manifests:
  - manifest_entry:
      evidence_id: "EV-IP-0010"
      title: "Foundational Model Weights Exfiltration & Intercompany Checkpoint Sync Log"
      description: "Cryptographic hash manifests, SHA-256 tree verifications, and object-storage sync transaction logs documenting the unauthorized exfiltration of 314-billion parameter mixture-of-experts (MoE) model weights and optimizer states across corporate boundaries pursuant to 18 U.S.C. § 1839(3)."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "Cluster storage audit log parsing and distributed filesystem metadata extraction"
        timestamp_utc: "2024-12-22T08:14:30Z"
        original_filename: "moe_checkpoint_314b_weight_shards_transfer_manifest.json"
        file_size_bytes: 67204910
        evidence_hash_sha256: "0718293a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0010-weights-exfil.json"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2024-0010"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2024-12-22T08:14:30Z"
          signature: "SIG-ED25519-aa00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate DTSA Evidence Gateway AL-07"
          timestamp_utc: "2024-12-22T08:16:00Z"
          signature: "SIG-ED25519-bb11223344556677889900aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2024-12-22T08:17:00Z"
          signature: "SIG-ED25519-cc22334455667788990011aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Special IP Litigation Counsel, dtsa-injunction@ghostgate.internal, PGP: 0x99A82BC014F98E11"
      notes: "Protected disclosure under 18 U.S.C. § 1833(b) demonstrating trade secret transfer without requisite intercompany consideration or IP assignment agreements."

  - manifest_entry:
      evidence_id: "EV-IP-0011"
      title: "Fleet Video Neural Autolabeling Pipeline Source Code & Training Weights"
      description: "Proprietary temporal vision-backbone neural network architecture source code, automated ground-truth labeling toolsets, and occupancy network vector weights misappropriated for non-automotive foundation model spatial reasoning."
      collector:
        name: "Aria Sterling, JD"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "Git repository commit tree audit and binary decompilation disassembly dump"
        timestamp_utc: "2024-12-26T14:22:15Z"
        original_filename: "temporal_vision_autolabeler_decompiled_source_bundle.tar.zst"
        file_size_bytes: 184920194
        evidence_hash_sha256: "18293a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0011-vision-pipeline.tar.zst"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2024-0011"
      chain_of_custody:
        - action: "collected"
          actor: "Aria Sterling, JD (Cyber Forensics Lead)"
          timestamp_utc: "2024-12-26T14:22:15Z"
          signature: "SIG-ED25519-dd33445566778899001122aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate DTSA Evidence Gateway AL-07"
          timestamp_utc: "2024-12-26T14:25:00Z"
          signature: "SIG-ED25519-ee44556677889900112233aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2024-12-26T14:26:00Z"
          signature: "SIG-ED25519-ff55667788990011223344aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Special IP Litigation Counsel, dtsa-injunction@ghostgate.internal, PGP: 0x99A82BC014F98E11"
      notes: "Substantiates DTSA claim under 18 U.S.C. § 1836(b)(1) for unauthorized derivative use of core perception technology."

  - manifest_entry:
      evidence_id: "EV-IP-0012"
      title: "Starlink Phased-Array Beamforming ASIC Microcode & Frequency Hopping Logic"
      description: "Proprietary V-band/Ku-band phased array antenna digital beam steering algorithms, active cancellation DSP coefficients, and electronic counter-countermeasure (ECCM) microcode protected as defense trade secrets."
      collector:
        name: "Col. Raymond Shaw"
        affiliation: "Defense Technology Security & Export Enforcement Unit"
      collection:
        method: "JTAG hardware bus probe capture and firmware binary reverse-engineering audit"
        timestamp_utc: "2024-12-30T10:05:40Z"
        original_filename: "phased_array_beamforming_asic_firmware_rom_dump.bin"
        file_size_bytes: 33554432
        evidence_hash_sha256: "293a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0012-beamforming-firmware.bin"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2024-0012"
      chain_of_custody:
        - action: "collected"
          actor: "Col. Raymond Shaw (Senior Technology Security Lead)"
          timestamp_utc: "2024-12-30T10:05:40Z"
          signature: "SIG-ED25519-00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Defense Technology Gateway AL-04"
          timestamp_utc: "2024-12-30T10:08:10Z"
          signature: "SIG-ED25519-11223344556677889900aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2024-12-30T10:09:00Z"
          signature: "SIG-ED25519-22334455667788990011aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Defense IP Counsel, export-control@ghostgate.internal, PGP: 0x1188FFAA90234190"
      notes: "ITAR Category XI(a)(3) and DTSA double-classified matter. Disclosed under 18 U.S.C. § 1833(b) to Department of Justice National Security Division."

