# 4.2.3.2.1 TC_eUICC_ES8+.InitialiseSecureChannel — `-man` ↔ `-cas` diff 报告
> **交付形态说明**：本报告随专家交付包分发——`-man`/`-cas` 脚本包 zip 与 190server HTML 执行日志已内联至 `packages/`、`evidence-html/`，相应路径已相对化；TTR、spec_intl、caseir 等仓内留痕仍为生成机原始路径（未随包）。

- 生成时间：2026-10-08 22:57:11 ｜引擎：holiday-blk5/0.1｜配对状态：`PAIRED`
- 分母口径：卡侧 61 之一

## 1. 配对与包

| 侧 | 包/源 | sha256 | 源类型 | 入口用例 |
|---|---|---|---|---|
| `-man` | 4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-man.zip | `4f7d22b8a8a6daab9c309b24bc163d162b96a30d267360e2222a2cecfa9c8dfa` | zip | TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation |
| `-cas` | 4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-cas.zip | `83d84181fd8f41e04adb2e5b3c6909e0439bc9c5ab84406979a1e633d5c6207e` | zip | — |

- man 源路径：`../../packages/man/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-man.zip`
- cas 源路径：`../../packages/cas/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-cas.zip`
- 上游来源：{"man_ledger": true, "cas_ledger": true, "naming_map": true, "html_probe": true, "man_package": true, "cas_package": true}
- 适用性：naming-map=`M` ["M", "M", "M", "M", "M"]；caseir=`M`

## 2. 执行摘要（双方 job/终态）

| 侧 | 终态/计划 | 备注 | ErrorCount | job_id | 业务状态 | TTR | 诊断包 |
|---|---|---|---|---|---|---|---|
| `-man` | `ok` | `_ok` 复用（结构 A1-A7 PASS；`_ok` run 无厂商错误行） | 0 | `20261007_132628:12b84ab51cc746adaf2741c35c01418c` | — | `/Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/logs/20260907_182247_ok/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation.ttr` | `—` |
| `-cas` | `failed` | 纯 native 零卡态前置（N0） | 45 | `1627bd881a5f49a1b9de112360a166cf` | — | `/Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/logs/1627bd88_gapfix1/result/TC_eUICC_ES8_InitialiseSecureChannel/TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps.ttr` | `—` |
- cas 块4账本：decision=`RERUN`；route=`native_N0`；live 事件 2 条（4.6 波次进行中；以块4终版账本为准）
- cas 4.6 波次最新执行：terminal=`failed`；stage=`cas_gapfix_rerun`；job=`1627bd881a5f49a1b9de112360a166cf`；gaps=["gapfix-rerun：job 终态 succeeded，业务判 failed（error_count=4）；failed 亦为有效终态，如实登记"]
- cas 失败归因引用（块4）：`b3-attribution.md`
- cas 证据来源分层：`RERUN` → 本轮 4.6 波次执行

## 3. HTML 执行日志状态

- `-man`：**NATIVE**（`../../evidence-html/4.2.3.2.1/man/TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation.html`；sha256 `1b51d38dfaf867c24d1f1d725c9bdd2ffa757d51f74f904cb6b496dca9385540`；135916 bytes）
- `-cas`：**NATIVE**（`../../evidence-html/4.2.3.2.1/cas/TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps.html`；sha256 `eb0c4dc337cf804e285e44bf92075d8c5a825522614853a7f5be3dc2930f6bfc`；12865 bytes）
- 纪律：原生缺失 → `HTML_UNAVAILABLE` 显式阻断（附探针结论）；派生件仅标 `DERIVED_NOT_NATIVE`，不冒充原生。

## 4. L1 脚本/依赖/命名差异（源文件闭包级）

- 闭包规模：man 34 文件 / cas 82 文件；同名 31（字节同 30，内容异 1）
- 同名内容异：`Import/TestCase_SGP_23.js`
- man-only 文件 3：`ESIM_TEST_SGP_23.UCE`, `ESIM_TEST_SGP_23.sol`, `MANIFEST.json`
- cas-only 文件 51：`Import/CapInfo.js`, `Import/ExecuteTestCase.js`, `Import/ExecuteTestCase_CSC.js`, `Import/ExecuteTestCase_LoadProfile_via_bip.js`, `Import/ExecuteTestCase_Local_Management.js`, `Import/ExecuteTestCase_Non_Telecom_Profile.js`, `Import/ExecuteTestCase_Performance.js`, `Import/ExecuteTestCase_PressureTest.js`, `Import/ExecuteTestCase_ProfileFormatTest_V_2_3_1.js`, `Import/ExecuteTestCase_ProfileServicesListTest.js` …
- 注：man 包＝切片最小闭包（`script/` 投影）；cas 包＝slice_native 全工程投影（厂商参照闭包＋生成体）。闭包规模差为打包形态差异；同名文件字节差集中于 `Import/TestCase_SGP_23.js`（TC 入口本体）。

