Layout follows the SBC600 operating manual (BA01909S). Every signed response is signed with the TEST chain from pki/make-test-ca.sh, never Endress+Hauser's key — a verifier holding only the genuine E&H root rejects these tickets, and one holding both reports TEST_ANCHOR, never VERIFIED.