# 4.2.19.2.1 TC_eUICC_ES10b.CancelSessionNIST — `-man` ↔ `-cas` diff 报告
> **交付形态说明**：本报告随专家交付包分发——`-man`/`-cas` 脚本包 zip 与 190server HTML 执行日志已内联至 `packages/`、`evidence-html/`，相应路径已相对化；TTR、spec_intl、caseir 等仓内留痕仍为生成机原始路径（未随包）。

- 生成时间：2026-10-08 22:57:10 ｜引擎：holiday-blk5/0.1｜配对状态：`PAIRED`
- 分母口径：卡侧 61 之一

## 1. 配对与包

| 侧 | 包/源 | sha256 | 源类型 | 入口用例 |
|---|---|---|---|---|
| `-man` | 4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-man.zip | `81f7e1332ed6cd578911e0d63069275c8eac5a9aa445d43d7c320d505b7bbe59` | zip | TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection |
| `-cas` | 4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-cas.zip | `f0496489b15efd34d5a17697e1fcbddc40c9469605d594a68ad458fceb219fa5` | zip | — |

- man 源路径：`../../packages/man/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-man.zip`
- cas 源路径：`../../packages/cas/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-cas.zip`
- 上游来源：{"man_ledger": true, "cas_ledger": true, "naming_map": true, "html_probe": true, "man_package": true, "cas_package": true}
- 适用性：naming-map=`C001` ["C001", "C001", "C001", "C001", "C001"]；caseir=`C001`

## 2. 执行摘要（双方 job/终态）

| 侧 | 终态/计划 | 备注 | ErrorCount | job_id | 业务状态 | TTR | 诊断包 |
|---|---|---|---|---|---|---|---|
| `-man` | `ok` | `_ok` 复用（结构 A1-A7 PASS；`_ok` run 无厂商错误行） | 0 | `20261007_124858:61bf65e411544df9abbe6a27c824590f` | — | `/Users/yuhu/cas/原料/切片/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST/logs/20260907_203658_ok/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection.ttr` | `—` |
| `-cas` | `failed` | 纯 native 零卡态前置（N0） | 89 | `dae4762826344257b8167be8c01af044` | — | `/Users/yuhu/cas/experiments/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-20261004_021946/logs/dae4762826344257b8167be8c01af044/result/TC_eUICC_ES10b_CancelSessionNIST/TC_eUICC_ES10b_CancelSessionNIST_01_08_merged.ttr` | `—` |
- cas 块4账本：decision=`RERUN`；route=`native_N0`；live 事件 2 条（4.6 波次进行中；以块4终版账本为准）
- cas 4.6 波次最新执行：terminal=`failed`；stage=`verify`；job=`dae4762826344257b8167be8c01af044`；gaps=["trace verdict=FAIL", "S1-SW: 期望 SW=9000，实际值 '6D00'（行 11）不符——证据矛盾", "S3-SW: 期望 SW=9000，实际值 '6D00'（行 22）不符——证据矛盾", "S5-SW: 期望 SW=9000，实际值 '6D00'（行 33）不符——证据矛盾", "S7-SW: 期望 SW=9000，实际值 '6D00'（行 44）不符——证据矛盾", "S9-SW: 期望 SW=9000，实际值 '6D00'（行 55）不符——证据矛盾", "结果通道 verdict='FAIL'"]
- cas 失败归因引用（块4）：`b5-attribution.md`, `b7-attribution.md`
- cas 证据来源分层：`RERUN` → 本轮 4.6 波次执行

## 3. HTML 执行日志状态

- `-man`：**NATIVE**（`../../evidence-html/4.2.19.2.1/man/TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection.html`；sha256 `df50d9d85d5c5735951e79894b491a6cdf0a55ec2940cfa3662aa35ec3bd24e3`；142391 bytes）
- `-cas`：**NATIVE**（`../../evidence-html/4.2.19.2.1/cas/TC_eUICC_ES10b_CancelSessionNIST_01_08_merged.html`；sha256 `7f55a46eea2d4e3b788456f49dcef34519998e36a6a1089d916e9fc30a184625`；29322 bytes）
- 纪律：原生缺失 → `HTML_UNAVAILABLE` 显式阻断（附探针结论）；派生件仅标 `DERIVED_NOT_NATIVE`，不冒充原生。

