--- man
+++ cas
@@ -1,187 +1,159 @@
-// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES10b_LoadBoundProfilePackageNIST_01_Nominal_By_using_S_ENC_and_S_MAC + TC_eUICC_ES10b_LoadBoundProfilePackageNIST_02_Nominal_By_using_PPK_ENC_and_PPK_MAC + TC_eUICC_ES10b_LoadBoundProfilePackage_01_Nominal_By_using_S_ENC_and_S_MAC + TC_eUICC_ES10b_LoadBoundProfilePackage_02_Nominal_By_using_PPK_ENC_and_PPK_MAC (extracted verbatim)
+// Author: 卡思Cas智能体
+// Date: 20261005-152741
+// Function: （purpose 原文未由 SGP.23 该 TC 提供，corpus vacuum 登记）TC_eUICC_ES10b.LoadBoundProfilePackageNIST，Test Sequence #01 Nominal: By using S-ENC and S-MAC; #02 Nominal: By using PPK-ENC and PPK-MAC，适用性 C001。
+// Test points: S1-C1 SW；S1-C2 response data absent；S2-C1 SW；S2-C2 response data absent；S3-C1 SW
+//   S3-C2 response data absent；S4-C1 SW；S4-C2 SW；S5-C1 SW；S5-C2 contains iccid 989209012143658709F5
+//   S5-C3 contains iccid 989209012143658709F5；S5-C4 isdpAid；S5-C5 profileState；S6-C1 SW
+//   S6-C2 response data absent；S7-C1 SW；S7-C2 response data absent；S8-C1 SW
+//   S8-C2 response data absent；S9-C1 SW；S9-C2 response data absent；S10-C1 SW；S10-C2 SW；S11-C1 SW
+//   S11-C2 contains iccid 989209012143658709F5；S11-C3 contains iccid 989209012143658709F5
+//   S11-C4 isdpAid；S11-C5 profileState
+// 本函数由 CaseIR 4.2.11.2.1 编译生成（fullwave-blindgen-live-70-W1-A3，SGP.23 v1.16 × SGP.22 v2.7）：字节权威=CaseIR，非誊录黄金脚本。
+// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md).
+// 适用性 C001：编译期门，运行时由 harness 环境前置承担。
+// PRECONDITION (declared, NOT compiled): initial_conditions 缺语料过程体（Annex C.2 absent from input package, corpus vacuum）: IC 序列属测试工具/卡态编排责任，本脚本不虚构初始化步骤；语义影响见 CaseIR open_items。
+// GIC1 The PROFILE_OPERATIONAL1 is not loaded on the eUICC.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// GIC2 Communication S_Device/eUICC initialized, S_LPAd has selected the ISD-R; Common Mutual Authentication successfully executed between eUICC and S_SM-DP+ (#GET_EUICC_INFO1, #GET_EUICC_CHALLENGE, #AUTHENTICATE_SMDP sent); same GSMA CI based on NIST P-256 chosen for signing and verification; Sub-procedure Profile Download and Installation - End User Confirmation successfully executed (#PREP_DOWNLOAD_NO_CC sent).: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// IC1(seq01/02) Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA> (test tool responsibility).: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// IC2(seq01) <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF1, #METADATA_OP_PROF1, NO_PARAM, #UPP_OP_PROF1) — BPP protected with <S_ENC>/<S_MAC> only.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// IC2(seq02) <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF1, #METADATA_OP_PROF1, #REPLACE_S_KEYS_REQ, #UPP_OP_PROF1) — UPP segments protected with PPK-ENC/PPK-MAC and Initial MAC chaining value.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// IC3(seq01) Split <BPP> into <BPP_SEG_INIT>, <BPP_SEG_A0>, <BPP_SEG_A1>, <BPP_SEG_A3> per TLV layout in E_tc_4211 IC3 NOTE.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// IC3(seq02) Split <BPP> into <BPP_SEG_INIT>, <BPP_SEG_A0>, <BPP_SEG_A1>, <BPP_SEG_A2>, <BPP_SEG_A3> per TLV layout in E_tc_4211 IC3 NOTE (seq02 adds secondSequenceOf87 with #REPLACE_S_KEYS_REQ).: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+function TC_eUICC_ES10b_LoadBoundProfilePackageNIST_01_02_merged() {
+    var bind = curBind;
 