### 4.1 入口代码对照

- 行数：man 273 / cas 311；字符：man 11827 / cas 23930
- man 顶层调用 Top：[["TestStepStart2", 50], ["TraceStart", 5], ["ResetCard", 5], ["TS_TERMINAL_CAPABILITY_cmd", 5], ["TS_MANAGE_CHANNEL_OPEN", 5], ["TS_SELECT", 5], ["RSP_profile_load_procedure_LPAd", 5], ["ES10b_GetEUICCInfo1", 5], ["ES10b_GetEUICCChallenge", 5], ["ES10b_AuthenticateServer", 5]]
- cas bind 调用：[["checkData", 15], ["sendApdu", 7]]

| 方言映射对 | 命中数 |
|---|---|
| ResetCard() ↔ bind.resetAndAtr() | 5 |
| TS_*_cmd() ↔ bind.* 命令封装 | 15 |

<details><summary>unified diff（截断预览）</summary>

```diff
--- man
+++ cas
@@ -1,272 +1,310 @@
-// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation + TC_eUICC_ES8_InitialiseSecureChannel_02_Error_Invalid_SMDP_Signature + TC_eUICC_ES8_InitialiseSecureChannel_03_Error_Invalid_Transaction_Identifier + TC_eUICC_ES8_InitialiseSecureChannel_04_Error_Invalid_CRT_Values + TC_eUICC_ES8_InitialiseSecureChannel_05_Error_InitialiseSecureChannel_request_while_Secure_Channel_Session_is_ongoing (extracted verbatim)
-
-function TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation()
-{
-
-	tracenamestr = "测试目的：执行InitialiseSecureChannel，remoteOpId为#INVALID_REMOTE_OP_ID";
-	curDis.TraceStart(sno++,tracenamestr);
-
-	curDis.TestStepStart2(stno++,"复位；");
-	ResetCard();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送Terminal Capability命令；");
-	TS_TERMINAL_CAPABILITY_cmd();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送MANAGE_CHANNEL命令，打开辅助逻辑通道；");
-	TS_MANAGE_CHANNEL_OPEN();
-
-	curLogicChannel = 1;
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送SELECT命令，选择ISD-R；");
-	TS_SELECT("Select ISD",ISD_R_AID,"9000");
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccInfo1Request；");
-	var Profile_load_procedure = new RSP_profile_load_procedure_LPAd(PROFILE_OPERATIONAL1_DATA);
-	Profile_load_procedure.ICCID = ICCID_OP_PROF1;
-	Profile_load_procedure.ES10b_GetEUICCInfo1();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccChallengeRequest；");
-	Profile_load_procedure.ES10b_GetEUICCChallenge();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行AuthenticateServerRequest；");
-	ctxParamsForCommonAuthentication = "A13A800400000000A1288003050000810308000082030100008303010000840302000085030200008603090000870302010082080000000011111111";
-	Profile_load_procedure.serverAddress = TEST_DP_ADDRESS1;
-	Profile_load_procedure.ES10b_AuthenticateServer();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行PrepareDownloadRequest；");
-	Profile_load_procedure.ES10b_PrepareDownload();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccDataRequest(GetEID)；");
-	Profile_load_procedure.ES10b_GetEID();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行BoundProfilePackage；--Invalid RemoteOpId");
-	Profile_load_procedure.hostId = "47534D4120534D2D5858";
-	Profile_load_procedure.isErrorTest=true;
-	Profile_load_procedure.remoteOpId ="08";
-	Profile_load_procedure.bppCommandId="00";
-	Profile_load_procedure.errorReason="05";
-	Profile_load_procedure.simaResponse = "";
-	Profile_load_procedure.ES10b_LoadBoundProfilePackage();
-
-	var errorReason = Profile_load_procedure.profInstallationResult.profileInstallationResultData.finalResult.ErrorResult.errorReason;
-	curStrHandle.CheckData("05", errorReason, "errorReason");
-
-	RecoverCard();
+// Author: 卡思Cas智能体
+// Date: 20261005-152741
+// Function: （purpose 原文未由 SGP.23 该 TC 提供，corpus vacuum 登记）TC_eUICC_ES8+.InitialiseSecureChannel，Test Sequence #01–#05（全部 Error 序列）；见 steps 前缀，适用性 M。
+// Test points: S4-C1 SW；S4-C2 SW；S4-C2 resp present；S8-C1 SW；S8-C2 SW；S8-C2 resp present；S12-C1 SW
+//   S12-C2 SW；S12-C2 resp present；S16-C1 SW；S16-C2 SW；S16-C2 resp present；S20-C1 SW；S21-C1 SW
+//   S22-C1 SW acceptable
+// 本函数由 CaseIR 4.2.3.2.1 编译生成（fullwave-blindgen-live-70，SGP.23 v1.16 × SGP.22 v2.7）：字节权威=CaseIR，非誊录黄金脚本。
+// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md).
+// 适用性 M：编译期门，运行时由 harness 环境前置承担。
+// PRECONDITION (declared, NOT compiled): initial_conditions 缺语料过程体（Annex C.2 absent from input package, corpus vacuum）: IC 序列属测试工具/卡态编排责任，本脚本不虚构初始化步骤；语义影响见 CaseIR open_items。
