--- man
+++ cas
@@ -1,292 +1,119 @@
-// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES10b_LoadBoundProfilePackage_ErrorCases_01_Error_Unrecognized_leading_tag_in_BPP + TC_eUICC_ES10b_LoadBoundProfilePackage_ErrorCases_02_Error_GetEUICCChallenge_during_BPP_loading (extracted verbatim)
+// Author: 卡思Cas智能体
+// Date: 20261005-152741
+// Function: （purpose 原文未由 SGP.23 该 TC 提供，corpus vacuum 登记）TC_eUICC_ES10b.LoadBoundProfilePackage_ErrorCases，Test Sequence #01 Error: Unrecognized leading tag in BPP; #02 Error: GetEUICCChallenge during BPP loading，适用性 M。
+// Test points: S1-C1 SW；S2-C1 SW；S2-C2 response data absent；S3-C1 SW；S3-C2 SW；S4-C1 SW
+//   S4-C2 contains iccid 989209012143658709F5；S4-C3 contains iccid 989209012143658709F5
+//   S4-C4 isdpAid；S4-C5 profileState；S5-C1 SW；S5-C2 R_CHALLENGE outer tag
+//   S5-C2 R_CHALLENGE required members present；S5-C2 tagOfeuiccChallenge
+//   S5-C2 lengthOfeuiccChallenge；S5-C3 R_CHALLENGE outer tag；S5-C3 tagOfeuiccChallenge
+//   S5-C3 lengthOfeuiccChallenge；S6-C1 SW in 6A88/6985；S7-C1 SW；S7-C2 profileInfoListOk empty
+//   S8-C1 SW；S8-C2 notificationMetadataList empty
+// 本函数由 CaseIR 4.2.11.2.4 编译生成（fullwave-blindgen-live-70-W1-A3，SGP.23 v1.16 × SGP.22 v2.7）：字节权威=CaseIR，非誊录黄金脚本。
+// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md).
+// 适用性 M：编译期门，运行时由 harness 环境前置承担。
+// PRECONDITION (declared, NOT compiled): initial_conditions 缺语料过程体（Annex C.2 absent from input package, corpus vacuum）: IC 序列属测试工具/卡态编排责任，本脚本不虚构初始化步骤；语义影响见 CaseIR open_items。
+// GIC1 The PROFILE_OPERATIONAL1 is not loaded on the eUICC.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// GIC2 Communication S_Device/eUICC initialized, S_LPAd has selected the ISD-R; Common Mutual Authentication successfully executed (#GET_EUICC_INFO1, #GET_EUICC_CHALLENGE, #AUTHENTICATE_SMDP sent); the same GSMA CI chosen for signing and verification; End User Confirmation sub-procedure executed (#PREP_DOWNLOAD_NO_CC sent).: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// Seq01-IC1/IC2/IC3 Generate <OTPK_S_SM_DP+_ECKA>/<OT_SK_S_SM_DP+_ECKA>; <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF1, #METADATA_OP_PROF1, NO_PARAM, #UPP_OP_PROF1); split into <BPP_SEG_INIT>/<BPP_SEG_A0>/<BPP_SEG_A1>/<BPP_SEG_A3>.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// Seq01-IC4 S_LPAd → eUICC: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) — SW=0x9000 without response data for all STORE DATA commands.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// Seq01-IC5 S_LPAd → eUICC: MTD_STORE_DATA_SCRIPT(<BPP_SEG_A0>) — SW=0x9000 without response data for all STORE DATA commands (REQ RQ31_186_1).: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// Seq02-IC No Notification is stored in the eUICC's Pending Notifications List; IC1-IC6: generate one-time keys, generate <BPP> (same as Seq01-IC2), split segments, then load <BPP_SEG_INIT>, <BPP_SEG_A0>, <BPP_SEG_A1> — each SW=0x9000 without response data.: declared unexpanded (no fabricated bytes; provenance = expansion_source).
+function TC_eUICC_ES10b_LoadBoundProfilePackage_ErrorCases_01_02_merged() {
+    var bind = curBind;
 
