mrwulf bde63f53ed phase 2 step 1: de-plumb the u32 range-loop machinery ... The verify cone iterates u32 ranges (for j in i..i+s). Aeneas.Std ships a real Step instance only for usize (StepUsize), so u32 ranges extracted as three opaque axioms (forward_checked / backward_checked / steps_between) — which would poison every loop-bearing cone, i.e. chain and everything above it. Discharged in the hand-written external file (H4-sanctioned) with FAITHFUL real definitions mirroring Rust's impl Step for u32 (core/src/iter/range.rs) and Aeneas.Std's StepUsize: forward/backward via u32::try_from(n)-then-checked_{add,sub}, steps_between = saturating difference. Verified in isolation (axiom-clean) and in place: #print axioms on the u32 Step instance now reports exactly [propext, Classical.choice, Quot.sound]. Model still compiles. These are ordinary loop control, NOT the deployed hash boundary — the five oracle axioms remain the only cryptographic externals. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-22 23:54:03 +02:00
..
SlhVerify	phase 2 step 1: de-plumb the u32 range-loop machinery	2026-07-22 23:54:03 +02:00