+// GIC 通信初始化+ISD-R 选择+相互认证+End User Confirmation+PrepareDownload（#PREP_DOWNLOAD_NO_CC）: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// GIC-sub PROC_EUICC_INITIALIZATION_SEQUENCE（R2 闭合，K_annexC2_procs 表1256：RESET/[SELECT_MF]/[TERMINAL_CAPABILITY_LPAd]/[TERMINAL_PROFILE]）: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// GIC-sub PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR（R2 闭合，K_annexC2_procs 表1258：[MANAGE_CHANNEL_OPEN]/MTD_SELECT(#ISD_R_AID)）: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+function TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps() {
+    var bind = curBind;
+
+    // 步骤 1：Seq#01 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA>（tc_step；non_wire）
+    // test-tool internal preparation (no APDU face): runtime-domain
+    // values per CaseIR unresolved (G Annex B generation rules);
+    // no fabricated bytes emitted here.
+
+    // 步骤 2：Seq#01 IC2: <BPP> = MTD_GENERATE_BPP（tc_step）
+    // BPP synthesized (4.2.3.2.1 seq#1, structural layer, SCP03t-unprotected): 1067 bytes; segments: INIT=191B, A0=22B, A1=58B, A3=796B.
+    // Segment bytes are runtime-domain (BPP load step data=null per CaseIR unresolved); not injected into this script. Provenance:
+    //   [SPEC] TC — SGP.23 4.2.3.2.1 seq#1 接线（段选择/注入面）
+    //   [SPEC] BF36 — SGP.22 §2.5.4 :1566 BoundProfilePackage [54]
+    //   [SPEC] BF36/A0 — Table 4 :1588 firstSequenceOf87
+    //   [SPEC] BF36/A1 — Table 4 :1590 sequenceOf88
+    //   [SPEC] BF36/A3 — Table 4 :1595 sequenceOf86
+    //   [HYPOTHESIS] 87/88/86 段值 — UNPROTECTED：明文承载，SCP03t 包壳属后续 lane
+    //   [SPEC] BF23 — SGP.22 §5.5.1 :7241 InitialiseSecureChannelRequest [35]
+    //   [SPEC] BF23/82 remoteOpId — SGP.22 :1400 RemoteOpId [2] INTEGER
+    //   [HYPOTHESIS] BF23/80 transactionId — SM-DP+ 会话值，Annex E 缺席，调用方注入
+    //   [SPEC] BF23/A6 controlRefTemplate — SGP.22 :7255-7263 CRT 子集
+    //   [SPEC] BF23/A6/80 keyType — SGP.22 :7257 AES='88'
+    //   [SPEC] BF23/A6/81 keyLen — SGP.22 :7259 SHALL be 0x10
+    //   [HYPOTHESIS] BF23/A6/84 hostId — Host ID 值，Annex E 缺席
+    //   [HYPOTHESIS] BF23/5F49 smdpOtpk — otPK.DP.ECKA，需真实密钥协商 lane
+    //   [HYPOTHESIS] BF23/5F37 smdpSign — SK.DPbp.ECDSA 签名，需签名 lane
+    //   [HYPOTHESIS] BF23/82 remoteOpId — 注入 invalid_op_id：未定义 RemoteOpId（4.2.3.2.1 seq#01）
+    //   [SPEC] BF24 — SGP.22 §5.5.2 :7319 ConfigureISDPRequest [36]
+    //   [HYPOTHESIS] BF24/B8 dpProprietaryData — dpOid 与填充为 SM-DP+ 自有树自定值（Annex E 缺席）；变体 nominal
+    //   [SPEC] BF25 — SGP.22 §5.5.3 :7365 StoreMetadataRequest [37]
+    //   [SPEC] BF25/5A iccid — SGP.22 :1398 Iccid [APPLICATION 26] tag '5A'；值域 HYPOTHESIS（Annex E 缺席，需与 UPP EF-ICCID 一致）
+    //   [HYPOTHESIS] BF25/91 serviceProviderName — Annex E 缺席
+    //   [HYPOTHESIS] BF25/92 profileName — Annex E 缺席
+    //   [SPEC] BF25/95 profileClass — SGP.22 :13218 ProfileClass INTEGER；取 operational(2)
+    //   [SPEC] UPP — PITS ProfileElement 序列 header+mf+usim+end（最小集）
+    //   [SPEC] PE header — PITS asn:26 ProfileElement header CHOICE [0]
+    //   [SPEC] PE header/version — PITS asn:67-68 2/3
+    //   [SPEC] PE header/profileType — PITS asn:942 Test Profile 值
+    //   [HYPOTHESIS] PE header/iccid — eUICC 忽略此值（SGP.22 :7511）；随参数化 ICCID
+    //   [SPEC] PE header/services+GFSTE — PITS asn:946-958 子集转录
+    //   [SPEC] PE mf — PITS asn:222 PE-MF + mfVal :961-1039
+    //   [HYPOTHESIS] PE mf/ef-iccid — ICCID 参数化（EF 编码形态）；其余模板值 SPEC
+    //   [SPEC] PE usim — PITS asn:284 PE-USIM + usimValue :1166-1218
+    //   [HYPOTHESIS] PE usim/ef-imsi — IMSI 参数化（mccMnc+MSIN）；TBCD 编码面 3GPP 24.008 SPEC
+    //   [SPEC] PE end — PITS asn:906 PE-End + endVal :2106 id=99
+
+    // 步骤 3：Seq#01 IC3: Split the <BPP> into several segments arrays named: <BPP_SEG_INIT>, <BPP_SEG_A0>, <BPP_SEG_A1>, <BPP_SEG_A3>（tc_step）
+    // BPP segment declaration (no APDU face): <BPP_SEG_INIT>, <BPP_SEG_A0>, <BPP_SEG_A1>, <BPP_SEG_A3>.
+    // Segment partitioning lives in bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651 segment table; single source of segmentation knowledge — wire sends BPP_SEG_INIT first).
+    // Segment bytes are runtime-domain (BPP synthesized at the MTD_GENERATE_BPP step); not injected into this script; load steps follow the SCRIPT data=null contract.
…（差异行超限，共 584 行，此处截断）
```

