Mudr-209

flash_append(record_buf, sizeof(mudr209_hdr_t)+hdr->payload_sz);

if (len > PAYLOAD_MAX) return; // guard assemble_record(payload, len); protect_record(); persist_record(); update_merkle(); MUDR-209

/* 5. Update Merkle tree ----------------------------------------------------*/ static void update_merkle(void) if (len &gt

/* 3. Encrypt & MAC ----------------------------------------------------------*/ static void protect_record(void) // guard assemble_record(payload

/* Public API ---------------------------------------------------------------*/ void mudr209_log(const uint8_t *payload, uint32_t len)

/* AES‑GCM‑256 encryption + authentication tag */ aes_gcm_encrypt(SE_KEY_LOG, record_buf, sizeof(mudr209_hdr_t)+hdr->payload_sz, record_buf); // in‑place encrypt

/* 2. Assemble record -------------------------------------------------------*/ static void assemble_record(const uint8_t *payload, uint32_t len)