  - manifest_entry:
      evidence_id: "EV-IP-0013"
      title: "Raptor 3 Additive Manufacturing G-Code & SX500 Superalloy Metallurgy Spec"
      description: "Direct metal laser sintering (DMLS) 3D-printing toolpaths, proprietary powder metallurgy specifications for copper-inconel SX500 alloys, and combustion chamber regenerative cooling channel geometries."
      collector:
        name: "Col. Raymond Shaw"
        affiliation: "Aerospace Propulsion & Safety Oversight Team"
      collection:
        method: "Production floor CNC controller memory extraction and CAD engineering vault dump"
        timestamp_utc: "2025-01-04T16:50:12Z"
        original_filename: "raptor3_combustion_chamber_sx500_gcode_cad_master.step"
        file_size_bytes: 412984012
        evidence_hash_sha256: "3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0013-raptor3-gcode.step"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2025-0013"
      chain_of_custody:
        - action: "collected"
          actor: "Col. Raymond Shaw (Senior Technology Security Lead)"
          timestamp_utc: "2025-01-04T16:50:12Z"
          signature: "SIG-ED25519-33445566778899001122aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Aerospace Ingest AL-04"
          timestamp_utc: "2025-01-04T16:54:30Z"
          signature: "SIG-ED25519-44556677889900112233aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-01-04T16:55:30Z"
          signature: "SIG-ED25519-55667788990011223344aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Aerospace Counsel, safety-oversight@ghostgate.internal, PGP: 0x1188FFAA90234190"
      notes: "Documented in support of ex parte civil seizure application under 18 U.S.C. § 1836(b)(2) to prevent unauthorized technology dispersion."

  - manifest_entry:
      evidence_id: "EV-IP-0014"
      title: "Real-Time User Direct Message Embeddings Ingestion Stream Telemetry"
      description: "Database replication CDC (Change Data Capture) pipeline audit establishing high-throughput vectorization and ingestion of end-user private messages into unsegregated LLM fine-tuning datasets."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Privacy & Cryptographic Integrity Lab"
      collection:
        method: "PostgreSQL logical replication slot audit and Debezium Kafka connector trace"
        timestamp_utc: "2025-01-08T11:30:00Z"
        original_filename: "debezium_cdc_dm_vectorization_telemetry_capture.json.gz"
        file_size_bytes: 98401924
        evidence_hash_sha256: "4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0014-dm-vectorization.json.gz"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2025-0014"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-01-08T11:30:00Z"
          signature: "SIG-ED25519-66778899001122334455aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Privacy Audit Bridge AL-01"
          timestamp_utc: "2025-01-08T11:33:15Z"
          signature: "SIG-ED25519-77889900112233445566aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-01-08T11:34:00Z"
          signature: "SIG-ED25519-88990011223344556677aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Whistleblower Counsel, confidential-tcr@ghostgate.internal, PGP: 0x99A82BC014F98E11"
      notes: "Filed confidentially under 18 U.S.C. § 1833(b) whistleblower protection with the Federal Trade Commission and SEC Office of the Whistleblower."

  - manifest_entry:
      evidence_id: "EV-IP-0015"
      title: "Edge CDN TLS Master Secret Logging & eBPF Kernel Traffic Tap Scripts"
      description: "Linux eBPF kernel instrumentation programs and OpenSSL/BoringSSL keylog injection hooks deployed to edge proxy servers (AS13335/AS16509) to decrypt and mirror cross-enterprise API communications."
      collector:
        name: "Aria Sterling, JD"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "Kernel kprobe audit, memory dump inspection, and BPF bytecode disassembly"
        timestamp_utc: "2025-01-12T19:15:22Z"
        original_filename: "ebpf_sockops_tls_keylog_interception_payload.bpf.o"
        file_size_bytes: 249018
        evidence_hash_sha256: "5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0015-ebpf-tls-tap.bpf.o"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2025-0015"
      chain_of_custody:
        - action: "collected"
          actor: "Aria Sterling, JD (Cyber Forensics Lead)"
          timestamp_utc: "2025-01-12T19:15:22Z"
          signature: "SIG-ED25519-99001122334455667788aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Ingestion Pipeline Node AL-07"
          timestamp_utc: "2025-01-12T19:16:40Z"
          signature: "SIG-ED25519-00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-01-12T19:17:30Z"
          signature: "SIG-ED25519-11223344556677889900aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Cyber Crime Counsel, doj-ccips@ghostgate.internal, PGP: 0x6E4C009988DFBA12"
      notes: "Violates 18 U.S.C. § 2511 (Wiretap Act) and DTSA § 1836; submitted under seal as evidence of covert trade secret interception."

