@slicedearth/whoisleuth-cli 2.0.1 → 2.1.0

package/packages/cases/case-response-packet.mjs

@@ -3,8 +3,8 @@
 import { buildCaseActionOutcomeSummary, buildCaseResponseLifecycleSummary, CASE_ACTION_EVENT_SOURCE_CLASSES, CASE_ACTION_STATES, CASE_ACTION_TYPES, CASE_ASSERTION_STATES, CASE_CLOSURE_REASONS, CASE_OBSERVED_EFFECT_SOURCE_CLASSES, CASE_OBSERVED_EFFECT_STATES, CASE_PIN_COMPLETENESS, CASE_PROVIDER_OUTCOMES, } from "./case-response-model.mjs";
 import { canonicalArtifactJsonV2, SORTED_JSON_V2 } from "../evidence/artifact-integrity.mjs";
 import { assertBoundedJsonStructure } from "../../lib/bounded-json.mjs";
-import { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_CASE_ACTION_EVENTS_PER_ACTION, MAX_CASE_ACTION_EVENTS_PER_CASE, MAX_CASE_ACTIONS, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_LIMITATION_LENGTH, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_REFERENCE_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, MAX_RESPONSE_VALUE_LENGTH, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, } from "../contracts/case-portability.mjs";
-export { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, };
+import { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_CASE_ACTION_EVENTS_PER_ACTION, MAX_CASE_ACTION_EVENTS_PER_CASE, MAX_CASE_ACTIONS, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_LIMITATION_LENGTH, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_REFERENCE_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, MAX_RESPONSE_VALUE_LENGTH, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, } from "../contracts/case-portability.mjs";
+export { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, };
 export const CASE_RESPONSE_PREFLIGHT_EVIDENCE_SCOPE = Object.freeze({
     version: 1,
     owner: 'case',
@@ -65,7 +65,7 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
         evidenceOrder: ['Incident facts', 'Registration evidence', 'Selected observations', 'Action history'],
         includedEvidence: ['Exact URLs', 'Observation time', 'Case disposition', 'Selected evidence pins', 'Registrar contact provenance'],
         excludedEvidence: ['Raw WHOIS or RDAP payloads', 'Unselected contacts', 'Provider secrets', 'Unrelated analyst notes'],
-        redactions: ['Remove unnecessary personal registration data', 'Remove credentials, tokens, and URL fragments'],
+        redactions: ['Remove unnecessary personal registration data', 'Credential-bearing URLs are rejected; review query strings and fragments for secrets before sharing'],
         attachments: ['Reviewed response packet', 'Optional normalised case report'],
         followUpFields: ['Registrar reference', 'Acknowledgement time', 'Resolution or transfer outcome'],
     },
@@ -79,7 +79,7 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
         evidenceOrder: ['Incident facts', 'Registry publication', 'Prior escalation', 'Selected observations'],
         includedEvidence: ['Exact URLs', 'Observation time', 'Registry contact provenance', 'Selected evidence pins', 'Prior action references'],
         excludedEvidence: ['Raw registry payloads', 'Unselected contacts', 'Secrets', 'Unsupported ownership claims'],
-        redactions: ['Remove unnecessary personal registration data', 'Remove credentials, tokens, and URL fragments'],
+        redactions: ['Remove unnecessary personal registration data', 'Credential-bearing URLs are rejected; review query strings and fragments for secrets before sharing'],
         attachments: ['Reviewed response packet', 'Optional normalised case report', 'Optional registrar reference'],
         followUpFields: ['Registry reference', 'Registrar referral', 'Delegation or status outcome'],
     },
@@ -93,7 +93,7 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
         evidenceOrder: ['Incident facts', 'Observed endpoint context', 'Selected web evidence', 'Action history'],
         includedEvidence: ['Exact URLs', 'Observation time', 'Selected HTTP, TLS, DNS, or page-identity pins', 'Contact provenance'],
         excludedEvidence: ['Raw response bodies', 'Cookies', 'Secrets', 'Unproven origin-host claims'],
-        redactions: ['Remove credentials, query secrets, fragments, cookies, and unrelated contacts'],
+        redactions: ['Credential-bearing URLs are rejected; review query strings, fragments, cookies, and unrelated contacts before sharing'],
         attachments: ['Reviewed response packet', 'Optional normalised case report'],
         followUpFields: ['Provider ticket', 'Content status', 'Infrastructure change outcome'],
     },
@@ -107,7 +107,7 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
         evidenceOrder: ['Incident facts', 'Selected observations', 'Analyst reasoning', 'Action history'],
         includedEvidence: ['Exact URLs', 'Observation time', 'Selected evidence pins', 'Contact source and limitations'],
         excludedEvidence: ['Raw upstream payloads', 'Secrets', 'Unselected case notes', 'Legal conclusions'],
-        redactions: ['Remove credentials, tokens, personal data, and unrelated identifiers'],
+        redactions: ['Credential-bearing URLs are rejected; review query strings, fragments, tokens, personal data, and unrelated identifiers before sharing'],
         attachments: ['Reviewed response packet', 'Optional normalised case report'],
         followUpFields: ['Security reference', 'Triage acknowledgement', 'Remediation outcome'],
     },
@@ -121,7 +121,7 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
         evidenceOrder: ['Exact URLs', 'Observed behaviour', 'Selected corroborating evidence', 'Limitations'],
