manifests:
  - manifest_entry:
      evidence_id: "EV-IP-0034"
      title: "Planetary Ad-Tech Real-Time Bidding (RTB) Bidstream Telemetry Siphon"
      description: "Passive tap captures of unencrypted OpenRTB 2.5/3.0 user broadcast streams, device advertising IDs (MAIDs), precise GPS breadcrumbs, and real-time browsing URLs harvested across 8+ billion connected endpoints to train multi-modal behavioral embedding models without affirmative consent."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Global Surveillance & AdTech Forensics Lab"
      collection:
        method: "BGP peering exchange passive packet capture and DSP stream reconstruction"
        timestamp_utc: "2025-06-02T04:12:00Z"
        original_filename: "rtb_bidstream_global_telemetry_harvesting_dump.pcap.zst"
        file_size_bytes: 14892019482
        evidence_hash_sha256: "01f2e3d4c5b6a78899aabbccddeeff00112233445566778899aabbccddeeff00"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0034-bidstream.pcap.zst"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-RTB-2025-0034"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-06-02T04:12:00Z"
          signature: "SIG-ED25519-aa00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Deep Packet Inspection Node AL-01"
          timestamp_utc: "2025-06-02T04:15:30Z"
          signature: "SIG-ED25519-bb11223344556677889900aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-02T04:16:30Z"
          signature: "SIG-ED25519-cc22334455667788990011aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Privacy & Data Protection Counsel, gdpr-enforcement@ghostgate.internal, PGP: 0x4F89E012B8891C04"
      notes: "Violates FTC Act Section 5 unfair practices, GDPR Article 6/9 unlawful processing of special category data, and California Consumer Privacy Act (CCPA) § 1798.100."

  - manifest_entry:
      evidence_id: "EV-IP-0035"
      title: "Canvas, AudioContext & WebGL Hardware Fingerprinting Ingestion Database"
      description: "Distributed JavaScript payload source code and client-side device signature databases recording GPU renderer hashes, AudioContext oscillator decay curves, font enumeration tables, and battery API status to maintain non-expiring cross-site consumer tracking tokens."
      collector:
        name: "Aria Sterling, JD"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "High-volume CDN edge script reverse compilation and script de-obfuscation"
        timestamp_utc: "2025-06-06T11:24:45Z"
        original_filename: "canvas_webaudio_fingerprinting_engine_deobfuscated.js"
        file_size_bytes: 4892019
        evidence_hash_sha256: "12f3e4d5c6b7a89900bbccddeeff00112233445566778899aabbccddeeff0011"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0035-fingerprint.js"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-FINGERPRINT-2025-0035"
      chain_of_custody:
        - action: "collected"
          actor: "Aria Sterling, JD (Cyber Forensics Lead)"
          timestamp_utc: "2025-06-06T11:24:45Z"
          signature: "SIG-ED25519-dd33445566778899001122aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Ingestion Pipeline Node AL-07"
          timestamp_utc: "2025-06-06T11:27:00Z"
          signature: "SIG-ED25519-ee44556677889900112233aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-06T11:28:00Z"
          signature: "SIG-ED25519-ff55667788990011223344aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: false
        counsel_contact: "Consumer Protection Counsel, ftc-privacy@ghostgate.internal, PGP: 0x6E4C009988DFBA12"
      notes: "Proves intentional circumvention of Apple Intelligent Tracking Prevention (ITP) and Google Privacy Sandbox sandbox restrictions."

