// reference investigation
ridgeview-wire-fraud-closing — qualia/docusign/MT103 closing cluster
Whitfield Title STW-2026-1022 on Ridgeview Estates — spoofed escrow email, wire-instruction PDF revision metadata, Qualia audit, DocuSign ListAuditEvents, MT103 stub to fraud beneficiary. Fully synthetic.
what this proves
- qualia · docusign closing packet · and swift MT103 primary engines produce deterministic, fixture-locked output on the oakwood estates synthetic closing cluster.
- every output runs 100% locally — title-platform and wire exports never upload.
- spoofed escrow wire email · wire-instruction PDF revision metadata · qualia shield bank change · docusign Corrected on wire_instructions after send · MT103 beneficiary mismatch on case HTE-WF-2026-0518.
primary engines locked to this fixture
build the case binder
runs all three primary engines on the synthetic evidence zip and opens a self-contained html binder. no upload.
runs all 8 primary engines locally on the synthetic evidence zip · opens a self-contained html binder · no upload
download the synthetic evidence
MIT-licensed, fully synthetic. spoofed escrow .eml · qualia activity ndjson · docusign envelope audit · wire-instruction PDF revision metadata · MT103 stub · incident context · chain of custody.
built deterministically from scripts/fixtures/build-ridgeview-wire-fraud-closing.mjs. seed: ridgeview-wire-fraud-closing:v1.
methodology
wire fraud at closing starts with hashed qualia and docusign exports plus the disputed wire instruction artifact, then walks title-platform parsers before counsel packet assembly. not legal advice on fault. read the full wire fraud at closing · title escrow guide →