Two thoughts after sleeping on this:
One, the Red Sox organization is going to be punished as a repeat offender, thanks to the idiotic Apple watch 'scandal'. They should have been more on top of this to ensure that no further embarrassment was brought onto the organization. Not a good look for Dave Dombrowski and others.
Two, whatever punishment Cora receives is going to be based first and foremost on how truthful he was in past investigations. If it comes out that he deliberately misled MLB's investigators, all bets are off - I would fully expect Manfred to throw the book at him and rightfully so. We could be looking at a yearlong suspension as the commissioner's office must be beside themselves in frustration over teams continually pushing the boundaries on this, and Manfred will want someone to make an example of. After that, it'll come down to whether he is implicated as a ringleader in either or both scandals. He's going to get some punishment as the common denominator between the 2017 Astros and 2018 Red Sox, no matter what. Unless there is some ambiguity or more leeway in the communications than has been reported (and Cora has some plausible deniability), I think we're looking at a minimum of two weeks with Ron Roenicke in the manager's seat.