dalek-ed25519-verified/verification/gen/CurveScalar
mrwulf c4fbd063bd scalar layer: clean Scalar52 extraction + denotation foundation
extract-scalar.sh: function-level roots (add/sub/mul/square/montgomery_*)
yield a 28-def Scalar52 limb-arithmetic gen with ZERO iterator/byte/wrapper
entanglement — the byte-serialization and high-level Scalar wrapper (which
pull untranslatable chunks/zip iterators) are excluded by scoping, not faked.

Proofs/ScalarDenote.lean (compiles, axiom-clean): Ell = ℓ = 2^252+..., the
Scalar52 denotation ⟦·⟧ : Scalar52 → ZMod ℓ, the ScBnd 52-bit limb invariant,
and L_val — the transpiled constants::L denotes EXACTLY the group order ℓ
(kernel-checked, no native_decide).

add/sub (Range-loop conditional reductions, tractable — field-layer pattern)
and the Montgomery mul path (shares pasta's big-coefficient kernel limit) are
in progress. check-scalar.sh is green for the foundation.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 21:13:43 +02:00
..
Funs.lean scalar layer: clean Scalar52 extraction + denotation foundation 2026-07-02 21:13:43 +02:00
FunsExternal.lean scalar layer: clean Scalar52 extraction + denotation foundation 2026-07-02 21:13:43 +02:00
FunsExternal_Template.lean scalar layer: clean Scalar52 extraction + denotation foundation 2026-07-02 21:13:43 +02:00
Types.lean scalar layer: clean Scalar52 extraction + denotation foundation 2026-07-02 21:13:43 +02:00
TypesExternal.lean scalar layer: clean Scalar52 extraction + denotation foundation 2026-07-02 21:13:43 +02:00
TypesExternal_Template.lean scalar layer: clean Scalar52 extraction + denotation foundation 2026-07-02 21:13:43 +02:00