         includedEvidence: ['Exact URLs', 'Observation time', 'Observed harm', 'Selected evidence pins', 'Contradictions and cautions'],
         excludedEvidence: ['Raw provider payloads', 'Secrets', 'Unselected personal data', 'Automated maliciousness claims'],
-        redactions: ['Remove credentials, tokens, URL fragments, and unrelated contacts'],
+        redactions: ['Credential-bearing URLs are rejected; review query strings, fragments, tokens, and unrelated contacts before sharing'],
         attachments: ['Reviewed response packet', 'Optional normalised case report'],
         followUpFields: ['Submission reference', 'Review state', 'Listing or delisting outcome'],
     },
@@ -135,7 +135,7 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
         evidenceOrder: ['Decision packet', 'Selected evidence', 'Incident facts', 'Action and investigation trail'],
         includedEvidence: ['Case disposition', 'Selected evidence pins', 'Analyst decisions and assertions', 'Action history', 'Exact URLs when relevant'],
         excludedEvidence: ['Raw upstream payloads', 'Secrets', 'Unselected personal data', 'Unsupported attribution'],
-        redactions: ['Remove credentials, tokens, and personal data not required for the internal decision'],
+        redactions: ['Credential-bearing URLs are rejected; review query strings, fragments, tokens, and unnecessary personal data before sharing'],
         attachments: ['Reviewed response packet', 'Normalised case report when required by internal policy'],
         followUpFields: ['Internal owner', 'Due date', 'Decision', 'Control or escalation outcome'],
     },
@@ -204,43 +204,109 @@ function normalizeLimitations(value) {
     }
     return [...unique];
 }
-function normalizeContacts(value, generatedAt) {
-    if (!Array.isArray(value))
-        return [];
+function actionContactKind(type) {
+    if (type === 'registrar_report')
+        return 'registrar';
+    if (type === 'registry_report')
+        return 'registry';
+    if (type === 'network_hosting_report')
+        return 'network_hosting';
+    if (type === 'security_contact_report')
+        return 'security_txt';
+    return 'manual';
+}
+function routeFreshness(observedAt, generatedAt) {
+    if (!observedAt)
+        return 'unknown';
+    const routeAge = Date.parse(generatedAt) - Date.parse(observedAt);
+    return routeAge < -MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS
+        || routeAge > RESPONSE_ROUTE_STALE_AFTER_DAYS * 86_400_000
+        ? 'stale'
+        : 'current';
+}
+function selectedPacketAction(caseRecord, input) {
+    const actionId = typeof input.actionId === 'string' && /^[A-Za-z0-9_-]{1,64}$/u.test(input.actionId)
+        ? input.actionId
+        : null;
+    return actionId ? caseRecord.actions.find((action) => action.id === actionId) ?? null : null;
+}
+function packetActionLineage(caseRecord, input) {
+    const selected = selectedPacketAction(caseRecord, input);
+    if (!selected)
+        return { selected: null, actions: [], ids: [], complete: true };
+    const byId = new Map(caseRecord.actions.map((action) => [action.id, action]));
+    const ids = [];
     const seen = new Set();
-    const contacts = [];
-    for (const raw of value.slice(0, MAX_RESPONSE_CONTACTS * 2)) {
-        if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-            continue;
-        const item = raw;
-        const kind = typeof item.kind === 'string' && CONTACT_KINDS.has(item.kind)
-            ? item.kind
-            : null;
-        const contact = text(item.contact, 320);
-        if (!kind || !contact)
-            continue;
-        const key = `${kind}\u0000${contact.toLowerCase()}`;
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        const observedAt = timestamp(item.observedAt);
-        const routeAge = observedAt && generatedAt ? Date.parse(generatedAt) - Date.parse(observedAt) : null;
-        contacts.push({
+    let current = selected;
+    while (current && ids.length < MAX_RESPONSE_ACTION_HISTORY && !seen.has(current.id)) {
+        ids.push(current.id);
+        seen.add(current.id);
+        current = current.originActionId ? byId.get(current.originActionId) : undefined;
+    }
+    const complete = !current;
+    return {
+        selected,
+        actions: ids.map((id) => byId.get(id)).filter(Boolean),
+        ids,
+        complete,
+    };
+}
+function bindPacketRoute(caseRecord, input, generatedAt) {
+    const profile = responsePacketProfile(input.profile);
+    const lineage = packetActionLineage(caseRecord, input);
+    const action = lineage.selected;
+    if (!action) {
+        return {
+            actionBinding: {
+                state: 'not_selected', selectedActionId: null, lineageActionIds: [],
+                limitations: ['No retained Case action is selected for this packet.'],
+            },
+            recipientRoute: null,
+            contacts: [],
+        };
+    }
+    const kind = actionContactKind(action.type);
+    const compatible = profile.requiredContactKind
+        ? kind === profile.requiredContactKind
+        : profile.id === 'browser_blocklist'
+            ? kind === 'manual'
+            : true;
+    if (!compatible) {
+        return {
+            actionBinding: {
+                state: 'selected', selectedActionId: action.id, lineageActionIds: [...lineage.ids],
+                limitations: [`The selected action does not match the ${profile.label.toLowerCase()} route requirement.`],
+            },
+            recipientRoute: null,
+            contacts: [],
+        };
+    }