  - manifest_entry:
      evidence_id: "EV-IP-0036"
      title: "Global Residential Proxy Botnet Scraping Mesh Infrastructure Configs"
      description: "Command and control orchestration manifests, residential IP rotation endpoints (14M+ residential exit nodes embedded via trojanized mobile SDKs), and CAPTCHA farm bypass telemetry used to systematically harvest copyrighted forums, public records, and codebases."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "Proxy routing node reverse-tunnel capture and API endpoint extraction"
        timestamp_utc: "2025-06-10T16:40:10Z"
        original_filename: "residential_proxy_scraping_mesh_c2_configs.json"
        file_size_bytes: 84920194
        evidence_hash_sha256: "23f4e5d6c7b8a90011ccddeeff00112233445566778899aabbccddeeff001122"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0036-proxy-mesh.json"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-PROXY-2025-0036"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-06-10T16:40:10Z"
          signature: "SIG-ED25519-00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Botnet Analytics Node AL-01"
          timestamp_utc: "2025-06-10T16:42:30Z"
          signature: "SIG-ED25519-11223344556677889900aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-10T16:43:30Z"
          signature: "SIG-ED25519-22334455667788990011aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Cyber Crime Counsel, doj-ccips@ghostgate.internal, PGP: 0x6E4C009988DFBA12"
      notes: "Direct violation of 18 U.S.C. § 1030 (Computer Fraud and Abuse Act) through unauthorized access of protected commercial web servers."

  - manifest_entry:
      evidence_id: "EV-IP-0037"
      title: "Zero-Click Mobile Sensor & Ambient Acoustic Vector Ingestion Logs"
      description: "Mobile SDK telemetry packets capturing unprompted high-frequency gyroscope vibrations, ambient acoustic FFT spectrum bins, and Bluetooth low-energy (BLE) proximity beacons transmitted to foundational acoustic foundation model weights."
      collector:
        name: "Aria Sterling, JD"
        affiliation: "GhostGate Privacy & Cryptographic Integrity Lab"
      collection:
        method: "Mobile OS network interception proxy and dynamic binary instrumentation (Frida trace)"
        timestamp_utc: "2025-06-14T09:15:00Z"
        original_filename: "mobile_sdk_ambient_sensor_acoustic_telemetry_dump.bin"
        file_size_bytes: 284901920
        evidence_hash_sha256: "34f5e6d7c8b9a01122ddeeff00112233445566778899aabbccddeeff00112233"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0037-ambient-sensors.bin"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-ACOUSTIC-2025-0037"
      chain_of_custody:
        - action: "collected"
          actor: "Aria Sterling, JD (Cyber Forensics Lead)"
          timestamp_utc: "2025-06-14T09:15:00Z"
          signature: "SIG-ED25519-33445566778899001122aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Mobile Telemetry Node AL-07"
          timestamp_utc: "2025-06-14T09:18:10Z"
          signature: "SIG-ED25519-44556677889900112233aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-14T09:19:00Z"
          signature: "SIG-ED25519-55667788990011223344aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Wiretap & Privacy Counsel, ecpa-litigation@ghostgate.internal, PGP: 0x99A82BC014F98E11"
      notes: "Severe violation of 18 U.S.C. § 2511 (Electronic Communications Privacy Act) and state two-party consent eavesdropping statutes."

  - manifest_entry:
      evidence_id: "EV-IP-0038"
      title: "Retrospective Terms of Service Revision & Retroactive Data Seizure Scripts"
      description: "Database execution scripts applying retroactively enforced 2023-2025 Terms of Service amendments to historic user content generated from 2006 to 2022 without affirmative opt-in consent or equitable compensation."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Forensic Audit Lab / Securities Division"
      collection:
        method: "SQL DDL/DML migration log extraction and historical terms versioning diff"
        timestamp_utc: "2025-06-18T13:30:20Z"
        original_filename: "tos_retroactive_consent_database_migration_scripts.sql"
        file_size_bytes: 12490184
        evidence_hash_sha256: "45f6e7d8c9ba012233eeff00112233445566778899aabbccddeeff0011223344"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0038-tos-retroactive.sql"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-TOS-2025-0038"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-06-18T13:30:20Z"
          signature: "SIG-ED25519-66778899001122334455aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Legal Audit Node AL-01"
          timestamp_utc: "2025-06-18T13:32:45Z"
          signature: "SIG-ED25519-77889900112233445566aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-18T13:33:30Z"
          signature: "SIG-ED25519-88990011223344556677aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: false
        redaction_required: false
        counsel_contact: "Class Action Consumer Counsel, consumer-rights@ghostgate.internal, PGP: 0x4F89E012B8891C04"
      notes: "Unconscionable contract of adhesion under Restatement (Second) of Contracts § 208 and California Unfair Competition Law (UCL § 17200)."

