{
  "path": "tools/interop/third_party_mlkem.py",
  "find": "ss_ossl = _openssl_decap(sk_pem, ct_ab, tmp)",
  "replace": "ss_ossl = _openssl_decap(sk_pem, bytes([ct_ab[0] ^ 0x01]) + ct_ab[1:], tmp)",
  "why": "Corrupts one byte of the liboqs ciphertext on its way to OpenSSL (A->B leg): the two stacks no longer agree on the shared secret, the cross_vendor_A_to_B_secret_match checks fail for every parameter set, and the gate fails. Measured by the lab at S03 (dataroom/witness_quality.json interop index 0)."
}