From f8b32520cae91bfdd1ef218ab88e44093a24dada Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 10:34:16 +0700
Subject: [PATCH 1/9] fix(p0-d): keep live signal grid in bounded virtualized
 star viewport

---
 MainWindow.xaml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/MainWindow.xaml b/MainWindow.xaml
index 7f618bc1e..085352c48 100644
--- a/MainWindow.xaml
+++ b/MainWindow.xaml
@@ -607,12 +607,16 @@
                                         </Border>
                                     </Grid>
 
-                                    <DataGrid Grid.Row="2" ItemsSource="{Binding SelectedDevice.Points}" IsReadOnly="True"
+                                    <DataGrid x:Name="ExplorerLiveValuesGrid" Grid.Row="2"
+                                              ItemsSource="{Binding SelectedDevice.Points}" IsReadOnly="True"
                                               Loaded="ExplorerLiveGrid_Loaded"
                                               Style="{StaticResource ModernDataGrid}" FrozenColumnCount="2"
+                                              MinHeight="0" VerticalAlignment="Stretch"
                                               EnableRowVirtualization="True" EnableColumnVirtualization="True"
                                               VirtualizingPanel.IsVirtualizing="True" VirtualizingPanel.VirtualizationMode="Recycling"
-                                              ScrollViewer.CanContentScroll="True" ScrollViewer.HorizontalScrollBarVisibility="Auto">
+                                              ScrollViewer.CanContentScroll="True"
+                                              ScrollViewer.VerticalScrollBarVisibility="Auto"
+                                              ScrollViewer.HorizontalScrollBarVisibility="Auto">
                                         <DataGrid.RowStyle>
                                             <Style TargetType="DataGridRow" BasedOn="{StaticResource {x:Type DataGridRow}}">
                                                 <Style.Triggers>

From 142519858312308d887b96bb32ea210c56d5b2ac Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 10:34:51 +0700
Subject: [PATCH 2/9] test(p0-d): guard viewport and command dock without
 namespace-blind XML checks

---
 .../P0DLiveSignalViewportContractTests.cs     | 74 +++++++++++++++++++
 1 file changed, 74 insertions(+)
 create mode 100644 tests/ARSAS.Tests/P0DLiveSignalViewportContractTests.cs