-function TC_eUICC_ES10b_LoadBoundProfilePackageNIST_01_Nominal_By_using_S_ENC_and_S_MAC()
-{
-	if(!Card_Have_ECC_Cert)
-		return;
+    // 步骤 1：Seq#01 Step1] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ57_040, RQ57_042, RQ57_043, RQ57_044, RQ55_001, RQ55_002, RQ55_006, RQ55_007, RQ57_010, RQ57_011, RQ57_012, RQ57_014, RQ26_029, RQ31_162, RQ31_163, RQ31_164, RQ55_003, RQ55_016, RQ55_017, RQ55_018, RQ55_020, RQ55_021, RQ55_022, RQ55_024, RQ26_011, RQ26_013, RQ26_016, RQ26_034, RQ26_035, RQ31_161）
+    // BPP segment load (data=null contract): <BPP_SEG_INIT> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s1 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S1-C1 SW", "9000", s1.sw);
+    bind.checkData("S1-C2 response data absent", "1", s1.resp === "" ? "1" : "0");
 
-	//测试入口条件
-	if(!check_Applicability_of_tests_RSP_SGP23_test("C001"))
-		return;
+    // 步骤 2：Seq#01 Step2] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ57_040, RQ57_042, RQ57_043, RQ57_044, RQ55_001, RQ55_002, RQ55_006, RQ55_007, RQ57_010, RQ57_011, RQ57_012, RQ57_014, RQ26_029, RQ31_165, RQ55_028, RQ26_012, RQ26_013, RQ26_016, RQ26_018, RQ26_019, RQ26_036, RQ31_161, RQG0_001, RQG0_002, RQG0_003, RQG0_004, RQG0_005, RQG0_006）
+    // BPP segment load (data=null contract): <BPP_SEG_A0> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s2 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S2-C1 SW", "9000", s2.sw);
+    bind.checkData("S2-C2 response data absent", "1", s2.resp === "" ? "1" : "0");
 
-	pkId_CI_ForVerification = pkId_CI_ECDSA_NIST;
-	pkId_CI_ForSigning = pkId_CI_ECDSA_NIST;
+    // 步骤 3：Seq#01 Step3] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ57_040, RQ57_042, RQ57_043, RQ57_044, RQ55_001, RQ55_002, RQ55_006, RQ55_007, RQ57_010, RQ57_011, RQ57_012, RQ57_014, RQ26_029, RQ31_166, RQ55_033, RQ55_036, RQ55_037, RQ24_028, RQ26_012, RQ26_013, RQ26_016, RQ26_018, RQ26_019, RQ26_020, RQ26_036, RQ31_161, RQG0_005, RQG0_006）
+    // BPP segment load (data=null contract): <BPP_SEG_A1> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s3 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S3-C1 SW", "9000", s3.sw);
+    bind.checkData("S3-C2 response data absent", "1", s3.resp === "" ? "1" : "0");
 
-	TC_eUICC_ES10b_LoadBoundProfilePackage_01_Nominal_By_using_S_ENC_and_S_MAC();
+    // 步骤 4：Seq#01 Step4] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ57_040, RQ57_042, RQ57_043, RQ57_044, RQ55_001, RQ55_002, RQ55_006, RQ55_007, RQ57_010, RQ57_011, RQ57_012, RQ57_014, RQ26_029, RQ31_170, RQ31_171, RQ57_045, RQ55_008, RQ25_003, RQ25_007, RQ25_018, RQ25_019, RQ25_023, RQ25_024, RQ55_025, RQ25_016, RQ26_012, RQ26_013, RQ26_016, RQ26_018, RQ26_019, RQ26_034, RQ26_035, RQ26_036, RQ31_161, RQ35_003_1, RQ44_003, RQD0_001, RQG0_005, RQG0_006）
+    // BPP segment load (data=null contract): <BPP_SEG_A3> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s4 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S4-C1 SW", "9000", s4.sw);
+    bind.checkData("S4-C2 SW", "9000", s4.sw);
+    // S4-C3: binding:bpp_seg_load_pir_runtime_structure(S22-2.5.6;PIR-runtime-domain) (check_attestation)
+    // S4-C4: binding:bpp_seg_load_pir_runtime_fields(S22-2.5.6;PIR-runtime-domain) (check_attestation)
+    // S4-C5: binding:bpp_seg_load_pir_runtime_fields(S22-2.5.6;PIR-runtime-domain) (check_attestation)
+    // S4-C6: binding:bpp_seg_load_pir_runtime_fields(S22-2.5.6;PIR-runtime-domain) (check_attestation)
+    // S4-C7: binding:bpp_seg_load_pir_runtime_fields(S22-2.5.6;PIR-runtime-domain) (check_attestation)
+    // S4-C8: binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime-domain) (check_attestation)
 