## 4. L1 脚本/依赖/命名差异（源文件闭包级）

- 闭包规模：man 34 文件 / cas 82 文件；同名 31（字节同 30，内容异 1）
- 同名内容异：`Import/TestCase_SGP_23.js`
- man-only 文件 3：`ESIM_TEST_SGP_23.UCE`, `ESIM_TEST_SGP_23.sol`, `MANIFEST.json`
- cas-only 文件 51：`Import/CapInfo.js`, `Import/ExecuteTestCase.js`, `Import/ExecuteTestCase_CSC.js`, `Import/ExecuteTestCase_LoadProfile_via_bip.js`, `Import/ExecuteTestCase_Local_Management.js`, `Import/ExecuteTestCase_Non_Telecom_Profile.js`, `Import/ExecuteTestCase_Performance.js`, `Import/ExecuteTestCase_PressureTest.js`, `Import/ExecuteTestCase_ProfileFormatTest_V_2_3_1.js`, `Import/ExecuteTestCase_ProfileServicesListTest.js` …
- 注：man 包＝切片最小闭包（`script/` 投影）；cas 包＝slice_native 全工程投影（厂商参照闭包＋生成体）。闭包规模差为打包形态差异；同名文件字节差集中于 `Import/TestCase_SGP_23.js`（TC 入口本体）。

### 4.1 入口代码对照

- 行数：man 450 / cas 405；字符：man 17479 / cas 33079
- man 顶层调用 Top：[["TestStepStart", 87], ["ES10b_AuthenticateServer", 16], ["ES10b_PrepareDownload", 11], ["check_Applicability_of_tests_RSP_SGP23_test", 8], ["TraceStart", 8], ["Ini_powerOn_eUICC_LPAe_not_activate", 8], ["TS_MANAGE_CHANNEL_OPEN", 8], ["TS_SELECT", 8], ["RSP_profile_load_procedure_LPAd", 8], ["ES10b_GetEUICCInfo1", 8]]
- cas bind 调用：[["checkData", 76], ["sendApdu", 12]]

