# Recorded SFS containers

Two real containers, taken off the Fairphone 6 dev phone's persist partition
and carried here so the offset split is pinned by bytes that actually failed
rather than by bytes we invented.

| file | provenance |
|---|---|
| `container-correct.bin` | 1588 B. A well-formed QTEE index container: 32-byte HMAC, NUL-terminated group name at +0x20, `u32` version, `u32` entry count, then `{u32; name}` entries. |
| `container-wrong-offset.bin` | 8192 B. The same container written while READ and WRITE shared a data offset. It begins with *path text* — characters 8 onward of the group path — and the real container starts 0x104 bytes in. |

Originals and their full analysis live in the fp6 journal as
`journal/fingerprint/captures/2026-08-30-vtable-master-correct-structure.bin`
and `…-container-written-at-the-wrong-offset.bin`.

**These hold no biometric material.** A fingerprint template is a separate
258850-byte container; these two are the index that names them. Their contents
are a QTEE-encrypted blob plus opaque device-derived names — but they *are*
from a specific device, so treat publishing them as a deliberate choice rather
than an incidental one.