mrwulf 8e52a449dc Double-scalar-mul enters the verified model: vartime_double_base extracted transparently ... extract.sh now opens crate::backend::serial::scalar_mul::vartime_double_base (the other scalar_mul strategies stay opaque): non_adjacent_form (with its loops), NafLookupTable5 (from/select), the curve-model helpers and vartime_double_base::mul itself land in gen/CurveField - the same namespace as the proven edwards operations, so the coming double-and-add induction can consume EdDouble/EdAddProjNiels/EdConvert directly. Zero sorries, zero external axioms (the pinned sources carry documented compat refactors: single-assignment loop helpers, param-rooted while, always-256-iterations, index-based LE load). Full check.sh pressed fresh over the regenerated model: every existing field and group-law certificate still green and axiom-clean - the scope extension is purely additive.		2026-07-04 11:48:51 +02:00
..
gen	Double-scalar-mul enters the verified model: vartime_double_base extracted transparently	2026-07-04 11:48:51 +02:00
Proofs	Hash-to-scalar PROVEN: from_bytes_wide_spec - Scalar::from_hash's reduction is exact mod l	2026-07-04 10:31:32 +02:00
check-scalar.sh	Hash-to-scalar PROVEN: from_bytes_wide_spec - Scalar::from_hash's reduction is exact mod l	2026-07-04 10:31:32 +02:00
check.sh	coherence pass 2: restore the one-button property, institutionalize audits	2026-07-03 12:54:26 +02:00
CurveField.llbc	Double-scalar-mul enters the verified model: vartime_double_base extracted transparently	2026-07-04 11:48:51 +02:00
CurveScalar.llbc	Hash-to-scalar PROVEN: from_bytes_wide_spec - Scalar::from_hash's reduction is exact mod l	2026-07-04 10:31:32 +02:00
extract-scalar.sh	Signature layer, first bricks: canonicity closure + hash-to-scalar foundation	2026-07-03 23:18:29 +02:00
extract.sh	Double-scalar-mul enters the verified model: vartime_double_base extracted transparently	2026-07-04 11:48:51 +02:00
lean-guard	re-budget scalar caps post-optimization; guard 3b (headroom clamp)	2026-07-03 17:51:14 +02:00