  - manifest_entry:
      evidence_id: "EV-IP-0039"
      title: "Synthetic Data Contamination Obfuscation & Model Collapse Suppression Code"
      description: "Adversarial filtering pipelines designed to detect, filter, and artificially inject watermarked human linguistic noise into multi-billion-token synthetic pre-training mixes to deceive academic model collapse benchmark audits."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate High-Performance Compute Forensics Lab"
      collection:
        method: "PyTorch data loader pipeline inspect and token filtering kernel extraction"
        timestamp_utc: "2025-06-22T17:00:00Z"
        original_filename: "synthetic_data_filter_collapse_obfuscation_pipeline.py"
        file_size_bytes: 7892019
        evidence_hash_sha256: "56f7e8d9c0ab123344ff00112233445566778899aabbccddeeff001122334455"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0039-collapse-obfuscation.py"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DATA-2025-0039"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-06-22T17:00:00Z"
          signature: "SIG-ED25519-99001122334455667788aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Model Audit Bridge AL-01"
          timestamp_utc: "2025-06-22T17:02:15Z"
          signature: "SIG-ED25519-00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-22T17:03:00Z"
          signature: "SIG-ED25519-11223344556677889900aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: false
        counsel_contact: "Securities Counsel, sec-tcr@ghostgate.internal, PGP: 0x4F89E012B8891C04"
      notes: "Proves intentional misrepresentation of training data provenance and data quality metrics to Series B equity investors."

  - manifest_entry:
      evidence_id: "EV-IP-0040"
      title: "Universal Optical Splitter Submarine Cable Data Ingestion Logs"
      description: "Passive optical split tap telemetry records from transatlantic cable landing stations (TAT-14/MAREA) routing unencrypted BGP transit streams to GPU cluster high-capacity packet capture buffers."
      collector:
        name: "Col. Raymond Shaw"
        affiliation: "Telecommunications & Defense Grid Infrastructure Team"
      collection:
        method: "Optical line amplifier supervisory monitor export and OTDR trace"
        timestamp_utc: "2025-06-26T08:12:30Z"
        original_filename: "submarine_cable_optical_split_tap_telemetry_manifest.csv"
        file_size_bytes: 98401924
        evidence_hash_sha256: "67f8e9d0c1ba23445500112233445566778899aabbccddeeff00112233445566"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0040-optical-split.csv"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-CABLE-2025-0040"
      chain_of_custody:
        - action: "collected"
          actor: "Col. Raymond Shaw (Senior Technology Security Lead)"
          timestamp_utc: "2025-06-26T08:12:30Z"
          signature: "SIG-ED25519-22334455667788990011aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Telecom Ingest AL-04"
          timestamp_utc: "2025-06-26T08:15:00Z"
          signature: "SIG-ED25519-33445566778899001122aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-26T08:16:00Z"
          signature: "SIG-ED25519-44556677889900112233aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "International Telecom Counsel, itu-privacy@ghostgate.internal, PGP: 0x1188FFAA90234190"
      notes: "Submitted under seal to European Data Protection Board (EDPB) and US Senate Select Committee on Intelligence."

