mrwulf a2d8e5f4d5 phase 2 WIP: chain proof — both increment lemmas PROVEN, one plumbing sorry ... Real progress on the first certificate (chain / Algorithm 5). Two mathematically-substantive lemmas now PROVEN and axiom-clean ([propext, Classical.choice, Quot.sound]): - u32_succ: the successful u32 index increment (start+1 = ok w, no overflow from the theorem's bound) — via UScalar.add_equiv case split. - fwd_succ: the range iterator's forward_checked start 1 = ok (some w), bridging checked_add/Option.ofResult/ofNatCore to the plain add. - match_ok_bind: the loop.eq_1 outer match = Result bind (rfl). chain_free_loop_eq BASE CASE proven (empty range). Two sorries remain, both PURE LEAN PLUMBING, no math left: - chain_step (one loop step = one fold step): reduction fully mechanised except exposing the let-pair so rw[match_ok_bind] can see the bind; next tactic documented in-file (full simp to reduce the let-pair, then match_ok_bind + bind_assoc; fallback = the WP loop.spec_decr_nat/spec_mono dalek pattern). - the succ case, which is chain_step + ih once chain_step lands. Still in drafts/ (sorries ⇒ never Proofs/ or check.sh); zero certificates claimed. Probes ran under lean-guard per S1. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-23 09:38:54 +02:00
..
drafts	phase 2 WIP: chain proof — both increment lemmas PROVEN, one plumbing sorry	2026-07-23 09:38:54 +02:00
gen/SlhVerify	phase 2 step 1: de-plumb the u32 range-loop machinery	2026-07-22 23:54:03 +02:00
Proofs	SLH-DSA (FIPS 205) campaign skeleton: honest zero-certificate state	2026-07-22 21:00:57 +02:00
check.sh	Phase 1: clean extraction + type-checking SLH-DSA-SHA2-128s model	2026-07-22 22:21:19 +02:00
extract.sh	audit catch 2: the oracle boundary is FIVE, not six	2026-07-22 23:02:40 +02:00
lean-guard	SLH-DSA (FIPS 205) campaign skeleton: honest zero-certificate state	2026-07-22 21:00:57 +02:00