mrwulf de9d29907b Phase 2, half-lift items 2+5: dsm dispatch transfer + byte-comparison ... bridge (Proofs/PointLiftSpec.lean, kernel-audited) - vartime_dsm_basepoint_spec: the PUBLIC dsm entry the verifier calls (EdwardsPoint::vartime_double_scalar_mul_basepoint) satisfies the dsm certificate - under the serial pin the backend dispatch is the real constant Serial, so the wrapper reduces definitionally to the certified serial path. No new axioms; in CERTS. - rangeEq_iff_bytesVal: the verifier's byte-wise comparison IS value equality of the encodings - little-endian digits are unique (32-fold byte peel, one omega over the flat bound set; U8 equality recovered via UScalar.eq_of_val_eq). With ed_compress_spec and from_bytes_mod_order_wide_spec already landed, the half-lift now needs only the recompute bind-chain inversion (the sha calls are oracles - inverted from the hrec hypothesis the apex carries) and the assembly theorem. Full button green fresh. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-05 14:36:03 +02:00
..
gen	Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder	2026-07-05 11:48:17 +02:00
Proofs	Phase 2, half-lift items 2+5: dsm dispatch transfer + byte-comparison	2026-07-05 14:36:03 +02:00
check-scalar.sh	Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder	2026-07-05 11:48:17 +02:00
check.sh	Phase 2, half-lift items 2+5: dsm dispatch transfer + byte-comparison	2026-07-05 14:36:03 +02:00
CurveField.llbc	Regenerated CurveField.llbc from the reproducibility run	2026-07-04 19:51:05 +02:00
CurveSig.llbc	extract.sh: reproducible end-to-end (CurveField merged gen + CurveSig glue)	2026-07-04 19:50:37 +02:00
extract.sh	extract.sh: reproducible end-to-end (CurveField merged gen + CurveSig glue)	2026-07-04 19:50:37 +02:00
lean-guard	Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder	2026-07-05 11:48:17 +02:00