-function TC_eUICC_ES10b_LoadBoundProfilePackage_ErrorCases_01_Error_Unrecognized_leading_tag_in_BPP()
-{
-	tracenamestr = "测试目的：确保eUICC在Profile下载期间，拒绝任何带有无法识别的leading tag的BPP部分。在这种情况下，eUICC应返回SW为0x6A88，不应丢弃下载会话状态";
-	curDis.TraceStart(sno++,tracenamestr);
+    // 步骤 1：Seq#01 Step1] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ31_186_1, RQ57_013, RQ57_016）
+    // <L> length binding and the conditional 61XX + GET RESPONSE chain (D.4.2) are CasBind internal state (chaining rule).
+    var s1 = bind.sendApdu(null, "E2", "91", "00", "C9050102030405", "00", "6A88");
+    bind.checkData("S1-C1 SW", "6A88", s1.sw);
+    // S1-C2: kind 'requirement' pattern '' has no static generation face (corpus vacuum; see CaseIR unresolved).
+    // S1-C3: kind 'requirement' pattern '' has no static generation face (corpus vacuum; see CaseIR unresolved).
+    // S1-C2: binding:requirement_satisfied_by_same_step_error_sw_assertion (check_attestation)
+    // S1-C3: binding:requirement_satisfied_by_same_step_error_sw_assertion (check_attestation)
 
-	curDis.TestStepStart2(stno++,"eUICC卡片初始化；");
-	Ini_powerOn_eUICC_LPAe_not_activate();
+    // 步骤 2：Seq#01 Step2] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ31_186_1）
+    // BPP segment load (data=null contract): <BPP_SEG_A1> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s2 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S2-C1 SW", "9000", s2.sw);
+    bind.checkData("S2-C2 response data absent", "1", s2.resp === "" ? "1" : "0");
 
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送MANAGE_CHANNEL命令，打开辅助逻辑通道；");
-	TS_MANAGE_CHANNEL_OPEN();
+    // 步骤 3：Seq#01 Step3] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ31_186_1）
+    // BPP segment load (data=null contract): <BPP_SEG_A3> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s3 = bind.sendApdu(null, "E2", "00", "00", null, "00", "9000");
+    bind.checkData("S3-C1 SW", "9000", s3.sw);
+    bind.checkData("S3-C2 SW", "9000", s3.sw);
+    // S3-C3: binding:bpp_seg_load_pir_runtime_structure(S22-2.5.6;PIR-runtime-domain) (check_attestation)
 
-	curLogicChannel = 1;
+    // 步骤 4：Seq#01 Step4] MTD_STORE_DATA（tc_step）
+    // <L> length binding and the conditional 61XX + GET RESPONSE chain (D.4.2) are CasBind internal state (chaining rule).
+    var s4 = bind.sendApdu(null, "E2", "91", "00", "BF2D0EA00C5A0A989209012143658709F5", "00", "9000");
+    bind.checkData("S4-C1 SW", "9000", s4.sw);
+    var r2p4 = BindEs10xProcProfile.walkChoiceList(s4.resp, {respTag: "BF2D", okTag: "A0", errTag: "81"});
+    var r2has4_0 = false;
+    for (var r2i4_0 = 0; r2i4_0 < r2p4.elements.length; r2i4_0++) {
+        var f = r2p4.elements[r2i4_0].fields;
+        if (f["5A"] === "989209012143658709F5" && f["9F70"] === "00") { r2has4_0 = true; break; }
+    }
+    bind.checkData("S4-C2 contains iccid 989209012143658709F5", "1", (r2p4.branch_tag === "A0" && r2has4_0) ? "1" : "0");
+    var r2has4_0 = false;
+    for (var r2i4_0 = 0; r2i4_0 < r2p4.elements.length; r2i4_0++) {
+        var f = r2p4.elements[r2i4_0].fields;
+        if (f["5A"] === "989209012143658709F5") { r2has4_0 = true; break; }
+    }
+    bind.checkData("S4-C3 contains iccid 989209012143658709F5", "1", (r2p4.branch_tag === "A0" && r2has4_0) ? "1" : "0");
+    var r2fa4S4_C4 = false;
+    for (var r2fi4S4_C4 = 0; r2fi4S4_C4 < r2p4.elements.length; r2fi4S4_C4++) {
+        var f = r2p4.elements[r2fi4S4_C4].fields;
+        if (f["4F"] !== undefined) { r2fa4S4_C4 = true; break; }
+    }
+    bind.checkData("S4-C4 isdpAid", "1", (r2p4.branch_tag === "A0" && r2fa4S4_C4) ? "1" : "0");
+    var r2fa4S4_C5 = false;
+    for (var r2fi4S4_C5 = 0; r2fi4S4_C5 < r2p4.elements.length; r2fi4S4_C5++) {
+        var f = r2p4.elements[r2fi4S4_C5].fields;
+        if (f["9F70"] === "00") { r2fa4S4_C5 = true; break; }
+    }
+    bind.checkData("S4-C5 profileState", "1", (r2p4.branch_tag === "A0" && r2fa4S4_C5) ? "1" : "0");
 
