reproducible glyph transcription, and the tempting 34-group/34-asterism direct count test is ordinary under its fixed controls.	The attribution supplies no glyph alphabet, star traversal, text cipher, Page-23 bridge, or translation. Conditional Turkish, Esperanto, and Swahili tests do not yield readable prose.

Read the source-indexed ledger → · Machine-readable ledger →