+    const observedAt = timestamp(action.routeObservedAt);
+    const recipientRoute = {
+        actionId: action.id,
+        kind,
+        contact: text(action.recipient, 320),
+        source: text(action.contactSource, 120) || 'analyst supplied',
+        observedAt,
+        freshness: routeFreshness(observedAt, generatedAt),
+        limitations: normalizeLimitations(action.contactLimitations),
+    };
+    const contacts = kind === 'manual' ? [] : [{
             kind,
-            contact,
-            source: text(item.source, 120) || 'analyst supplied',
+            contact: recipientRoute.contact,
+            source: recipientRoute.source,
             observedAt,
-            freshness: routeAge === null
-                ? 'unknown'
-                : routeAge < -300_000 || routeAge > RESPONSE_ROUTE_STALE_AFTER_DAYS * 86_400_000
-                    ? 'stale'
-                    : 'current',
-            limitations: normalizeLimitations(item.limitations),
-        });
-        if (contacts.length >= MAX_RESPONSE_CONTACTS)
-            break;
-    }
-    return contacts;
+            freshness: recipientRoute.freshness,
+            limitations: [...recipientRoute.limitations],
+        }];
+    return {
+        actionBinding: {
+            state: 'selected', selectedActionId: action.id, lineageActionIds: [...lineage.ids],
+            limitations: lineage.complete ? [] : ['The origin-action lineage exceeded the packet action bound or contained a cycle.'],
+        },
+        recipientRoute,
+        contacts,
+    };
 }
 function normalizeSelectedEvidence(caseRecord, value) {
     if (!Array.isArray(value))
@@ -292,14 +358,11 @@ function readinessOverride(value, key) {
         limitations: normalizeLimitations(item.limitations),
     };
 }
-function buildResponseReadiness(caseRecord, input, generatedAt, contacts, selectedEvidence, contradictions) {
+function buildResponseReadiness(caseRecord, input, generatedAt, contacts, recipientRoute, selectedEvidence, contradictions) {
     const profile = responsePacketProfile(input.profile);
     const urls = normalizeUrls(input.abusiveUrls);
     const observedAt = timestamp(input.observedAt) || caseRecord.evidenceHistory.at(-1)?.capturedAt || null;
     const age = observedAt ? observationAge(observedAt, generatedAt) : null;
-    const requiredContact = profile.requiredContactKind
-        ? contacts.find((contact) => contact.kind === profile.requiredContactKind) ?? null
-        : contacts[0] ?? null;
     const infrastructure = readinessOverride(input.readiness, 'infrastructureResponsibility');
     const authority = readinessOverride(input.readiness, 'authorityReview');
     const contradictionReview = readinessOverride(input.readiness, 'contradictionsReview');
@@ -342,10 +405,10 @@ function buildResponseReadiness(caseRecord, input, generatedAt, contacts, select
         },
         {
             id: 'recipient_route', label: 'Recipient-route provenance and freshness',
-            state: !requiredContact ? 'not_provided' : requiredContact.freshness === 'stale' ? 'stale' : requiredContact.freshness === 'current' && requiredContact.source ? 'complete' : 'partial',
-            detail: !requiredContact ? 'No profile-appropriate recipient route is selected.' : `The selected route provenance is ${requiredContact.source}; freshness is ${requiredContact.freshness}.`,
+            state: !recipientRoute ? 'not_provided' : recipientRoute.freshness === 'stale' ? 'stale' : recipientRoute.freshness === 'current' && recipientRoute.source ? 'complete' : 'partial',
+            detail: !recipientRoute ? 'No profile-appropriate recipient route is selected.' : `The selected route provenance is ${recipientRoute.source}; freshness is ${recipientRoute.freshness}.`,
             requiredForAuthorisation: external,
-            limitations: requiredContact?.limitations ?? [],
+            limitations: recipientRoute?.limitations ?? [],
         },
         {
             id: 'authority_review', label: 'Authority review',
@@ -397,9 +460,9 @@ function buildResponseReadiness(caseRecord, input, generatedAt, contacts, select
 }
 export function buildCaseResponseReadiness(caseRecord, input, generatedAt = new Date().toISOString()) {
     const normalizedGeneratedAt = timestamp(generatedAt) || new Date().toISOString();
-    const contacts = normalizeContacts(input.contacts, normalizedGeneratedAt);
+    const binding = bindPacketRoute(caseRecord, input, normalizedGeneratedAt);
     const selectedEvidence = normalizeSelectedEvidence(caseRecord, input.selectedEvidencePinIds);
-    return buildResponseReadiness(caseRecord, input, normalizedGeneratedAt, contacts, selectedEvidence, normalizeContradictions(caseRecord));
+    return buildResponseReadiness(caseRecord, input, normalizedGeneratedAt, binding.contacts, binding.recipientRoute, selectedEvidence, normalizeContradictions(caseRecord));
 }
 function normalizeArtefactReferences(value) {
     if (!Array.isArray(value))
@@ -443,13 +506,16 @@ export function responsePacketProfile(value) {
 }
 export function buildResponsePacketProfilePreview(caseRecord, input) {
     const profile = responsePacketProfile(input.profile);
-    const contacts = normalizeContacts(input.contacts);
+    const binding = bindPacketRoute(caseRecord, input, caseRecord.updatedAt);
     const missingEvidence = [
         ...(!normalizeUrls(input.abusiveUrls).length ? ['At least one exact HTTP(S) URL'] : []),
         ...(!timestamp(input.observedAt) && !caseRecord.evidenceHistory.at(-1)?.capturedAt ? ['Observation time'] : []),