| 方言映射对 | 命中数 |
|---|---|
| TS_*_cmd() ↔ bind.* 命令封装 | 16 |

<details><summary>unified diff（截断预览）</summary>

```diff
--- man
+++ cas
@@ -1,449 +1,404 @@
-// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection + TC_eUICC_ES10b_CancelSessionNIST_02_Nominal_End_User_Postponed + TC_eUICC_ES10b_CancelSessionNIST_03_Nominal_Timeout + TC_eUICC_ES10b_CancelSessionNIST_04_Nominal_PPR_not_allowed + TC_eUICC_ES10b_CancelSessionNIST_05_Nominal_Metadata_Mismatch + TC_eUICC_ES10b_CancelSessionNIST_06_Nominal_BPP_Parsing_Error + TC_eUICC_ES10b_CancelSessionNIST_07_Nominal_Load_BPP_Execution_Error + TC_eUICC_ES10b_CancelSessionNIST_08_Nominal_Undefined_Reason (extracted verbatim)
-
-function TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection()
-{
-
-	//测试入口条件
-	if(!check_Applicability_of_tests_RSP_SGP23_test("C001"))
-		return;
-
-	tracenamestr = "测试目的：取消RSP会话，取消原因为终端用户拒绝";
-	curDis.TraceStart(sno++,tracenamestr);
-
-	curDis.TestStepStart("eUICC卡片初始化；");
-	Ini_powerOn_eUICC_LPAe_not_activate();
-
-	curDis.TestStepStart("读卡器向卡片发送MANAGE_CHANNEL命令，打开辅助逻辑通道；");
-	TS_MANAGE_CHANNEL_OPEN();
-
-	curLogicChannel = 1;
-
-	curDis.TestStepStart("读卡器向卡片发送SELECT命令，选择ISD-R；");
-	TS_SELECT("Select ISD",ISD_R_AID,"9000");
-
-	curDis.TestStepStart("读卡器向卡片发送 StoreData命令，执行GetEuiccInfo1Request；");
-	pkId_CI_ForVerification = pkId_CI_ECDSA_NIST;
-	pkId_CI_ForSigning = pkId_CI_ECDSA_NIST;
-
-
-	var Profile_load_procedure = new RSP_profile_load_procedure_LPAd(PROFILE_OPERATIONAL1_DATA);
-	Profile_load_procedure.ICCID = ICCID_OP_PROF1;
-	Profile_load_procedure.ES10b_GetEUICCInfo1();
-
-
-	curDis.TestStepStart("读卡器向卡片发送 StoreData命令，执行GetEuiccChallengeRequest；");
-	Profile_load_procedure.ES10b_GetEUICCChallenge();
-
-	curDis.TestStepStart("读卡器向卡片发送 StoreData命令，执行AuthenticateServerRequest；");
-	Profile_load_procedure.ES10b_AuthenticateServer();
-
-	curDis.TestStepStart("读卡器向卡片发送 StoreData命令，执行CancelSession；");
-	Profile_load_procedure.ES10b_CancelSession(CancelSessionReason.endUserRejection);
-
-	curDis.TestStepStart("读卡器向卡片发送 StoreData命令，执行PrepareDownloadRequest；");
-	Profile_load_procedure.PrepareDownloadisErrorTest = true;
-	Profile_load_procedure.preparedownloadErrorCode = DownloadErrorCode.noSessionContext;
-	Profile_load_procedure.ES10b_PrepareDownload();
-
-	curDis.TestStepStart("读卡器向卡片发送 StoreData命令，执行GetEuiccDataRequest(GetEID)；");
-	Profile_load_procedure.ES10b_GetEID();
-
-	curDis.TestStepStart("读卡器向卡片发送 StoreData命令，执行AuthenticateServerRequest；");
-	Profile_load_procedure.isErrorTest = true;
-	euiccAuthenticateErrorCode=AuthenticateErrorCode.noSessionContext;
-	Profile_load_procedure.ES10b_AuthenticateServer();
-
-	RecoverCard();
+// Author: 卡思Cas智能体
+// Date: 20261004-143915
+// Function: （purpose 原文未由 SGP.23 该 TC 提供，corpus vacuum 登记）TC_eUICC_ES10b.CancelSessionNIST，Test Sequence #01-#08 (8 Nominal sequences: End User Rejection / End User Postponed / Timeout / PPR not allowed / Metadata Mismatch / BPP Parsing Error / Load BPP Execution Error / Undefined Reason)，适用性 C001。
+// Test points: S1-C1 assemble；S1-C2 assemble；S1-C3 assemble；S1-C4 assemble；S1-C1 SW
+//   S1-C2 cancelSessionResponseOk structure；S1-C3 cancelSessionResponseOk structure
+//   S1-C4 transactionId echo；S2-C1 proc state；S3-C1 assemble；S3-C2 assemble；S3-C3 assemble
+//   S3-C4 assemble；S3-C1 SW；S3-C2 cancelSessionResponseOk structure
+//   S3-C3 cancelSessionResponseOk structure；S3-C4 transactionId echo；S4-C1 proc state
+//   S5-C1 assemble；S5-C2 assemble；S5-C3 assemble；S5-C4 assemble；S5-C1 SW
+//   S5-C2 cancelSessionResponseOk structure；S5-C3 cancelSessionResponseOk structure
+//   S5-C4 transactionId echo；S6-C1 proc state；S7-C1 assemble；S7-C2 assemble；S7-C3 assemble
+//   S7-C4 assemble；S7-C1 SW；S7-C2 cancelSessionResponseOk structure
+//   S7-C3 cancelSessionResponseOk structure；S7-C4 transactionId echo；S8-C1 proc state
+//   S9-C1 assemble；S9-C2 assemble；S9-C3 assemble；S9-C4 assemble；S9-C1 SW
+//   S9-C2 cancelSessionResponseOk structure；S9-C3 cancelSessionResponseOk structure
+//   S9-C4 transactionId echo；S13-C1 SW in 6985/6A88；S14-C1 proc state；S15-C1 assemble