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送SELECT命令，选择ISD-R；");
-	TS_SELECT("Select ISD",ISD_R_AID,"9000");
+    // 步骤 5：Seq#02 Step1] MTD_STORE_DATA（tc_step；REQ: RQ31_188_1）
+    // <L> length binding and the conditional 61XX + GET RESPONSE chain (D.4.2) are CasBind internal state (chaining rule).
+    var s5 = bind.sendApdu(null, "E2", "91", "00", "BF2E00", "00", "9000");
+    bind.checkData("S5-C1 SW", "9000", s5.sw);
+    // geca-proc ES10b Info 响应面（R_CHALLENGE，SGP.22 §5.7.7/§5.7.8 结构机械转录；响应外层 tag = 请求 tag）：绑定层结构步行 + 在场性断言。
+    var gw5 = BindGecaProc.parseGecaResponse(s5.resp, {outer: "BF2E", required: ["80"], optional: []});
+    bind.checkData("S5-C2 R_CHALLENGE outer tag", "BF2E", gw5.outer_tag === null ? "absent" : gw5.outer_tag);
+    bind.checkData("S5-C2 R_CHALLENGE required members present", "1", gw5.ok ? "1" : "0");
+    var r2w5 = BindGecaProc.parseGecaResponse(s5.resp, {outer: "BF2E", required: ["80"]});
+    bind.checkData("S5-C2 R_CHALLENGE outer tag", "BF2E", r2w5.outer_tag === null ? "absent" : r2w5.outer_tag);
+    var r2ch5 = null; for (var r2ci5 = 0; r2ci5 < r2w5.children.length; r2ci5++) { if (r2w5.children[r2ci5].tag === "80") { r2ch5 = r2w5.children[r2ci5]; } }
+    var r2chal5 = r2ch5 === null ? "" : r2ch5.value;
+    bind.checkData("S5-C2 tagOfeuiccChallenge", "80", r2ch5 === null ? "absent" : r2ch5.tag);
+    bind.checkData("S5-C2 lengthOfeuiccChallenge", "10", r2ch5 === null ? "absent" : (r2ch5.len < 16 ? ("0" + r2ch5.len.toString(16).toUpperCase()) : r2ch5.len.toString(16).toUpperCase()));
+    bind.checkData("S5-C3 R_CHALLENGE outer tag", "BF2E", r2w5.outer_tag === null ? "absent" : r2w5.outer_tag);
+    bind.checkData("S5-C3 tagOfeuiccChallenge", "80", r2ch5 === null ? "absent" : r2ch5.tag);
+    bind.checkData("S5-C3 lengthOfeuiccChallenge", "10", r2ch5 === null ? "absent" : (r2ch5.len < 16 ? ("0" + r2ch5.len.toString(16).toUpperCase()) : r2ch5.len.toString(16).toUpperCase()));
 
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccInfo1Request；");
+    // 步骤 6：Seq#02 Step2] MTD_STORE_DATA_SCRIPT（tc_step；REQ: RQ31_185, RQ57_013, RQ57_016）
+    // BPP segment load (data=null contract): <BPP_SEG_A3> bytes are runtime-domain (BPP synthesized at MTD_GENERATE_BPP;
+    // segmentation single source = bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651) — no bytes fabricated here.
+    var s6 = bind.sendApdu(null, "E2", "00", "00", null, "00", "6A88/6985");
+    bind.checkData("S6-C1 SW in 6A88/6985", "1", (s6.sw === "6A88" || s6.sw === "6985") ? "1" : "0");
+    // S6-C2: binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime-domain) (check_attestation)
 
+    // 步骤 7：Seq#02 Step3] MTD_STORE_DATA（tc_step；REQ: RQ31_185）
+    // <L> length binding and the conditional 61XX + GET RESPONSE chain (D.4.2) are CasBind internal state (chaining rule).
…（差异行超限，共 405 行，此处截断）