         ...(!normalizeSelectedEvidence(caseRecord, input.selectedEvidencePinIds).length ? ['Explicitly selected evidence pin'] : []),
-        ...(profile.requiredContactKind && !contacts.some((contact) => contact.kind === profile.requiredContactKind)
-            ? [`${contactLabel(profile.requiredContactKind)} contact route`]
+        ...(profile.id !== 'internal_soc' && binding.actionBinding.state !== 'selected'
+            ? ['Selected retained Case action']
+            : []),
+        ...(profile.id !== 'internal_soc' && !binding.recipientRoute
+            ? [`${profile.requiredContactKind ? contactLabel(profile.requiredContactKind) : 'Manual submission'} contact route`]
             : []),
     ];
     const category = text(input.category, MAX_ABUSE_CATEGORY_LENGTH) || 'domain activity';
@@ -472,7 +538,7 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
     const latestEvidence = caseRecord.evidenceHistory.at(-1) ?? null;
     const observedAt = timestamp(input.observedAt) || latestEvidence?.capturedAt || null;
     const normalizedGeneratedAt = timestamp(generatedAt) || new Date().toISOString();
-    const contacts = normalizeContacts(input.contacts, normalizedGeneratedAt);
+    const binding = bindPacketRoute(caseRecord, input, normalizedGeneratedAt);
     const urls = normalizeUrls(input.abusiveUrls);
     const selectedEvidence = normalizeSelectedEvidence(caseRecord, input.selectedEvidencePinIds);
     const requiredComplete = Boolean(text(input.category, MAX_ABUSE_CATEGORY_LENGTH)
@@ -485,6 +551,10 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
         .filter((item) => item.kind === 'contradiction' && item.state === 'open')
         .length;
     const actionSummary = buildCaseActionOutcomeSummary(caseRecord.actions, normalizedGeneratedAt);
+    const retainedPinIds = new Set(caseRecord.evidencePins.map((pin) => pin.id));
+    const evidenceLinkedDecisionCount = caseRecord.decisions.filter((decision) => decision.evidencePinIds.some((evidencePinId) => retainedPinIds.has(evidencePinId))).length;
+    const responseDisposition = ['suspicious', 'confirmed_abuse'].includes(caseRecord.disposition);
+    const reviewedActionCount = caseRecord.actions.filter((action) => ['reviewed', 'authorised', 'submitted', 'acknowledged', 'terminal'].includes(action.state)).length;
     const profile = responsePacketProfile(input.profile);
     const checks = [
         {
@@ -506,38 +576,48 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
         {
             id: 'analyst_decision',
             label: 'Analyst decision',
-            state: caseRecord.decisions.length ? 'pass' : 'caution',
-            detail: caseRecord.decisions.length
-                ? `${caseRecord.decisions.length} analyst decision${caseRecord.decisions.length === 1 ? '' : 's'} record the escalation rationale.`
-                : 'No explicit analyst decision explains why external reporting is appropriate.',
+            state: evidenceLinkedDecisionCount ? 'pass' : 'caution',
+            detail: evidenceLinkedDecisionCount
+                ? `${evidenceLinkedDecisionCount} analyst decision${evidenceLinkedDecisionCount === 1 ? '' : 's'} cite retained evidence and record the escalation rationale.`
+                : caseRecord.decisions.length
+                    ? 'Analyst decisions are recorded, but none cites a retained evidence pin.'
+                    : 'No explicit analyst decision explains why external reporting is appropriate.',
         },
         {
             id: 'recipient_route',
             label: 'Recipient route',
-            state: contacts.length ? 'pass' : 'caution',
-            detail: contacts.length
-                ? `${contacts.length} separately attributed contact route${contacts.length === 1 ? ' is' : 's are'} included.`
+            state: binding.recipientRoute ? 'pass' : profile.id === 'internal_soc' ? 'caution' : 'block',
+            detail: binding.recipientRoute
+                ? `The selected ${contactLabel(binding.recipientRoute.kind)} route is bound to action ${binding.recipientRoute.actionId}.`
                 : 'No contact route is included; identify and review the intended recipient before sending.',
         },
         {
             id: 'profile_recipient',
             label: 'Audience-specific recipient',
-            state: profile.requiredContactKind
-                ? contacts.some((contact) => contact.kind === profile.requiredContactKind) ? 'pass' : 'caution'
-                : 'pass',
+            state: profile.id === 'internal_soc'
+                ? 'pass'
+                : binding.recipientRoute ? 'pass' : 'block',
             detail: profile.requiredContactKind
-                ? contacts.some((contact) => contact.kind === profile.requiredContactKind)
+                ? binding.recipientRoute?.kind === profile.requiredContactKind
                     ? `The ${contactLabel(profile.requiredContactKind)} route required by the ${profile.label.toLowerCase()} is present.`
                     : `The ${profile.label.toLowerCase()} expects a separately attributed ${contactLabel(profile.requiredContactKind)} route.`
-                : `${profile.label} has no fixed external contact-kind requirement; confirm the intended manual destination.`,
+                : profile.id === 'browser_blocklist'
+                    ? binding.recipientRoute
+                        ? 'A manually reviewed submission destination is bound to the selected Case action.'
+                        : 'The browser or blocklist profile requires a manually reviewed submission destination recorded as a Case action.'