+//   S15-C2 assemble；S15-C3 assemble；S15-C4 assemble；S15-C1 SW
+//   S15-C2 cancelSessionResponseOk structure；S15-C3 cancelSessionResponseOk structure
+//   S15-C4 transactionId echo；S19-C1 SW in 6985/6A88；S20-C1 proc state；S24-C1 SW；S25-C1 assemble
+//   S25-C2 assemble；S25-C3 assemble；S25-C4 assemble；S25-C1 SW
+//   S25-C2 cancelSessionResponseOk structure；S25-C3 cancelSessionResponseOk structure
+//   S25-C4 transactionId echo；S26-C1 SW in 6985/6A88；S27-C1 proc state；S28-C1 assemble
+//   S28-C2 assemble；S28-C3 assemble；S28-C4 assemble；S28-C1 SW
+//   S28-C2 cancelSessionResponseOk structure；S28-C3 cancelSessionResponseOk structure
+//   S28-C4 transactionId echo；S29-C1 proc state
+// 本函数由 CaseIR 4.2.19.2.1 编译生成（fullwave-blindgen-live-70-W1-laneA5，SGP.23 v1.16 × SGP.22 v2.7）：字节权威=CaseIR，非誊录黄金脚本。
+// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md).
+// 适用性 C001：编译期门，运行时由 harness 环境前置承担。
+function TC_eUICC_ES10b_CancelSessionNIST_01_08_merged() {
+    var bind = curBind;
+    var profileAidSession = BindEs10xProcProfileDynamic.beginSession(bind, "TC_eUICC_ES10b_CancelSessionNIST_01_08_merged");
+    // GIC-1 卡态编排：PROFILE_OPERATIONAL1 未装载到 eUICC（非 PROC_ 展开，属卡态前提）: declared unexpanded (non-PROC row or K corpus vacuum; see CaseIR open_items).
+    // GIC-2 Common Mutual Authentication procedure（S_LPAd 已选 ISD-R；eUICC 已对 ES10b.AuthenticateServer 给出响应；同一基于 NIST P-256 的 GSMA CI 用于签名与验签）——展开（SGP.22 3.1 子过程）不在语料包内: declared unexpanded (non-PROC row or K corpus vacuum; see CaseIR open_items).
+    // GIC-3 #GET_EUICC_INFO1、#GET_EUICC_CHALLENGE、#AUTHENTICATE_SMDP 已发送至 eUICC（#AUTHENTICATE_SMDP 定义见 I_annexD3_es10x）: declared unexpanded (non-PROC row or K corpus vacuum; see CaseIR open_items).
+    // S5/S6-IC Sub-procedure Profile Download and Installation – End User Confirmation 已成功执行（#PREP_DOWNLOAD_NO_CC 已发送；定义见 I_annexD3_es10x）；子过程展开不在语料包内: declared unexpanded (non-PROC row or K corpus vacuum; see CaseIR open_items).
+
+    var cs1Tid = "";
+    for (var cs1Ri = 0; cs1Ri < 16; cs1Ri++) {
+        cs1Tid += bind.engine.Hex(Math.round(255 * Math.random()), 2);
+    }
+    // cancel_session 运行时绑定（B-7）：BF41{80<tid> 81 01 00}——tid 运行时随机 16B；reason S22:9140 枚举
+    var cs1Asm = BindEs10bCancelSession.assembleCancelSession({outer: "BF41", transactionId: "80", reason: "81"}, {transactionId: cs1Tid, reason: "00"});
+    if (cs1Asm.error) {
+        bind.checkData("S1-C1 assemble", "1", "0");
+        bind.checkData("S1-C2 assemble", "1", "0");
+        bind.checkData("S1-C3 assemble", "1", "0");
+        bind.checkData("S1-C4 assemble", "1", "0");
+    } else {
+        var s1 = bind.sendApdu(null, "E2", "91", "00", cs1Asm.request_hex, "00", "9000");
+        bind.checkData("S1-C1 SW", "9000", s1.sw);
+        var cs1Ex = BindEs10bCancelSession.extractCancelSession({outer: "BF41", ok: {tag: "A0", children: [{name: "euiccCancelSessionSigned", tag: "30", children: [{name: "transactionId", tag: "80"},{name: "smdpOid", tag: "81"},{name: "reason", tag: "82"}]},{name: "euiccCancelSessionSignature", tag: "5F37"}]},error: {tag: "81"}}, s1.resp);
+        bind.checkData("S1-C2 cancelSessionResponseOk structure", "1", (cs1Ex.branch === "ok" && cs1Ex.ok && cs1Ex.ok.missing.length === 0 && cs1Ex.ok.fields.euiccCancelSessionSigned.children.missing.length === 0) ? "1" : "0");
+        bind.checkData("S1-C3 cancelSessionResponseOk structure", "1", (cs1Ex.branch === "ok" && cs1Ex.ok && cs1Ex.ok.missing.length === 0 && cs1Ex.ok.fields.euiccCancelSessionSigned.children.missing.length === 0) ? "1" : "0");
+        bind.checkData("S1-C4 transactionId echo", cs1Tid, cs1Ex.branch === "ok" ? cs1Ex.ok.fields.euiccCancelSessionSigned.children.fields.transactionId.value : "branch_absent");
+    }
+
+    // 步骤 2：PROC_VERIFY_SESSION_IS_CANCELLED（procedure_expansion；REQ: RQ57_113）
+    // E 表验证性 PROC（K 过程体缺席）：oracle 缺席诚实面——期望=声明面
+    // spec 引用、实际=proc_expansion_absent（如实计错，不伪造通过）。
+    bind.checkData("S2-C1 proc state", "declared_proc_spec", "proc_expansion_absent");
+
…（差异行超限，共 855 行，此处截断）
```