</details>
### 4.2 UCE/命名对照

- man：`ESIM_TEST_SGP_23.UCE`；入口 [('TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation', 'ES8(SMDP+ -- eUICC):InitialiseSecureChannel', 'Import\\\\ExecuteTestCase_SGP_23.js(TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}
- cas：`TC_eUICC_ES8_InitialiseSecureChannel/TC_eUICC_ES8_InitialiseSecureChannel.uce`；入口 [('TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps', 'TC_eUICC_ES8_InitialiseSecureChannel', 'Import\\\\ExecuteTestCase_spec.js(TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}

## 5. L2 步骤/APDU/step_map 差异（结构化对齐）

- 命令计数：man 59 / cas 0；精确对齐 0，核心（CLA·INS·P1·P2·Lc）同 0，man-only 59，cas-only 0

| # | `-man` | `-cas` | 对齐 |
|---|---|---|---|
| — | man-only: `@RESET`, `80AA000007A9058100830137`, `0070000000`, `0070000001`, `01A4040010A0000005591010FFFFFFFF8900000100`, `01C0000021`, `81E2910003BF2000`, `01C00000A9`, `81E2910003BF2E00`, `01C0000015`, `81E21100FFBF38820322304E80106B8902099F9C…355040A`, `81E21101FF0C0752535054455354310B30090603…10BE530` | | |