+                    : `${profile.label} has no fixed external contact-kind requirement.`,
         },
         {
             id: 'case_disposition',
             label: 'Case disposition',
-            state: ['suspicious', 'confirmed_abuse'].includes(caseRecord.disposition) ? 'pass' : 'caution',
-            detail: ['suspicious', 'confirmed_abuse'].includes(caseRecord.disposition)
-                ? `The case disposition is ${caseRecord.disposition.replaceAll('_', ' ')}.`
-                : `The case disposition is ${caseRecord.disposition.replaceAll('_', ' ')}; confirm it before external use.`,
+            state: responseDisposition && caseRecord.reviewReasonCode && evidenceLinkedDecisionCount ? 'pass' : 'caution',
+            detail: responseDisposition && caseRecord.reviewReasonCode && evidenceLinkedDecisionCount
+                ? `The case disposition is ${caseRecord.disposition.replaceAll('_', ' ')} with the reviewed reason ${caseRecord.reviewReasonCode.replaceAll('_', ' ')} and an evidence-linked decision.`
+                : !responseDisposition
+                    ? `The case disposition is ${caseRecord.disposition.replaceAll('_', ' ')}; confirm it before external use.`
+                    : !caseRecord.reviewReasonCode
+                        ? `The case disposition is ${caseRecord.disposition.replaceAll('_', ' ')}, but no reviewed reason is recorded.`
+                        : 'The case disposition and reason are recorded, but no analyst decision cites retained evidence.',
         },
         {
             id: 'evidence_freshness',
@@ -557,13 +637,23 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
                 ? `${openContradictions} open contradiction${openContradictions === 1 ? '' : 's'} should be addressed or disclosed.`
                 : 'No open contradictory-evidence assertion is recorded.',
         },
+        {
+            id: 'packet_action',
+            label: 'Packet action',
+            state: binding.actionBinding.state === 'selected' ? 'pass' : profile.id === 'internal_soc' ? 'caution' : 'block',
+            detail: binding.actionBinding.state === 'selected'
+                ? `Action ${binding.actionBinding.selectedActionId} owns this packet and its retained origin lineage.`
+                : 'Select the retained Case action this packet prepares or documents.',
+        },
         {
             id: 'action_tracking',
             label: 'Action tracking',
-            state: actionSummary.total ? 'pass' : 'caution',
-            detail: actionSummary.total
-                ? `${actionSummary.total} reviewed action${actionSummary.total === 1 ? ' is' : 's are'} tracked; ${actionSummary.overdue} overdue and ${actionSummary.followUpDue} due for follow-up.`
-                : 'No reviewed case action is recorded for ownership, submission, or follow-up.',
+            state: reviewedActionCount ? 'pass' : 'caution',
+            detail: reviewedActionCount
+                ? `${reviewedActionCount} reviewed or later-stage action${reviewedActionCount === 1 ? ' is' : 's are'} tracked; ${actionSummary.overdue} overdue and ${actionSummary.followUpDue} due for follow-up.`
+                : actionSummary.total
+                    ? `${actionSummary.total} action${actionSummary.total === 1 ? ' remains' : 's remain'} before reviewed state.`
+                    : 'No reviewed case action is recorded for ownership, submission, or follow-up.',
         },
     ];
     const counts = {
@@ -572,7 +662,7 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
         pass: checks.filter((item) => item.state === 'pass').length,
     };
     return {
-        version: 2,
+        version: 3,
         status: counts.block ? 'needs_input' : counts.caution ? 'review_cautions' : 'ready_for_review',
         canExport: counts.block === 0,
         counts,
@@ -580,16 +670,17 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
         actionSummary,
     };
 }
-function normalizeActionHistory(caseRecord) {
-    const omitted = Math.max(0, caseRecord.actions.length - MAX_RESPONSE_ACTION_HISTORY);
+function normalizeActionHistory(caseRecord, input) {
+    const lineage = packetActionLineage(caseRecord, input);
+    const omitted = Math.max(0, caseRecord.actions.length - lineage.actions.length);
     return {
-        actions: caseRecord.actions
-            .slice(-MAX_RESPONSE_ACTION_HISTORY)
+        actions: lineage.actions
             .map((action) => ({
             actionId: action.id,
             type: text(action.type, 80),
             recipient: text(action.recipient, 320),
             contactSource: text(action.contactSource, 120),
+            routeObservedAt: timestamp(action.routeObservedAt),
             state: text(action.state, 80),
             reference: text(action.reference, 500) || null,
             providerOutcome: text(action.providerOutcome, 80) || null,
@@ -616,18 +707,37 @@ function normalizeActionHistory(caseRecord) {
             updatedAt: timestamp(action.updatedAt) ?? caseRecord.updatedAt,
         })),
         omitted,
-        limitations: omitted ? [
-            `${omitted} earlier Case response action${omitted === 1 ? '' : 's'} omitted from this bounded packet projection.`,
-            'Provider-outcome time is withheld because an omitted action could contain a later or concurrent typed event.',
-        ] : [],
+        limitations: [
+            ...(omitted ? [`${omitted} Case response action${omitted === 1 ? '' : 's'} outside the retained selected-action lineage ${omitted === 1 ? 'was' : 'were'} excluded from this packet.`] : []),
+            ...(!lineage.complete ? ['The selected action origin lineage exceeded the packet bound or contained a cycle; provider-outcome time is withheld.'] : []),
+        ],
+        actionBinding: lineage.selected ? {
+            state: 'selected',
+            selectedActionId: lineage.selected.id,
+            lineageActionIds: [...lineage.ids],
+            limitations: lineage.complete ? [] : ['The origin-action lineage is incomplete.'],
+        } : {
+            state: 'not_selected', selectedActionId: null, lineageActionIds: [],
+            limitations: ['No retained Case action is selected for this packet.'],
+        },
+        lineageComplete: lineage.complete,