diff --git a/tests/ARSAS.Tests/P0DLiveSignalViewportContractTests.cs b/tests/ARSAS.Tests/P0DLiveSignalViewportContractTests.cs
new file mode 100644
index 000000000..48764d6ad
--- /dev/null
+++ b/tests/ARSAS.Tests/P0DLiveSignalViewportContractTests.cs
@@ -0,0 +1,74 @@
+using System.Xml.Linq;
+
+namespace ARSAS.Tests;
+
+/// <summary>
+/// Structural WPF contract only. Actual DPI and window geometry remain
+/// a separate Windows rendered-workflow acceptance gate.
+/// </summary>
+public sealed class P0DLiveSignalViewportContractTests
+{
+    private static readonly XNamespace Xaml =
+        "http://schemas.microsoft.com/winfx/2006/xaml";
+
+    [Fact]
+    public void LiveSignalValues_StayInFiniteStarViewport_WithVirtualizedIndependentScrolling()
+    {
+        var xaml = XDocument.Load(Path.Combine(FindRepositoryRoot(), "MainWindow.xaml"));
+        var viewport = xaml.Descendants().Single(e =>
+            e.Name.LocalName == "DataGrid" &&
+            (string?)e.Attribute(Xaml + "Name") == "ExplorerLiveValuesGrid");
+
+        Assert.Equal("2", (string?)viewport.Attribute("Grid.Row"));
+        Assert.Equal("0", (string?)viewport.Attribute("MinHeight"));
+        Assert.Equal("Stretch", (string?)viewport.Attribute("VerticalAlignment"));
+        Assert.Equal("Auto", (string?)viewport.Attribute("ScrollViewer.VerticalScrollBarVisibility"));
+        Assert.Equal("Auto", (string?)viewport.Attribute("ScrollViewer.HorizontalScrollBarVisibility"));
+        Assert.Equal("True", (string?)viewport.Attribute("ScrollViewer.CanContentScroll"));
+        Assert.Equal("True", (string?)viewport.Attribute("EnableRowVirtualization"));
+        Assert.Equal("True", (string?)viewport.Attribute("VirtualizingPanel.IsVirtualizing"));
+        Assert.Equal("Recycling", (string?)viewport.Attribute("VirtualizingPanel.VirtualizationMode"));
+        Assert.Equal("2", (string?)viewport.Attribute("FrozenColumnCount"));
+
+        var host = viewport.Parent;
+        Assert.NotNull(host);
+        Assert.Equal("Grid", host!.Name.LocalName);
+        var rows = host.Elements().Single(e => e.Name.LocalName == "Grid.RowDefinitions")
+            .Elements().ToArray();
+        Assert.Equal(3, rows.Length);
+        Assert.Equal("*", (string?)rows[2].Attribute("Height"));
+    }
+
+    [Fact]
+    public void CommandDock_RemainsSeparateFromValuesStarRegion()
+    {
+        var xaml = XDocument.Load(Path.Combine(FindRepositoryRoot(), "MainWindow.xaml"));
+        var viewport = xaml.Descendants().Single(e =>
+            (string?)e.Attribute(Xaml + "Name") == "ExplorerLiveValuesGrid");
+        var card = viewport.Parent?.Parent;
+        var shell = card?.Parent;
+        Assert.NotNull(shell);
+        Assert.Equal("Grid", shell!.Name.LocalName);
+        var shellRows = shell.Elements()
+            .Single(e => e.Name.LocalName == "Grid.RowDefinitions")
+            .Elements().ToArray();
+        Assert.Equal(2, shellRows.Length);
+        Assert.Equal("*", (string?)shellRows[0].Attribute("Height"));
+        Assert.Equal("Auto", (string?)shellRows[1].Attribute("Height"));
+
+        Assert.Equal("0", (string?)card!.Attribute("Grid.Row"));
+        var dock = shell.Elements().Single(e =>
+            (string?)e.Attribute(Xaml + "Name") == "CommandPanelExpander");
+        Assert.Equal("1", (string?)dock.Attribute("Grid.Row"));
+    }
+
+    private static string FindRepositoryRoot()
+    {
+        var folder = new DirectoryInfo(AppContext.BaseDirectory);
+        while (folder is not null &&
+               !File.Exists(Path.Combine(folder.FullName, "MainWindow.xaml")))
+            folder = folder.Parent;
+        return folder?.FullName ?? throw new InvalidOperationException(
+            "Test requires the tracked MainWindow.xaml.");
+    }
+}

From 0e084040e5d8f7c19725dfea4005e5bd5eff06c6 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 10:39:45 +0700
Subject: [PATCH 3/9] fix(p0-d): retain existing Live Signal attribute-order
 regression contract

---
 MainWindow.xaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/MainWindow.xaml b/MainWindow.xaml
index 085352c48..c14ff0b23 100644
--- a/MainWindow.xaml
+++ b/MainWindow.xaml
@@ -607,8 +607,7 @@
                                         </Border>
                                     </Grid>
 
-                                    <DataGrid x:Name="ExplorerLiveValuesGrid" Grid.Row="2"
-                                              ItemsSource="{Binding SelectedDevice.Points}" IsReadOnly="True"
+                                    <DataGrid x:Name="ExplorerLiveValuesGrid" Grid.Row="2" ItemsSource="{Binding SelectedDevice.Points}" IsReadOnly="True"
                                               Loaded="ExplorerLiveGrid_Loaded"
                                               Style="{StaticResource ModernDataGrid}" FrozenColumnCount="2"
                                               MinHeight="0" VerticalAlignment="Stretch"

From 26c4c51d16bf858fc828b87d2b11271a92d4233e Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 11:52:52 +0700
Subject: [PATCH 4/9] fix(p0-d): seal read-evidence ZIP manifest with exact CSV
 SHA-256

---
 Models/IedBrowserReadEvidenceBundle.cs | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Models/IedBrowserReadEvidenceBundle.cs b/Models/IedBrowserReadEvidenceBundle.cs
index fbcb58422..b3751adb8 100644
--- a/Models/IedBrowserReadEvidenceBundle.cs
+++ b/Models/IedBrowserReadEvidenceBundle.cs
@@ -1,4 +1,5 @@
 using System.IO.Compression;
+using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
 
