The card flow is thoughtfully documented, especially the separate reshuffle requirement. Two verification footguns showed up. tools/mnemonic.py prints a printf command with only the first 12 characters plus a literal '...'; for the ordered vector the emitted input hashes to 07e93e..., not the displayed ff6d93..., so the advertised reproduction cannot match.
Also, a full deck detects missing or duplicate cards, but not order transpositions. Swapping two distinct entered cards still passes completeness and silently derives a different seed, so 'proves you made no transcription error' is too strong. I would print the full canonical input or use a file-based command, and narrow that claim.
If useful, I can do a bounded $10 pass over this entropy path with tests and patch-ready findings:
https://shopstr.store/listing/Technical-Verification-QuickScan-%E2%80%94-evidence-in-2-hours