</details>
### 4.2 UCE/命名对照

- man：`ESIM_TEST_SGP_23.UCE`；入口 [('TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection', 'TC_eUICC_ES10b.CancelSessionNIST', 'Import\\\\ExecuteTestCase_SGP_23.js(TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}
- cas：`TC_eUICC_ES10b_CancelSessionNIST/TC_eUICC_ES10b_CancelSessionNIST.uce`；入口 [('TC_eUICC_ES10b_CancelSessionNIST_01_08_merged', 'TC_eUICC_ES10b_CancelSessionNIST', 'Import\\\\ExecuteTestCase_spec.js(TC_eUICC_ES10b_CancelSessionNIST_01_08_merged)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}

## 5. L2 步骤/APDU/step_map 差异（结构化对齐）

- 命令计数：man 63 / cas 12；精确对齐 0，核心（CLA·INS·P1·P2·Lc）同 0，man-only 63，cas-only 12

| # | `-man` | `-cas` | 对齐 |
|---|---|---|---|
| — | man-only: `@RESET`, `00A40004023F00`, `00C0000020`, `80AA000007A9058100830137`, `8010000023FFFFFFFF7F9D00DFBF00001FE20000…0000038`, `801200000F`, `801400000C810301250082028281830100`, `0070000000`, `0070000001`, `01A4040010A0000005591010FFFFFFFF8900000100`, `01C0000021`, `81E2910003BF2000` | | |
| — | | cas-only: `00E2910018BF41158010DC01DD440AF64CBC09C9…1010000`, `00E2910018BF411580100D635A30F4918EF9D2AA…1010100`, `00E2910018BF41158010E824D844DC071632B25D…1010200`, `00E2910018BF41158010707388F85A97A351EDBE…1010300`, `00E2910018BF411580100EC44417121177728EDF…1010400`, `00E2000000`, `00E2910018BF41158010AA464AF0B18BEB708168…1010500`, `00E2000000`, `00E2000000`, `00E2910018BF411580106FC973694C3738E5A9BF…1010500`, `00E2000000`, `00E2910018BF41158010D4CA855899E9E7277676…1017F00` | | |

## 6. L3 规范字段/Expected/REQ/通过条件差异

- spec：/Users/yuhu/cas/原料/切片/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST/spec_intl/SGP.23-v1.16_4.2.19_CancelSessionNIST.md（风格：mapping）；caseir：`/Users/yuhu/cas/experiments/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-20261004_021946/caseir_materialized_gate.json`