+    // 步骤 5：Seq#01 Step5] MTD_STORE_DATA（tc_step；REQ: RQ32_070, RQ55_025, RQ24_010, RQ26_020, RQ31_161, RQD0_001）
+    // <L> length binding and the conditional 61XX + GET RESPONSE chain (D.4.2) are CasBind internal state (chaining rule).
+    var s5 = bind.sendApdu(null, "E2", "91", "00", "BF2D0EA00C5A0A989209012143658709F5", "00", "9000");
+    bind.checkData("S5-C1 SW", "9000", s5.sw);
+    var r2p5 = BindEs10xProcProfile.walkChoiceList(s5.resp, {respTag: "BF2D", okTag: "A0", errTag: "81"});
+    var r2has5_0 = false;
+    for (var r2i5_0 = 0; r2i5_0 < r2p5.elements.length; r2i5_0++) {
+        var f = r2p5.elements[r2i5_0].fields;
+        if (f["5A"] === "989209012143658709F5" && f["9F70"] === "00") { r2has5_0 = true; break; }
+    }
+    bind.checkData("S5-C2 contains iccid 989209012143658709F5", "1", (r2p5.branch_tag === "A0" && r2has5_0) ? "1" : "0");
+    var r2has5_0 = false;
+    for (var r2i5_0 = 0; r2i5_0 < r2p5.elements.length; r2i5_0++) {
+        var f = r2p5.elements[r2i5_0].fields;
+        if (f["5A"] === "989209012143658709F5") { r2has5_0 = true; break; }
+    }
+    bind.checkData("S5-C3 contains iccid 989209012143658709F5", "1", (r2p5.branch_tag === "A0" && r2has5_0) ? "1" : "0");
+    var r2fa5S5_C4 = false;
+    for (var r2fi5S5_C4 = 0; r2fi5S5_C4 < r2p5.elements.length; r2fi5S5_C4++) {
+        var f = r2p5.elements[r2fi5S5_C4].fields;
+        if (f["4F"] !== undefined) { r2fa5S5_C4 = true; break; }
+    }
+    bind.checkData("S5-C4 isdpAid", "1", (r2p5.branch_tag === "A0" && r2fa5S5_C4) ? "1" : "0");
+    var r2fa5S5_C5 = false;
+    for (var r2fi5S5_C5 = 0; r2fi5S5_C5 < r2p5.elements.length; r2fi5S5_C5++) {
+        var f = r2p5.elements[r2fi5S5_C5].fields;
+        if (f["9F70"] === "00") { r2fa5S5_C5 = true; break; }
+    }
+    bind.checkData("S5-C5 profileState", "1", (r2p5.branch_tag === "A0" && r2fa5S5_C5) ? "1" : "0");
+
+    // 步骤 6：Seq#02 Step1] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ57_040, RQ57_042, RQ57_043, RQ57_044, RQ55_001, RQ55_002, RQ55_006, RQ55_007, RQ57_010, RQ57_011, RQ57_012, RQ57_014, RQ26_029, RQ31_162, RQ31_163, RQ31_164, RQ55_003, RQ55_016, RQ55_017, RQ55_018, RQ55_020, RQ55_021, RQ55_022, RQ55_024, RQ26_011, RQ26_013, RQ26_016, RQ26_034, RQ26_035, RQ31_161）
+    // BPP segment load (data=null contract): <BPP_SEG_INIT> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s6 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S6-C1 SW", "9000", s6.sw);
+    bind.checkData("S6-C2 response data absent", "1", s6.resp === "" ? "1" : "0");
+
+    // 步骤 7：Seq#02 Step2] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ57_040, RQ57_042, RQ57_043, RQ57_044, RQ55_001, RQ55_002, RQ55_006, RQ55_007, RQ57_010, RQ57_011, RQ57_012, RQ57_014, RQ26_029, RQ31_165, RQ55_028, RQ26_012, RQ26_013, RQ26_016, RQ26_018, RQ26_019, RQ26_020, RQ26_036, RQ31_161, RQ26_011, RQ26_034, RQ26_035, RQG0_001, RQG0_002, RQG0_003, RQG0_004, RQG0_005, RQG0_006）
+    // BPP segment load (data=null contract): <BPP_SEG_A0> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s7 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S7-C1 SW", "9000", s7.sw);
+    bind.checkData("S7-C2 response data absent", "1", s7.resp === "" ? "1" : "0");
+
+    // 步骤 8：Seq#02 Step3] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ57_040, RQ57_042, RQ57_043, RQ57_044, RQ55_001, RQ55_002, RQ55_006, RQ55_007, RQ57_010, RQ57_011, RQ57_012, RQ57_014, RQ26_029, RQ31_166, RQ55_033, RQ55_036, RQ55_037, RQ26_012, RQ26_013, RQ26_016, RQ26_018, RQ26_019, RQ26_036, RQ31_161, RQG0_005, RQG0_006）
+    // BPP segment load (data=null contract): <BPP_SEG_A1> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s8 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
…（差异行超限，共 343 行，此处截断）