@@ -22,6 +23,9 @@ public static byte[] Build(
                 "Selected-page evidence exceeded the 4 MiB diagnostic boundary.");
         var rowCount = Math.Max(0, csv.Split('\n').Length -
             (csv.EndsWith('\n') ? 2 : 1));
+        // Hash the exact UTF-8 bytes written to the CSV ZIP entry, not a normalized copy.
+        var csvBytes = new UTF8Encoding(false).GetBytes(csv);
+        var csvSha256 = Convert.ToHexString(SHA256.HashData(csvBytes)).ToLowerInvariant();
         using var buffer = new MemoryStream();
         using (var archive = new ZipArchive(buffer, ZipArchiveMode.Create, leaveOpen: true))
         {
@@ -41,6 +45,7 @@ static void Write(ZipArchive archive, string name, string body)
                 EngineVersion = engineVersion,
                 Association = association,
                 SelectedTargetRows = rowCount,
+                ReadEvidenceCsvSha256 = csvSha256,
                 WireGvaStatus = "NOT_CAPTURED",
                 WireInvokeStatus = "NOT_CAPTURED",
                 UiProjectionStatus = "NOT_MEASURED",

From ebd204922eca74e4e7039e8843eead77fe20b8c7 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 11:52:55 +0700
Subject: [PATCH 5/9] test(p0-d): verify evidence archive integrity against
 manifest hash

---
 .../ARSAS.Tests/P0DReadEvidenceBundleTests.cs | 24 +++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
index a758daecf..01befda58 100644
--- a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
+++ b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
@@ -1,6 +1,7 @@
 using System.IO.Compression;
 using System.Text;
 using System.Text.Json;
+using System.Security.Cryptography;
 using ArIED61850Tester.Models;
 
 namespace ARSAS.Tests;
@@ -31,6 +32,8 @@ public void OptInBundle_IsBounded_SelfIdentifying_AndDoesNotInventMmsProof()
         var root = doc.RootElement;
         Assert.Equal(1, root.GetProperty("SchemaVersion").GetInt32());
         Assert.Equal(2, root.GetProperty("SelectedTargetRows").GetInt32());
+        Assert.Equal(Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(csv))).ToLowerInvariant(),
+            root.GetProperty("ReadEvidenceCsvSha256").GetString());
         Assert.Equal(4, root.GetProperty("Association").GetInt64());
         Assert.Equal("1.6.40+appsha", root.GetProperty("AppVersion").GetString());
         Assert.Equal("1.6.40+enginesha", root.GetProperty("EngineVersion").GetString());
@@ -41,6 +44,27 @@ public void OptInBundle_IsBounded_SelfIdentifying_AndDoesNotInventMmsProof()
         Assert.Null(archive.GetEntry("network.pcap"));
     }
 
+    [Fact]
+    public void ManifestHashMatchesArchivedPayload_AndDetectsModifiedCsv()
+    {
+        const string csv = "CanonicalReference,FC,LedgerState\\r\\n" +
+            "\\"LAB/LLN0.Mod.origin.orIdent\\",\\"ST\\",\\"OBSERVED\\"\\r\\n";
+        var archiveBytes = IedBrowserReadEvidenceBundle.Build(
+            csv, "app", "engine", 7, DateTimeOffset.UnixEpoch);
+        using var archive = new ZipArchive(new MemoryStream(archiveBytes), ZipArchiveMode.Read);
+        using var csvStream = archive.GetEntry("read-evidence.csv")!.Open();
+        using var payload = new MemoryStream();
+        csvStream.CopyTo(payload);
+        var actualHash = Convert.ToHexString(SHA256.HashData(payload.ToArray())).ToLowerInvariant();
+        using var manifestStream = archive.GetEntry("manifest.json")!.Open();
+        using var manifest = JsonDocument.Parse(manifestStream);
+        var declaredHash = manifest.RootElement.GetProperty("ReadEvidenceCsvSha256").GetString();
+        Assert.Equal(declaredHash, actualHash);
+        Assert.NotEqual(declaredHash,
+            Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(csv + "tampered"))).ToLowerInvariant());
+        Assert.Equal(1, manifest.RootElement.GetProperty("SelectedTargetRows").GetInt32());
+    }
+
     [Fact]
     public void OversizedOrNullEvidenceCannotProduceDiagnosticBundle()
     {

From 6e2c50e4bf0d9826fdc95e23ff7cce89f54c4f24 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 11:53:14 +0700
Subject: [PATCH 6/9] test(p0-d): use valid deterministic CSV fixture for ZIP
 digest