     };
 }
-function normalizeResponseLifecycle(caseRecord, escalationHistoryOmitted) {
-    const summary = buildCaseResponseLifecycleSummary(caseRecord);
-    const providerOutcomeState = escalationHistoryOmitted ? 'ambiguous' : summary.providerOutcomeState;
+function normalizeResponseLifecycle(caseRecord, actionIds, lineageComplete) {
+    const scopedIds = new Set(actionIds);
+    const scopedRecord = {
+        ...caseRecord,
+        actions: caseRecord.actions.filter((action) => scopedIds.has(action.id)),
+        closures: {
+            ...caseRecord.closures,
+            records: caseRecord.closures.records.filter((closure) => closure.actionId !== null && scopedIds.has(closure.actionId)),
+        },
+    };
+    const summary = buildCaseResponseLifecycleSummary(scopedRecord);
+    const providerOutcomeState = lineageComplete ? summary.providerOutcomeState : 'ambiguous';
     return {
         providerOutcomeState,
-        latestProviderOutcome: !escalationHistoryOmitted && summary.latestProviderOutcome ? { ...summary.latestProviderOutcome } : null,
+        latestProviderOutcome: lineageComplete && summary.latestProviderOutcome ? { ...summary.latestProviderOutcome } : null,
         observedChangeState: summary.observedChangeState,
         latestObservedEffect: summary.latestObservedEffect ? { ...summary.latestObservedEffect } : null,
         latestObservedChangeAt: summary.latestObservedChangeAt,
@@ -641,7 +751,7 @@ function normalizeResponseLifecycle(caseRecord, escalationHistoryOmitted) {
             'Provider workflow outcomes and independently observed technical effects are separate point-in-time records.',
             'A provider acknowledgement, terminal state, or reported resolution never becomes independently observed remediation, absence, or safety.',
             'Times are withheld when the corresponding typed event is missing or ambiguous.',
-            ...(escalationHistoryOmitted ? ['Provider-outcome time is withheld because the bounded packet omits earlier response actions.'] : []),
+            ...(!lineageComplete ? ['Provider-outcome time is withheld because the selected action origin lineage is incomplete.'] : []),
         ],
     };
 }
@@ -666,11 +776,11 @@ async function sha256(value) {
 export function buildCaseResponseReviewInputs(caseRecord, input, generatedAt) {
     const profile = buildResponsePacketProfilePreview(caseRecord, input);
     const category = text(input.category, MAX_ABUSE_CATEGORY_LENGTH);
-    const contacts = normalizeContacts(input.contacts, generatedAt);
     const selectedEvidence = normalizeSelectedEvidence(caseRecord, input.selectedEvidencePinIds);
     const contradictions = normalizeContradictions(caseRecord);
-    const readiness = buildResponseReadiness(caseRecord, input, generatedAt, contacts, selectedEvidence, contradictions);
-    const escalation = normalizeActionHistory(caseRecord);
+    const binding = bindPacketRoute(caseRecord, input, generatedAt);
+    const readiness = buildResponseReadiness(caseRecord, input, generatedAt, binding.contacts, binding.recipientRoute, selectedEvidence, contradictions);
+    const escalation = normalizeActionHistory(caseRecord, input);
     return {
         contract: CASE_RESPONSE_REVIEW_INPUTS_SCHEMA,
         version: CASE_RESPONSE_REVIEW_INPUTS_VERSION,
@@ -698,7 +808,9 @@ export function buildCaseResponseReviewInputs(caseRecord, input, generatedAt) {
             observedHarm: text(input.observedHarm, MAX_RESPONSE_HARM_LENGTH),
             observedAt: timestamp(input.observedAt) || caseRecord.evidenceHistory.at(-1)?.capturedAt || null,
         },
-        contacts,
+        contacts: binding.contacts,
+        recipientRoute: binding.recipientRoute,
+        actionBinding: escalation.actionBinding,
         selectedEvidence,
         contradictions,
         readiness,
@@ -706,7 +818,7 @@ export function buildCaseResponseReviewInputs(caseRecord, input, generatedAt) {
         escalationHistory: escalation.actions,
         escalationHistoryOmitted: escalation.omitted,
         escalationHistoryLimitations: escalation.limitations,
-        responseLifecycle: normalizeResponseLifecycle(caseRecord, escalation.omitted),
+        responseLifecycle: normalizeResponseLifecycle(caseRecord, escalation.actionBinding.lineageActionIds, escalation.lineageComplete),
     };
 }
 const CASE_RESPONSE_REVIEW_INPUT_KEYS = Object.freeze([
@@ -716,6 +828,8 @@ const CASE_RESPONSE_REVIEW_INPUT_KEYS = Object.freeze([
     'case',
     'incident',
     'contacts',
+    'recipientRoute',
+    'actionBinding',
     'selectedEvidence',
     'contradictions',
     'readiness',
@@ -725,6 +839,7 @@ const CASE_RESPONSE_REVIEW_INPUT_KEYS = Object.freeze([
     'escalationHistoryLimitations',
     'responseLifecycle',
 ]);
+const PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUT_KEYS = Object.freeze(CASE_RESPONSE_REVIEW_INPUT_KEYS.filter((key) => key !== 'recipientRoute' && key !== 'actionBinding'));
 function exactReviewRecord(value, keys, label) {
     if (!value || typeof value !== 'object' || Array.isArray(value)) {
         throw new TypeError(`${label} must be an exact object.`);
@@ -832,11 +947,20 @@ function recursivelyFreezeReviewValue(value) {
     return Object.freeze(value);
 }
 export function validateCaseResponseReviewInputs(value) {
-    const source = exactReviewRecord(value, CASE_RESPONSE_REVIEW_INPUT_KEYS, 'Case-response review inputs');
-    if (source.contract !== CASE_RESPONSE_REVIEW_INPUTS_SCHEMA
-        || source.version !== CASE_RESPONSE_REVIEW_INPUTS_VERSION) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new TypeError('Case-response review inputs must be an exact object.');
+    }
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    if (!descriptors.contract || !Object.hasOwn(descriptors.contract, 'value')
+        || !descriptors.version || !Object.hasOwn(descriptors.version, 'value')) {
+        throw new TypeError('Case-response review inputs must not contain accessors.');
+    }
+    const current = descriptors.version.value === CASE_RESPONSE_REVIEW_INPUTS_VERSION;
+    const publishedV2 = descriptors.version.value === PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION;
+    if (descriptors.contract.value !== CASE_RESPONSE_REVIEW_INPUTS_SCHEMA || (!current && !publishedV2)) {