  - manifest_entry:
      evidence_id: "EV-IP-0041"
      title: "Biometric Voiceprint & Facial Vector Extraction From Live Stream Video"
      description: "Automated real-time neural pipeline extracts 512-dimensional d-vector voice embeddings and 3D facial mesh coordinates from public video streams and broadcast feeds for inclusion in synthetic persona generation databases."
      collector:
        name: "Aria Sterling, JD"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "Media pipeline worker container inspection and vector database dump"
        timestamp_utc: "2025-06-30T14:45:00Z"
        original_filename: "biometric_voiceprint_face_vector_extractor_dump.tar.gz"
        file_size_bytes: 512901840
        evidence_hash_sha256: "78f9e0d1c2ba345566112233445566778899aabbccddeeff0011223344556677"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0041-biometrics.tar.gz"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-BIOMETRIC-2025-0041"
      chain_of_custody:
        - action: "collected"
          actor: "Aria Sterling, JD (Cyber Forensics Lead)"
          timestamp_utc: "2025-06-30T14:45:00Z"
          signature: "SIG-ED25519-55667788990011223344aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Biometric Forensics Node AL-07"
          timestamp_utc: "2025-06-30T14:48:30Z"
          signature: "SIG-ED25519-66778899001122334455aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-06-30T14:49:30Z"
          signature: "SIG-ED25519-77889900112233445566aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Biometric Privacy Counsel, bipa-litigation@ghostgate.internal, PGP: 0x99A82BC014F98E11"
      notes: "Severe violation of Illinois Biometric Information Privacy Act (BIPA 740 ILCS 14/) and Texas Capture or Use of Biometric Identifier Act (CUBI)."

  - manifest_entry:
      evidence_id: "EV-IP-0042"
      title: "Medical Record Diagnostic Image Scraping & PACS Server Crawl Logs"
      description: "DICOM PACS image extraction script logs, hospital vendor portal scraping traces, and anonymization failure verification sheets pulling proprietary diagnostic MRI/CT imaging datasets without HIPAA/HITECH authorizations."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Privacy & Cryptographic Integrity Lab"
      collection:
        method: "Hospital imaging portal network audit and DICOM metadata header parse"
        timestamp_utc: "2025-07-04T10:20:10Z"
        original_filename: "pacs_dicom_medical_image_scraping_manifest_audit.json"
        file_size_bytes: 84920194
        evidence_hash_sha256: "89f0e1d2c3ba4566772233445566778899aabbccddeeff001122334455667788"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0042-pacs-dicom.json"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-HIPAA-2025-0042"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-07-04T10:20:10Z"
          signature: "SIG-ED25519-88990011223344556677aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate HIPAA Audit Bridge AL-01"
          timestamp_utc: "2025-07-04T10:22:45Z"
          signature: "SIG-ED25519-99001122334455667788aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-07-04T10:23:30Z"
          signature: "SIG-ED25519-00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Healthcare Privacy Counsel, hhs-ocr@ghostgate.internal, PGP: 0x4F89E012B8891C04"
      notes: "Referred under seal to HHS Office for Civil Rights for criminal HIPAA violations under 42 U.S.C. § 1320d-6."

  - manifest_entry:
      evidence_id: "EV-IP-0043"
      title: "Algorithmic Paywall Circumvention & Copyright Washing Worker Daemon"
      description: "Distributed crawler microservices utilizing stolen session cookies, forged Googlebot user agents, and OCR bypass scrapers to ingest paywalled journalistic, legal, and academic repositories into uncredited training shards."
      collector:
        name: "Aria Sterling, JD"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "Container registry image layer dump and Kubernetes manifest extraction"
        timestamp_utc: "2025-07-08T15:10:00Z"
        original_filename: "paywall_bypass_copyright_washing_daemon_k8s_dump.tar.gz"
        file_size_bytes: 38491024
        evidence_hash_sha256: "90f1e2d3c4ba56778833445566778899aabbccddeeff00112233445566778899"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0043-paywall-bypass.tar.gz"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DMCA-2025-0043"
      chain_of_custody:
        - action: "collected"
          actor: "Aria Sterling, JD (Cyber Forensics Lead)"
          timestamp_utc: "2025-07-08T15:10:00Z"
          signature: "SIG-ED25519-11223344556677889900aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Copyright Audit Node AL-07"
          timestamp_utc: "2025-07-08T15:12:30Z"
          signature: "SIG-ED25519-22334455667788990011aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-07-08T15:13:30Z"
          signature: "SIG-ED25519-33445566778899001122aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: false
        counsel_contact: "Copyright Litigation Counsel, dmca-violations@ghostgate.internal, PGP: 0x99A82BC014F98E11"
      notes: "Direct statutory violation of DMCA 17 U.S.C. § 1201 (Circumvention of Technological Measures)."