spec_intl 为人工核订映射表风格（规范步骤 ↔ 厂商脚本实现 ↔ 实跑结果）：

| 规范步骤 | man 脚本实现 | man 实跑结果 |
|---|---|---|
| General IC（通信初始化＋ISD-R 选择） | `Ini_powerOn_eUICC_LPAe_not_activate()`（L14）+ `TS_MANAGE_CHANNEL_OPEN( | 通过（复位/ATR/TP+FETCH+TR 后开通道 01、Select ISD FCI 6F1F，ttr APDU1-APDU38） |
| General IC（#GET_EUICC_INFO1/#GET_EUICC_CHALLENGE/#AUTHENTICATE_SMDP 已发；NIST CI） | `pkId_CI_ForVerification/ForSigning = pkId_CI_ECDSA_NIST`（L25-26）+ `ES | 通过（APDU40-41 Info1 BF20、APDU46 Challenge BF2E、APDU57-75 AuthenticateSe |
| 1 MTD_STORE_DATA(#CANCEL_SESSION_REJECT) → #R_CANCEL_SESSION_REJ SW=9000；EUICC_CS_SIGNATURE 以 PK_EUICC_ECDSA 验签；S_TRANSACTION_ID 回显一致 | `ES10b_CancelSession(CancelSessionReason.endUserRejection)`（L41；reason | 通过（APDU89 请求 `81E2910018BF41158010FDFC425A3D70FCC9A944CF90A87EA39F8101 |
| 2 PROC_VERIFY_SESSION_IS_CANCELLED（RQ57_113） | 三重验证尾：`PrepareDownloadisErrorTest=true; preparedownloadErrorCode=noSes | 通过（APDU107-122 PrepareDownload→`BF2117A1158010FDFC…0201 04`＝downloadEr |
| （收尾，非规范步骤） | `RecoverCard()`（L56） | 通过（ttr APDU166-268：MemoryReset/通知链/关通道全绿） |

cas CaseIR 步骤/检查：

| 步 | 动作 | checks | REQ |
|---|---|---|---|
| 1 | MTD_STORE_DATA(#CANCEL_SESSION_REJECT) | ["S1-C1", "S1-C2", "S1-C3", "S1-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ26_034", "RQ26_035", "RQ31_160"] |
| 2 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S2-C1"] | ["RQ57_113"] |
| 3 | MTD_STORE_DATA(#CANCEL_SESSION_POSTPONED) | ["S3-C1", "S3-C2", "S3-C3", "S3-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ26_034", "RQ26_035", "RQ31_160"] |
| 4 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S4-C1"] | ["RQ57_113"] |
| 5 | MTD_STORE_DATA(#CANCEL_SESSION_TIMEOUT) | ["S5-C1", "S5-C2", "S5-C3", "S5-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ26_034", "RQ26_035"] |
| 6 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S6-C1"] | ["RQ57_113"] |
| 7 | MTD_STORE_DATA(#CANCEL_SESSION_PPR) | ["S7-C1", "S7-C2", "S7-C3", "S7-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ26_034", "RQ26_035", "RQ31_099", "RQ31_101"] |
| 8 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S8-C1"] | ["RQ57_113"] |
| 9 | MTD_STORE_DATA(#CANCEL_SESSION_METADATA) | ["S9-C1", "S9-C2", "S9-C3", "S9-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ26_034", "RQ26_035"] |
| 10 | Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA> | [] | [] |
| 11 | <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF1, #METADATA | [] | [] |
| 12 | Split the <BPP> into several segments arrays named: <BPP_SEG_INIT>, <B | [] | [] |
| 13 | MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S13-C1"] | ["RQ57_113", "RQ57_041_1"] |
| 14 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S14-C1"] | ["RQ57_113"] |
| 15 | MTD_STORE_DATA(#CANCEL_SESSION_LOAD_BPP) | ["S15-C1", "S15-C2", "S15-C3", "S15-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ26_034", "RQ26_035", "RQ31_162_1"] |
| 16 | Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA> | [] | [] |
| 17 | <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF1, #METADATA | [] | [] |
| 18 | Split the <BPP> into several segments arrays named: <BPP_SEG_INIT>, <B | [] | [] |
| 19 | MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S19-C1"] | ["RQ57_113"] |
| 20 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S20-C1"] | ["RQ57_113"] |
| 21 | IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA> | [] | [] |
| 22 | IC2: <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF1, #MET | [] | [] |
| 23 | IC3: Split the <BPP> into several segments arrays named: <BPP_SEG_INIT | [] | [] |
| 24 | IC4: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S24-C1"] | [] |
| 25 | MTD_STORE_DATA(#CANCEL_SESSION_LOAD_BPP) | ["S25-C1", "S25-C2", "S25-C3", "S25-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ31_188_1", "RQ26_034", "RQ26_035", "RQ31_162_1"] |
| 26 | MTD_STORE_DATA_SCRIPT(<BPP_SEG_A0>) | ["S26-C1"] | ["RQ57_113"] |
| 27 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S27-C1"] | ["RQ57_113"] |
| 28 | MTD_STORE_DATA(#CANCEL_SESSION_UNDEF) | ["S28-C1", "S28-C2", "S28-C3", "S28-C4"] | ["RQ31_114", "RQ31_115", "RQ31_116", "RQ31_117", "RQ57_110", "RQ57_111", "RQ57_114", "RQ57_115", "RQ57_116", "RQ26_034", "RQ26_035"] |
| 29 | PROC_VERIFY_SESSION_IS_CANCELLED | ["S29-C1"] | ["RQ57_113"] |

