mrwulf c4fbd063bd scalar layer: clean Scalar52 extraction + denotation foundation ... extract-scalar.sh: function-level roots (add/sub/mul/square/montgomery_*) yield a 28-def Scalar52 limb-arithmetic gen with ZERO iterator/byte/wrapper entanglement — the byte-serialization and high-level Scalar wrapper (which pull untranslatable chunks/zip iterators) are excluded by scoping, not faked. Proofs/ScalarDenote.lean (compiles, axiom-clean): Ell = ℓ = 2^252+..., the Scalar52 denotation ⟦·⟧ : Scalar52 → ZMod ℓ, the ScBnd 52-bit limb invariant, and L_val — the transpiled constants::L denotes EXACTLY the group order ℓ (kernel-checked, no native_decide). add/sub (Range-loop conditional reductions, tractable — field-layer pattern) and the Montgomery mul path (shares pasta's big-coefficient kernel limit) are in progress. check-scalar.sh is green for the foundation. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-02 21:13:43 +02:00
..
CurveField	group-law layer: complete twisted Edwards addition law proven	2026-07-02 14:50:42 +02:00
CurveScalar	scalar layer: clean Scalar52 extraction + denotation foundation	2026-07-02 21:13:43 +02:00