  - manifest_entry:
      evidence_id: "EV-IP-0044"
      title: "Global DNS Cache Poisoning & BGP Route Hijacking Telemetry Trace"
      description: "Autonomous System AS13414 / AS13335 BGP route announcement anomaly archives, RPKI invalid prefix route injections, and authoritative DNS cache poisoning logs re-routing high-value institutional traffic through deep-packet inspection proxy caches."
      collector:
        name: "Col. Raymond Shaw"
        affiliation: "Telecommunications & Defense Grid Infrastructure Team"
      collection:
        method: "RIPE NCC RIS raw MRT routing updates and RouteViews BGP collector trace"
        timestamp_utc: "2025-07-12T11:40:00Z"
        original_filename: "bgp_routeviews_as13414_route_hijack_mrt_dump.bz2"
        file_size_bytes: 184920194
        evidence_hash_sha256: "a1f2e3d4c5ba678899445566778899aabbccddeeff00112233445566778899aa"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/surveillance/EV-IP-0044-bgp-hijack.bz2"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-BGP-2025-0044"
      chain_of_custody:
        - action: "collected"
          actor: "Col. Raymond Shaw (Senior Technology Security Lead)"
          timestamp_utc: "2025-07-12T11:40:00Z"
          signature: "SIG-ED25519-44556677889900112233aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Defense BGP Node AL-04"
          timestamp_utc: "2025-07-12T11:43:10Z"
          signature: "SIG-ED25519-55667788990011223344aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-07-12T11:44:00Z"
          signature: "SIG-ED25519-66778899001122334455aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "National Security Counsel, fbi-cyber@ghostgate.internal, PGP: 0x1188FFAA90234190"
      notes: "Referred to Cybersecurity and Infrastructure Security Agency (CISA) and FBI Cyber Division."

  - manifest_entry:
      evidence_id: "EV-IP-0045"
      title: "Planetary AI Model Training Provenance & Merkle Root Chain of Custody Master Log"
      description: "Ghost Gate v13 ultimate master ledger combining 45 forensic evidence artifacts into a single root Merkle tree anchored with Albert Lane Provenance cryptographic signatures, establishing irrevocable proof of systemic global IP misappropriation."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Sovereign Cryptographic Root Consortium"
      collection:
        method: "Ghost Gate v13 deterministic SHA-256 Merkle root compilation over 45 immutable leaves"
        timestamp_utc: "2025-07-16T18:00:00Z"
        original_filename: "ghostgate_v13_planetary_merkle_provenance_master_root.json"
        file_size_bytes: 4892019
        evidence_hash_sha256: "b2f3e4d5c6ba7899005566778899aabbccddeeff00112233445566778899aabb"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/master/EV-IP-0045-planetary-master-root.json"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-APEX-2025-0045"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-07-16T18:00:00Z"
          signature: "SIG-ED25519-77889900112233445566aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Sovereign Root Daemon AL-01"
          timestamp_utc: "2025-07-16T18:02:40Z"
          signature: "SIG-ED25519-88990011223344556677aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Apex"
          timestamp_utc: "2025-07-16T18:03:30Z"
          signature: "SIG-ED25519-99001122334455667788aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: false
        counsel_contact: "Chief General Counsel, legal-provenance@ghostgate.internal, PGP: 0x4F89E012B8891C04"
      notes: "Final cryptographic apex proof anchored across global distributed nodes. Permanent legal immunity preserved under 18 U.S.C. § 1833(b) Defend Trade Secrets Act."