         throw new TypeError('Case-response review inputs contain an unsupported version, shape, or bound.');
     }
+    const source = exactReviewRecord(value, current ? CASE_RESPONSE_REVIEW_INPUT_KEYS : PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUT_KEYS, 'Case-response review inputs');
     const profile = exactReviewRecord(source.profile, [
         'id', 'label', 'audience', 'subject', 'checklist', 'includedEvidence',
         'excludedEvidence', 'redactions',
@@ -880,6 +1004,38 @@ export function validateCaseResponseReviewInputs(value) {
         reviewText(contact.observedAt, 64, 'Case-response contact observation time', true);
         reviewStrings(contact.limitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response contact limitations');
     }
+    if (current && source.recipientRoute !== null) {
+        const route = exactReviewRecord(source.recipientRoute, [
+            'actionId', 'kind', 'contact', 'source', 'observedAt', 'freshness', 'limitations',
+        ], 'Case-response recipient route');
+        reviewText(route.actionId, 64, 'Case-response recipient action id');
+        reviewEnum(route.kind, [...RESPONSE_CONTACT_KINDS, 'manual'], 'Case-response recipient kind');
+        reviewText(route.contact, 320, 'Case-response recipient value');
+        reviewText(route.source, 120, 'Case-response recipient source');
+        reviewText(route.observedAt, 64, 'Case-response recipient observation time', true);
+        reviewEnum(route.freshness, ['current', 'stale', 'unknown'], 'Case-response recipient freshness');
+        reviewStrings(route.limitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response recipient limitations');
+    }
+    let currentLineageActionIds = null;
+    if (current) {
+        const actionBinding = exactReviewRecord(source.actionBinding, [
+            'state', 'selectedActionId', 'lineageActionIds', 'limitations',
+        ], 'Case-response action binding');
+        const bindingState = reviewEnum(actionBinding.state, ['selected', 'not_selected'], 'Case-response action binding state');
+        const selectedActionId = reviewText(actionBinding.selectedActionId, 64, 'Case-response selected action id', true);
+        const lineageActionIds = reviewStrings(actionBinding.lineageActionIds, MAX_RESPONSE_ACTION_HISTORY, 64, 'Case-response action lineage');
+        currentLineageActionIds = lineageActionIds;
+        if ((bindingState === 'selected') !== Boolean(selectedActionId)
+            || (selectedActionId !== null && lineageActionIds[0] !== selectedActionId)
+            || new Set(lineageActionIds).size !== lineageActionIds.length) {
+            throw new TypeError('Case-response action binding is inconsistent.');
+        }
+        reviewStrings(actionBinding.limitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response action-binding limitations');
+        if (source.recipientRoute !== null
+            && source.recipientRoute.actionId !== selectedActionId) {
+            throw new TypeError('Case-response recipient route is not bound to the selected action.');
+        }
+    }
     for (const candidate of boundedReviewArray(source.selectedEvidence, MAX_RESPONSE_SELECTED_EVIDENCE, 'Case-response selected evidence')) {
         const evidence = exactReviewRecord(candidate, [
             'id', 'label', 'source', 'observedAt', 'completeness', 'limitations',
@@ -951,15 +1107,23 @@ export function validateCaseResponseReviewInputs(value) {
             reviewCount(reference.byteLength, 100 * 1024 * 1024, 'Case-response artefact byte length');
         reviewStrings(reference.limitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response artefact limitations');
     }
+    const escalationActionIds = [];
     for (const candidate of boundedReviewArray(source.escalationHistory, MAX_RESPONSE_ACTION_HISTORY, 'Case-response escalation history')) {
         const action = exactReviewRecord(candidate, [
             'actionId', 'type', 'recipient', 'contactSource', 'state', 'reference',
+            ...(current ? ['routeObservedAt'] : []),
             'providerOutcome', 'outcomeDetail', 'originActionId', 'historyOmitted',
             'historyLimitations', 'transitions', 'createdAt', 'updatedAt',
         ], 'Case-response escalation action');
         for (const key of ['actionId', 'recipient', 'contactSource', 'createdAt', 'updatedAt']) {
             reviewText(action[key], MAX_RESPONSE_VALUE_LENGTH, `Case-response action ${key}`);
         }
+        if (escalationActionIds.includes(action.actionId)) {
+            throw new TypeError('Case-response escalation action identities must be unique.');
+        }
+        escalationActionIds.push(action.actionId);
+        if (current)
+            reviewText(action.routeObservedAt, 64, 'Case-response action route observation time', true);
         reviewEnum(action.type, CASE_ACTION_TYPES, 'Case-response action type');
         reviewEnum(action.state, CASE_ACTION_STATES, 'Case-response action state');
         for (const key of ['reference', 'outcomeDetail', 'originActionId']) {
@@ -989,6 +1153,11 @@ export function validateCaseResponseReviewInputs(value) {
             reviewStrings(transition.limitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response transition limitations');
         }
     }
+    if (currentLineageActionIds
+        && (currentLineageActionIds.length !== escalationActionIds.length
+            || escalationActionIds.some((id, index) => currentLineageActionIds?.[index] !== id))) {
+        throw new TypeError('Case-response escalation history must match the selected action lineage in order.');
+    }
     reviewCount(source.escalationHistoryOmitted, MAX_CASE_ACTIONS, 'Case-response omitted action count');
     reviewStrings(source.escalationHistoryLimitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response escalation limitations');
     validateReviewLifecycle(source.responseLifecycle);
@@ -1068,9 +1237,11 @@ function escapeMarkdown(value) {
 }
 function contactLabel(value) {
     if (value === 'network_hosting')
-        return 'Network or hosting';
+        return 'Observed endpoint network registration';
     if (value === 'security_txt')
         return 'security.txt';
+    if (value === 'manual')