## 6. L3 规范字段/Expected/REQ/通过条件差异

- spec：/Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/spec_intl/SGP.23-v1.16_4.2.3_InitialiseSecureChannel.md（风格：mapping）；caseir：`/Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/caseir_materialized_gate.json`

spec_intl 为人工核订映射表风格（规范步骤 ↔ 厂商脚本实现 ↔ 实跑结果）：

| 规范步骤 | man 脚本实现 | man 实跑结果 |
|---|---|---|
| General IC 链（OP1 not loaded；选 ISD-R＋鉴权＋#PREP_DOWNLOAD_NO_CC 已发） | `ResetCard()`（L10）→ `TS_TERMINAL_CAPABILITY_cmd()`（L13）→ `TS_MANAGE_CH | 通过（复位 APDU4 起全链 APDU1-APDU113 绿；AuthenticateServer 后"卡片返回签名数据正确" APDU7 |
| IC1/IC2 生成 BPP（#INIT_SC_INVALID_OP_ID：remoteOpId=08） | `isErrorTest=true`（L44）+ `remoteOpId="08"`（L45，错误注入机器载体）+ `bppCommandI | 通过（INIT 段 Transport Command APDU114 `BF36820982BF2381B0820108…`——**82  |
| IC3 段切分（INIT/A0/A1/A3） | `ES10b_LoadBoundProfilePackage()`（L49，过程内部按错误注入提前终止于 INIT 段） | 通过（INIT 段链式 STORE DATA SW=9000 逐段在案，无 A0 后续——错误路径于 INIT 段即返回 PIR） |
| 1 BPP_SEG_INIT → #R_PIR_INVALID_OP_ID＋euiccSignPIR 验签（RQ55_012 等） | 同上过程内部错误路径检查（RSP_Test_Procedure.js isErrorTest 分支：transactionId/smdpOi | 通过（SW 期望 9000=实际 9000（APDU117/118）；PIR `BF37` 响应 APDU115；transactionId |
| （收尾，非规范步骤） | `RecoverCard()`（L54） | 通过（Transaction 2 APDU141-APDU260 MemoryReset 删 OP/TP＋Reset default SM- |

cas CaseIR 步骤/检查：

| 步 | 动作 | checks | REQ |
|---|---|---|---|
| 1 | Seq#01 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 2 | Seq#01 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_OP_ID, #CONF_ISD | [] | [] |
| 3 | Seq#01 IC3: Split the <BPP> into several segments arrays named: <BPP_S | ["S3-C1"] | [] |
| 4 | Seq#01 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S4-C1", "S4-C2", "S4-C3", "S4-C4"] | ["RQ31_162", "RQ31_163", "RQ55_012", "RQ55_015", "RQ55_023", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 5 | Seq#02 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 6 | Seq#02 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_SIGN, #CONF_ISDP | [] | [] |
| 7 | Seq#02 IC3: Execute the step IC3 of the Test Sequence #01（切分为 <BPP_SEG | [] | [] |
| 8 | Seq#02 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S8-C1", "S8-C2", "S8-C3", "S8-C4"] | ["RQ31_162", "RQ31_163", "RQ55_011", "RQ55_015", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 9 | Seq#03 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 10 | Seq#03 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_TRANS_ID, #CONF_ | [] | [] |
| 11 | Seq#03 IC3: Execute the step IC3 of the Test Sequence #01（切分） | [] | [] |
| 12 | Seq#03 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S12-C1", "S12-C2", "S12-C3", "S12-C4"] | ["RQ31_162", "RQ31_163", "RQ55_013", "RQ55_015", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 13 | Seq#04 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 14 | Seq#04 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_CRT, #CONF_ISDP_ | [] | [] |
| 15 | Seq#04 IC3: Execute the step IC3 of the Test Sequence #01（切分） | [] | [] |
| 16 | Seq#04 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S16-C1", "S16-C2", "S16-C3"] | ["RQ31_162", "RQ31_163", "RQ55_014", "RQ55_015", "RQ55_019", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 17 | Seq#05 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 18 | Seq#05 IC2: <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF | [] | [] |
| 19 | Seq#05 IC3: Execute the step IC3 of the Test Sequence #01（切分） | [] | [] |
| 20 | Seq#05 IC4: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>)（首次建立安全通道会话） | ["S20-C1"] | [] |
| 21 | Seq#05 IC5: MTD_STORE_DATA_SCRIPT(<BPP_SEG_A0>)（推进安装，保持安全通道会话进行中） | ["S21-C1"] | [] |
| 22 | Seq#05 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>)（安全通道会话进行中再次发起 Initiali | ["S22-C1", "S22-C2"] | ["RQ55_010", "RQ57_041_1", "RQ57_013", "RQ57_016"] |

