I Shipped a Broken Consistency Proof Verifier. Here's How I Found Out.

Building RFC 9162 consistency proofs for ATL Protocol, I took a shortcut that turned out to be exploitable. The story of a simplified implementation, the attack that broke it, and the full RFC 9162 verification that replaced it.