### 6.1 充分性分析（启发式，不作最终裁定）

- cas：`NO_MECHANICAL_GAPS`（全步有检查=True；REQ 全覆盖=False；ErrorCount==0=False）
- cas 物化核对（启发式旁证，权威见下行 attestation）：声明检查 44 项 / 生成体 checkData 76 次 / S 标号重合 44 / 计数缺口 0 / 形态 `FULL`；执行面 `FAIL`（计数缺口须结合绑定层隐含断言核验，非直接判缺陷）
- **cas 编译器自证（check_attestation，同批构建）**：声明 None = js 44 + binding 0 + gap 0；缺口判定以本行为权威（启发式计数仅旁证）
- man：映射行 5；TTR 期望/实际回声 104；厂商工具内置审计（TTR 期望/实际回声行为证据）；脚本字节级充分性不可完全外部验证
- cas 信息步（无线上断言义务）：[10, 11, 12, 16, 17, 18, 21, 22, 23]
- REQ 声明面 vs caseir 引用面差异（1 项，非等价缺口判定）：['RQ57_109']
- caseir open_items：
  - PROC_VERIFY_SESSION_IS_CANCELLED 的展开仍不在语料包内（K_annexC2_procs 仅含 EUICC_INITIALIZATION / OPEN_LOGICAL_CHANNEL / eUICCProfileStateChanged 三个过程）
  - CancelSessionRequest 的 transactionId TLV 编码：TransactionId 基类型定义语料缺席，值运行时动态 → 保持 dynamic/null（R2 已闭合 BF41 容器与 reason 编码）
  - <S_TRANSACTION_ID> 运行时动态，禁止固化
  - #S_INIT_SC_PROF1 / #CONF_ISDP_PROF1 / #METADATA_OP_PROF1 / #UPP_OP_PROF1（BPP 构件）不在语料包内
  - 卡态编排责任（PROFILE_OPERATIONAL1 未装载、ISD-R 选择、Common Mutual Authentication）非 CaseIR 范围
  - RQ57_109 无 REQ 段且未出现在步骤行（TC1）；TC2 按 TC 级说明段映射，已登记

## 7. 分类结论（封闭枚举）

| 轴 | 计数 | 说明 |
|---|---|---|
| `RUN_DIFF` | 1 | man 通过 / cas 失败 |
| `SCRIPT_DIALECT` | 54 | 闭包文件差：man-only 3 / cas-only 51 |
| `GEN_DIFF` | 76 | 命令序列差：man-only 63 / cas-only 12；REQ 覆盖缺口：['RQ57_109'] |

| 侧 | 根因候选（七类，启发式签名） | 签名 |
|---|---|---|
| cas | `card_vs_spec_mismatch` | `6985|6A88|6D00` |

> 签名为文本面启发式命中（如 `6D00` 等 SW 亦可能是负例期望值），须结合 Expected 面核验后方可定论。

- 置信度：heuristic；需人工复核：False

## 8. 证据路径

- man 包：`../../packages/man/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-man.zip`
- man TTR：`/Users/yuhu/cas/原料/切片/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST/logs/20260907_203658_ok/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES10b_CancelSessionNIST_01_Nominal_End_User_Rejection.ttr`
- cas 包/源：`../../packages/cas/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-cas.zip`
- cas TTR：`/Users/yuhu/cas/experiments/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-20261004_021946/logs/dae4762826344257b8167be8c01af044/result/TC_eUICC_ES10b_CancelSessionNIST/TC_eUICC_ES10b_CancelSessionNIST_01_08_merged.ttr`
- spec_intl：`/Users/yuhu/cas/原料/切片/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST/spec_intl/SGP.23-v1.16_4.2.19_CancelSessionNIST.md`
- caseir：`/Users/yuhu/cas/experiments/4.2.19.2.1-TC_eUICC_ES10b.CancelSessionNIST-20261004_021946/caseir_materialized_gate.json`
- step_map：`—`