### 6.1 充分性分析（启发式，不作最终裁定）

- cas：`GAPS_FOUND`（全步有检查=True；REQ 全覆盖=False；ErrorCount==0=False）
- cas 物化核对（启发式旁证，权威见下行 attestation）：声明检查 20 项 / 生成体 checkData 15 次 / S 标号重合 11 / 计数缺口 5 / 形态 `DEFICIT`；执行面 `FAIL`（计数缺口须结合绑定层隐含断言核验，非直接判缺陷）
- **cas 编译器自证（check_attestation，同批构建）**：声明 None = js 11 + binding 9 + gap 0；缺口判定以本行为权威（启发式计数仅旁证）
  - binding 覆盖示例：`S3-C1`→binding:bpp_split_per_annexB_segment_table(segment_bpp;SGP.22-2.；`S4-C3`→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime；`S4-C4`→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime；`S8-C3`→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime；`S8-C4`→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime
- cas 注释面登记检查（未以 checkData 物化、代码内有注释说明）：['S12-C3', 'S12-C4', 'S16-C3', 'S22-C2', 'S3-C1', 'S4-C3', 'S4-C4', 'S8-C3', 'S8-C4']
- man：映射行 5；TTR 期望/实际回声 104；厂商工具内置审计（TTR 期望/实际回声行为证据）；脚本字节级充分性不可完全外部验证
- cas 信息步（无线上断言义务）：[1, 2, 5, 6, 7, 9, 10, 11, 13, 14, 15, 17, 18, 19]
- REQ 声明面 vs caseir 引用面差异（1 项，非等价缺口判定）：['**RQ31_162/RQ31_163**--PIR 返回与 euiccSignPIR 签名）']
- caseir open_items：
  - General IC 编排（初始化/选 ISD-R/相互认证/End User Confirmation/PrepareDownload）属执行侧前置，语料仅给锚点描述
  - #INIT_SC_*、#CONF_ISDP_PROF1、#METADATA_OP_PROF1 常量字节不在输入包——BPP 与命令数据不可闭合；R2 已闭合 InitialiseSecureChannelRequest 外层结构（BF23/5F49/5F37 + CRT 静态段，S22_init_sc.md:51-73）
  - <OTPK/OT_SK_S_SM_DP+_ECKA>、<S_ENC>/<S_MAC>/<S_INIT_MAC>、euiccSignPIR/证书均为执行期动态值
  - 每序列执行后的 CU 清理过程属测试工具职责，语料未含

## 7. 分类结论（封闭枚举）

| 轴 | 计数 | 说明 |
|---|---|---|
| `RUN_DIFF` | 1 | man 通过 / cas 失败 |
| `SCRIPT_DIALECT` | 54 | 闭包文件差：man-only 3 / cas-only 51 |
| `GEN_DIFF` | 60 | 命令序列差：man-only 59 / cas-only 0；REQ 覆盖缺口：['**RQ31_162/RQ31_163**--PIR 返回与 euiccSignPIR 签名）'] |

| 侧 | 根因候选（七类，启发式签名） | 签名 |
|---|---|---|
| cas | `card_error` | `Connect Reader 失败|card is NOT connected|SW=0000|SW=00000000` |

> 签名为文本面启发式命中（如 `6D00` 等 SW 亦可能是负例期望值），须结合 Expected 面核验后方可定论。

- 置信度：heuristic；需人工复核：False

## 8. 证据路径

- man 包：`../../packages/man/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-man.zip`
- man TTR：`/Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/logs/20260907_182247_ok/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation.ttr`
- cas 包/源：`../../packages/cas/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-cas.zip`
- cas TTR：`/Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/logs/1627bd88_gapfix1/result/TC_eUICC_ES8_InitialiseSecureChannel/TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps.ttr`
- spec_intl：`/Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/spec_intl/SGP.23-v1.16_4.2.3_InitialiseSecureChannel.md`
- caseir：`/Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/caseir_materialized_gate.json`
- step_map：`—`