  - manifest_entry:
      evidence_id: "EV-IP-0016"
      title: "Ex Parte Civil Seizure Verified Application & Evidentiary Affirmations"
      description: "Verified application, expert declarations, and proposed order for an ex parte civil seizure under 18 U.S.C. § 1836(b)(2) targeting physical and cloud servers holding purloined CAD models, weights, and source code."
      collector:
        name: "Aria Sterling, JD"
        affiliation: "GhostGate Legal Strategy & Federal Practice Division"
      collection:
        method: "Federal court docket sealed filing package preparation"
        timestamp_utc: "2025-01-16T13:00:00Z"
        original_filename: "dtsa_1836_ex_parte_civil_seizure_verified_application.pdf"
        file_size_bytes: 8492015
        evidence_hash_sha256: "6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0016-seizure-application.pdf"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2025-0016"
      chain_of_custody:
        - action: "collected"
          actor: "Aria Sterling, JD (Cyber Forensics Lead)"
          timestamp_utc: "2025-01-16T13:00:00Z"
          signature: "SIG-ED25519-22334455667788990011aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Court Filing Gateway AL-02"
          timestamp_utc: "2025-01-16T13:02:10Z"
          signature: "SIG-ED25519-33445566778899001122aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-01-16T13:03:00Z"
          signature: "SIG-ED25519-44556677889900112233aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Lead Federal Counsel, federal-litigation@ghostgate.internal, PGP: 0x6E4C009988DFBA12"
      notes: "Strictly confidential work-product and verified complaint pleading extraordinary relief under DTSA statutory standards."

  - manifest_entry:
      evidence_id: "EV-IP-0017"
      title: "Inter-Entity Monorepo Token Laundering & Automated Code Sync Scripts"
      description: "GitHub Actions workflow YAMLs, personal access token (PAT) rotation scripts, and automated webhook dispatchers silently replicating private enterprise repositories across independent organizational tenancies."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Cyber Forensics & IP Misappropriation Unit"
      collection:
        method: "GitHub audit log export and CI/CD runner execution trace analysis"
        timestamp_utc: "2025-01-20T10:45:15Z"
        original_filename: "github_actions_cross_tenant_mirroring_pipeline_audit.tar.gz"
        file_size_bytes: 12490184
        evidence_hash_sha256: "7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0017-cicd-mirroring.tar.gz"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2025-0017"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-01-20T10:45:15Z"
          signature: "SIG-ED25519-55667788990011223344aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate CI/CD Audit Node AL-01"
          timestamp_utc: "2025-01-20T10:47:30Z"
          signature: "SIG-ED25519-66778899001122334455aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-01-20T10:48:00Z"
          signature: "SIG-ED25519-77889900112233445566aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Special IP Litigation Counsel, dtsa-injunction@ghostgate.internal, PGP: 0x99A82BC014F98E11"
      notes: "Proves systematic unauthorized transfer of proprietary source trees across disparate corporate AWS/Azure/GCP tenancies."

  - manifest_entry:
      evidence_id: "EV-IP-0018"
      title: "HSM Master Partition Access Logs & Sovereign Key Derivation Extracts"
      description: "Hardware Security Module (HSM) PKCS#11 session logs, key derivation function (KDF) parameter seeds, and tenant partition policy overrides used to decrypt proprietary model artifact vaults."
      collector:
        name: "Dr. Evelyn Vance"
        affiliation: "GhostGate Cryptographic Engine & Hardware Security Lab"
      collection:
        method: "HSM administrative tamper-evident serial syslog audit"
        timestamp_utc: "2025-01-24T15:10:00Z"
        original_filename: "thales_luna_hsm_pkcs11_session_audit_tamper_log.log"
        file_size_bytes: 18492019
        evidence_hash_sha256: "8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a"
      storage:
        storage_uri: "s3://ghostgate-audit-vault-worm/dtsa/EV-IP-0018-hsm-session-audit.log"
        storage_type: "s3-worm"
        access_log_id: "LOG-GG-DTSA-2025-0018"
      chain_of_custody:
        - action: "collected"
          actor: "Dr. Evelyn Vance (Chief Forensic Auditor)"
          timestamp_utc: "2025-01-24T15:10:00Z"
          signature: "SIG-ED25519-88990011223344556677aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "uploaded"
          actor: "GhostGate Cryptographic Root Daemon AL-01"
          timestamp_utc: "2025-01-24T15:12:40Z"
          signature: "SIG-ED25519-99001122334455667788aabbccddeeff00112233445566778899aabbccddeeff"
        - action: "sealed"
          actor: "Albert Lane Master Provenance Ledger Root"
          timestamp_utc: "2025-01-24T15:13:30Z"
          signature: "SIG-ED25519-00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
      legal:
        legal_hold: true
        redaction_required: true
        counsel_contact: "Cryptographic Counsel, security-provenance@ghostgate.internal, PGP: 0x4F89E012B8891C04"
      notes: "Cryptographic root keys preserved under strict WORM storage with zero-knowledge verification tokens under 18 U.S.C. § 1833(b)."