---
 tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
index 01befda58..7ca8aee4b 100644
--- a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
+++ b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
@@ -48,7 +48,7 @@ public void OptInBundle_IsBounded_SelfIdentifying_AndDoesNotInventMmsProof()
     public void ManifestHashMatchesArchivedPayload_AndDetectsModifiedCsv()
     {
         const string csv = "CanonicalReference,FC,LedgerState\\r\\n" +
-            "\\"LAB/LLN0.Mod.origin.orIdent\\",\\"ST\\",\\"OBSERVED\\"\\r\\n";
+            "LAB/LLN0.Mod.origin.orIdent,ST,OBSERVED\\r\\n";
         var archiveBytes = IedBrowserReadEvidenceBundle.Build(
             csv, "app", "engine", 7, DateTimeOffset.UnixEpoch);
         using var archive = new ZipArchive(new MemoryStream(archiveBytes), ZipArchiveMode.Read);

From a495b899f79b9f3abf465dfcde6aae48dd57b005 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 11:53:30 +0700
Subject: [PATCH 7/9] test(p0-d): encode CRLF fixture as actual C# escape
 sequences

---
 tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
index 7ca8aee4b..afc678b4d 100644
--- a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
+++ b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
@@ -47,8 +47,8 @@ public void OptInBundle_IsBounded_SelfIdentifying_AndDoesNotInventMmsProof()
     [Fact]
     public void ManifestHashMatchesArchivedPayload_AndDetectsModifiedCsv()
     {
-        const string csv = "CanonicalReference,FC,LedgerState\\r\\n" +
-            "LAB/LLN0.Mod.origin.orIdent,ST,OBSERVED\\r\\n";
+        const string csv = "CanonicalReference,FC,LedgerState\r\n" +
+            "LAB/LLN0.Mod.origin.orIdent,ST,OBSERVED\r\n";
         var archiveBytes = IedBrowserReadEvidenceBundle.Build(
             csv, "app", "engine", 7, DateTimeOffset.UnixEpoch);
         using var archive = new ZipArchive(new MemoryStream(archiveBytes), ZipArchiveMode.Read);

From bbe397a51bbcd5f99a65a55e7a5487cc5c65c017 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 12:21:30 +0700
Subject: [PATCH 8/9] fix(p0-d): count bounded CSV logical records in evidence
 manifest

---
 Models/IedBrowserReadEvidenceBundle.cs | 83 +++++++++++++++++++++++++-
 1 file changed, 81 insertions(+), 2 deletions(-)

diff --git a/Models/IedBrowserReadEvidenceBundle.cs b/Models/IedBrowserReadEvidenceBundle.cs
index b3751adb8..0e05ca648 100644
--- a/Models/IedBrowserReadEvidenceBundle.cs
+++ b/Models/IedBrowserReadEvidenceBundle.cs
@@ -21,8 +21,7 @@ public static byte[] Build(
         if (Encoding.UTF8.GetByteCount(csv) > 4_194_304)
             throw new ArgumentOutOfRangeException(nameof(csv),
                 "Selected-page evidence exceeded the 4 MiB diagnostic boundary.");
-        var rowCount = Math.Max(0, csv.Split('\n').Length -
-            (csv.EndsWith('\n') ? 2 : 1));
+        var rowCount = CountSelectedTargetRows(csv);
         // Hash the exact UTF-8 bytes written to the CSV ZIP entry, not a normalized copy.
         var csvBytes = new UTF8Encoding(false).GetBytes(csv);
         var csvSha256 = Convert.ToHexString(SHA256.HashData(csvBytes)).ToLowerInvariant();
@@ -58,4 +57,84 @@ static void Write(ZipArchive archive, string name, string body)
         }
         return buffer.ToArray();
     }
+
+    /// <summary>
+    /// Count logical CSV records, not physical lines: quoted diagnostic values
+    /// may legally contain newlines. Refuse malformed quoting and more than
+    /// 4096 selected targets rather than publishing a misleading manifest.
+    /// The first CSV record is the header, not an observation.
+    /// </summary>
+    private static int CountSelectedTargetRows(string csv)
+    {
+        if (csv.Length == 0) return 0;
+        var records = 0;
+        var inQuotes = false;
+        var afterQuote = false;
+        var atFieldStart = true;
+        var recordHasContent = false;
+
+        for (var i = 0; i < csv.Length; i++)
+        {
+            var c = csv[i];
+            if (inQuotes)
+            {
+                if (c == '"')
+                {
+                    if (i + 1 < csv.Length && csv[i + 1] == '"')
+                        i++; // Escaped CSV quote belongs to the same field.
+                    else
+                    {
+                        inQuotes = false;
+                        afterQuote = true;
+                    }
+                }
+                continue;
+            }
+
+            if (c is '\r' or '\n')
+            {
+                if (!recordHasContent)
+                    throw new FormatException("Evidence CSV contains an empty record.");
+                records++;
+                if (records > 4097)
+                    throw new ArgumentOutOfRangeException(nameof(csv),
+                        "Selected-page evidence exceeds 4096 CSV target records.");
+                if (c == '\r' && i + 1 < csv.Length && csv[i + 1] == '\n')
+                    i++;
+                atFieldStart = true;
+                afterQuote = false;
+                recordHasContent = false;
+                continue;
+            }
+
+            if (afterQuote)
+            {
+                if (c != ',')
+                    throw new FormatException("Evidence CSV has unexpected data after a quoted field.");
+                atFieldStart = true;
+                afterQuote = false;
+                recordHasContent = true;
+                continue;
+            }
+
+            if (c == '"')
+            {
+                if (!atFieldStart)
+                    throw new FormatException("Evidence CSV has an unexpected quote in an unquoted field.");
+                inQuotes = true;
+                atFieldStart = false;
+            }
+            else
+                atFieldStart = c == ',';
+            recordHasContent = true;
+        }
+
+        if (inQuotes)
+            throw new FormatException("Evidence CSV has an unterminated quoted field.");
+        if (recordHasContent) records++;
+        if (records > 4097)
+            throw new ArgumentOutOfRangeException(nameof(csv),
+                "Selected-page evidence exceeds 4096 CSV target records.");
+        return Math.Max(0, records - 1);
+    }
 }

