mrwulf cb792f0a02 PHASE-2 HALF-LIFT on the anza fork: verify_accepts_iff_point, button-enforced ... THE HALF-LIFT IS NOW PROVEN ON ALL FOUR PYRAMIDS. anza's shape: the hash oracle is one sha512_hash3 bind, -A is the STORED minus_A field (no negation call), and the scalar arrives already parsed - so the recompute inversion is five flat bind_ok_inv steps (two anonymous slice reads, the oracle, the reduction, the dsm) and the assembly takes ExtValid/OnCurveExt of self.minus_A directly. Files 1-4 are dalek's verbatim modulo the curve25519 namespace; every proof compiled FIRST TRY. verify_accepts_iff_point: accept IFF the signature's R bytes are the canonical encoding of the recomputed [k]*minus_A + [s]*B (valid, on-curve, certified model). Five new standard certificates; Phase 3b enforces anza's tight boundary (SHA-512 oracle + foreign Signature type + its two accessors) on BOTH apex and half-lift. Full button green fresh. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-05 17:25:25 +02:00
..
gen/CurveField	Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder	2026-07-05 11:48:18 +02:00
Proofs	PHASE-2 HALF-LIFT on the anza fork: verify_accepts_iff_point, button-enforced	2026-07-05 17:25:25 +02:00
check-scalar.sh	Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder	2026-07-05 11:48:18 +02:00
check.sh	PHASE-2 HALF-LIFT on the anza fork: verify_accepts_iff_point, button-enforced	2026-07-05 17:25:25 +02:00
CurveField.llbc	THE SIGNATURE APEX on the anza fork: verify_accepts_iff, button-enforced	2026-07-04 23:48:08 +02:00
extract.sh	THE SIGNATURE APEX on the anza fork: verify_accepts_iff, button-enforced	2026-07-04 23:48:08 +02:00
lean-guard	Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder	2026-07-05 11:48:18 +02:00