========================================================================
  THE LOOM  —  Weekend Puzzle #001
========================================================================

Security researcher Nadia Reyes went dark three days after sending this note
to a colleague:

  "A photo. A packet capture. A licensing tool. Three cases, three clients,
   nothing in common — except they were all spun by the same machine. Once you
   see the weave you can't unsee it. I'm going to pull the thread."

She never sent the follow-up. These are the three artifacts from her desk.
Pull the thread. Recover her final message.

------------------------------------------------------------------------
FILES
------------------------------------------------------------------------
  clue.png        a diagnostic image she saved
  capture.pcap    a short network capture
  loomctl.wasm    the "licensing tool" — a WebAssembly module
  loomctl.mjs     a small runner so you can execute loomctl.wasm with Node
  BRIEF.txt       this file

------------------------------------------------------------------------
RUNNING THE TOOL
------------------------------------------------------------------------
  You need Node.js (free, any OS). Then:

      node loomctl.mjs selftest

  loomctl.wasm is a normal WebAssembly module — you can also inspect it with
  wabt (wasm2wat), Ghidra, or load it in a browser. It does nothing but read
  its arguments and print to the screen: no network, no files, harmless.

------------------------------------------------------------------------
GOAL
------------------------------------------------------------------------
  Recover the flag. Format:  FLAG{...}
  Check your answer on the verifier page (link in the LinkedIn post).

------------------------------------------------------------------------
RULES
------------------------------------------------------------------------
  - First correct flag sent by LinkedIn DM wins a $5 Starbucks gift card.
  - Submit by DM only. Do NOT post flags or spoilers in the comments.
  - Deadline is in the LinkedIn post. A full write-up follows afterward.
  - Everything here is synthetic and self-contained. There is nothing to
    attack, log into, or reach out to. Work entirely offline.
  - No purchase necessary. Void where prohibited.

  Expect 3–6 hours. You'll reverse a small binary, read a custom transform,
  reassemble a capture, and connect evidence across all three artifacts.
  Good luck. — pulling the thread with you.
========================================================================