From 46e6df528db3f1afacdc0e34f60942c86d5b27c2 Mon Sep 17 00:00:00 2001
From: Ari Sulistiono <ari.sulistiono@gmail.com>
Date: Tue, 20 Oct 2026 12:21:57 +0700
Subject: [PATCH 9/9] test(p0-d): enforce bounded RFC-style CSV record counts
 and malformed evidence rejection

---
 .../ARSAS.Tests/P0DReadEvidenceBundleTests.cs | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
index afc678b4d..58cc02f65 100644
--- a/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
+++ b/tests/ARSAS.Tests/P0DReadEvidenceBundleTests.cs
@@ -65,6 +65,33 @@ public void ManifestHashMatchesArchivedPayload_AndDetectsModifiedCsv()
         Assert.Equal(1, manifest.RootElement.GetProperty("SelectedTargetRows").GetInt32());
     }
 
+    [Fact]
+    public void ManifestCountsCsvRecords_NotEmbeddedQuotedNewlinesOrEscapedQuotes()
+    {
+        const string csv = "CanonicalReference,FC,Reason\r\n" +
+            "\"TESTLD/LLN0.Mod.origin.orIdent\",\"ST\",\"line 1\r\nline 2 with \"\"quotes\"\"\"\r\n" +
+            "\"TESTLD/LLN0.NamPlt.swRev\",\"DC\",\"Not scheduled\"\r\n";
+        var bundle = IedBrowserReadEvidenceBundle.Build(
+            csv, "app", "engine", 9, DateTimeOffset.UnixEpoch);
+        using var zip = new ZipArchive(new MemoryStream(bundle), ZipArchiveMode.Read);
+        using var manifestStream = zip.GetEntry("manifest.json")!.Open();
+        using var manifest = JsonDocument.Parse(manifestStream);
+        Assert.Equal(2, manifest.RootElement.GetProperty("SelectedTargetRows").GetInt32());
+    }
+
+    [Fact]
+    public void MalformedCsvOrUnboundedTargetCount_FailsClosedWithoutEvidencePacket()
+    {
+        static void Package(string csv) => IedBrowserReadEvidenceBundle.Build(
+            csv, "app", "engine", 9, DateTimeOffset.UnixEpoch);
+
+        Assert.Throws<FormatException>(() => Package("Header,Value\n\"unterminated"));
+        Assert.Throws<FormatException>(() => Package("Header,Value\n\"quoted\"invalid\n"));
+        Assert.Throws<FormatException>(() => Package("Header,Value\n\nvalue,3\n"));
+        Assert.Throws<ArgumentOutOfRangeException>(() =>
+            Package("Header\n" + string.Concat(Enumerable.Repeat("target\n", 4097))));
+    }
+
     [Fact]
     public void OversizedOrNullEvidenceCannotProduceDiagnosticBundle()
     {