Same change as the four ed25519 repos: a clamped run that dies on memory
(rc 134/137) retries under the single-flight lock as headroom improves
materially, when LEAN_MEM_WAIT_SEC>0. Default 0: behavior unchanged.
Button green in the pass-3 sweep (check.sh OK, 117s).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
AddSpec: sub_spec preconditions discharged by exact matches (the blanket
simp[*] discharge here is what OOM-crashed the session — see
formal-verification-control/POSTMORTEM-2026-07-02.md). ConstSpecs: R/R2/INV/
zero/one literal specs. ReduceSpec: full HAC 14.32 Montgomery accounting —
per-round dropped-limb-is-zero facts from k = r·INV, exact t'·2^256 = t + m·p
identity, composition with the general sub_spec reduction. MulSpec: 16-mac
schoolbook accounting via zify + linear_combination (nonlinear cross-products
are atoms), composed with montgomery_reduce_spec. DRAFTS: written against the
generated code but not yet compiled; README carries an explicit construction
note until check.sh goes green.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