+        return 'Manual submission';
     return value.charAt(0).toUpperCase() + value.slice(1);
 }
 export async function buildCaseResponsePacket(caseRecord, input, generatedAt = new Date().toISOString()) {
@@ -1086,6 +1257,8 @@ export async function buildCaseResponsePacket(caseRecord, input, generatedAt = n
     const normalizedGeneratedAt = timestamp(generatedAt) || new Date().toISOString();
     const reviewMaterial = buildCaseResponseReviewInputs(caseRecord, input, normalizedGeneratedAt);
     const contacts = reviewMaterial.contacts;
+    const recipientRoute = reviewMaterial.recipientRoute;
+    const actionBinding = reviewMaterial.actionBinding;
     const selectedEvidence = reviewMaterial.selectedEvidence;
     const contradictions = reviewMaterial.contradictions;
     const readiness = reviewMaterial.readiness;
@@ -1141,6 +1314,8 @@ export async function buildCaseResponsePacket(caseRecord, input, generatedAt = n
             observedAt,
         },
         contacts,
+        recipientRoute,
+        actionBinding,
         selectedEvidence,
         contradictions,
         readiness,
@@ -1189,24 +1364,26 @@ export async function buildCaseResponsePacket(caseRecord, input, generatedAt = n
         '',
         ...abusiveUrls.map((url) => `- ${escapeMarkdown(url)}`),
         '',
-        '## Escalation contacts',
+        '## Selected response route',
         '',
-        ...(contacts.length
-            ? contacts.flatMap((contact) => [
-                `### ${contactLabel(contact.kind)}`,
+        ...(recipientRoute
+            ? [
+                `### ${contactLabel(recipientRoute.kind)}`,
                 '',
-                `- Contact: ${escapeMarkdown(contact.contact)}`,
-                `- Source: ${escapeMarkdown(contact.source)}`,
-                `- Route observed: ${contact.observedAt ?? 'Not provided'} (${contact.freshness})`,
-                `- Limitations: ${contact.limitations.length ? contact.limitations.map(escapeMarkdown).join('; ') : 'None recorded'}`,
+                `- Case action: ${escapeMarkdown(recipientRoute.actionId)}`,
+                `- Contact: ${escapeMarkdown(recipientRoute.contact)}`,
+                `- Source: ${escapeMarkdown(recipientRoute.source)}`,
+                `- Route observed: ${recipientRoute.observedAt ?? 'Not provided'} (${recipientRoute.freshness})`,
+                `- Limitations: ${recipientRoute.limitations.length ? recipientRoute.limitations.map(escapeMarkdown).join('; ') : 'None recorded'}`,
                 '',
-            ])
-            : ['No escalation contact was included.', '']),
-        '## Escalation history',
+            ]
+            : ['No profile-appropriate response route was bound to this packet.', '']),
+        '## Selected action lineage',
         '',
         ...(escalationHistory.length
             ? escalationHistory.flatMap((action) => [
                 `- ${escapeMarkdown(action.type.replaceAll('_', ' '))} to ${escapeMarkdown(action.recipient)} · ${escapeMarkdown(action.state.replaceAll('_', ' '))} · updated ${action.updatedAt}`,
+                `  - Route observed: ${action.routeObservedAt ?? 'Not provided'}`,
                 ...(action.reference ? [`  - Reference: ${escapeMarkdown(action.reference)}`] : []),
                 ...(action.providerOutcome ? [`  - Typed provider outcome: ${escapeMarkdown(action.providerOutcome.replaceAll('_', ' '))}`] : []),
                 ...(action.outcomeDetail ? [`  - Outcome detail: ${escapeMarkdown(action.outcomeDetail)}`] : []),
@@ -1221,8 +1398,8 @@ export async function buildCaseResponsePacket(caseRecord, input, generatedAt = n
                 ...(action.historyOmitted ? [`  - ${action.historyOmitted} earlier transition event${action.historyOmitted === 1 ? '' : 's'} omitted by bound.`] : []),
                 ...action.historyLimitations.map((limitation) => `  - History limitation: ${escapeMarkdown(limitation)}`),
             ])
-            : ['No reviewed case actions were recorded.']),
-        ...(escalationHistoryOmitted ? [`- Earlier actions omitted from packet projection: ${escalationHistoryOmitted}`] : []),
+            : ['No Case action was selected.']),
+        ...(escalationHistoryOmitted ? [`- Unrelated Case actions excluded from packet: ${escalationHistoryOmitted}`] : []),
         ...escalationHistoryLimitations.map((limitation) => `- Packet history limitation: ${escapeMarkdown(limitation)}`),
         '',
         '## Readiness and authorisation',
@@ -1270,7 +1447,7 @@ export async function buildCaseResponsePacket(caseRecord, input, generatedAt = n
         ...profile.checklist.map((item) => `- Checklist: ${escapeMarkdown(item)}`),
         ...profile.includedEvidence.map((item) => `- Included: ${escapeMarkdown(item)}`),
         ...profile.excludedEvidence.map((item) => `- Excluded: ${escapeMarkdown(item)}`),
-        ...profile.redactions.map((item) => `- Redaction: ${escapeMarkdown(item)}`),
+        ...profile.redactions.map((item) => `- Redaction to confirm: ${escapeMarkdown(item)}`),
         ...profile.attachments.map((item) => `- Attachment expectation: ${escapeMarkdown(item)}`),
         ...profile.followUpFields.map((item) => `- Follow-up field: ${escapeMarkdown(item)}`),
     ];
@@ -1290,6 +1467,14 @@ export async function buildCaseResponsePacket(caseRecord, input, generatedAt = n
         'Exact URLs:',
         ...abusiveUrls.map((url) => `- ${url}`),
         '',
+        'Selected evidence:',
+        ...(selectedEvidence.length
+            ? selectedEvidence.map((item) => `- ${item.label} — ${item.source}, observed ${item.observedAt} (${item.completeness})`)
+            : ['- No Case evidence pin was selected.']),
+        '',
+        `Reviewed packet SHA-256: ${digestSha256}`,
+        'Attach the reviewed packet (and any separately reviewed evidence files) through the recipient’s approved submission channel; this message does not embed or transmit attachments.',
+        '',
         responseLifecycle.latestProviderOutcome
             ? `Provider outcome time: ${responseLifecycle.latestProviderOutcome.occurredAt} (${responseLifecycle.latestProviderOutcome.outcome.replaceAll('_', ' ')})`
             : `Provider outcome time: Withheld because the typed event state is ${responseLifecycle.providerOutcomeState}.`,