Scanning the flat stream for seek chunks satisfying size == 8+4*count with a non-negative implied start yields 9661 waves and rejects NOTHING -- no false positives in a gigabyte of audio. Each wave's extent is [seek_pos - count*2048, seek_pos). Assignment rule 'an entry names the first wave starting at or after its offset' is 96.30% correct (7338/7620) against entries whose answer is independently known from their RIFF. The 282 exceptions are one class: the gap between the earlier wave's seek and the first RIFF is EXACTLY 12288 bytes in all 282. I guessed they were leading segments, which would put that seek AT the RIFF; refuted, 0 of 282. Recorded at yellow. Correcting by 12288 would reach 100% on this set but is curve-fitting until the region is identified, and the rule cannot yet unblock headerless durations -- there is nothing to check it against there.