schema_version: 1
provider: local-pacta-provider
issued_at: '2026-07-06T12:51:28Z'
machine_protection:
  lean_guard: /home/oho/GitClone/Claude/FormalVerification/betrusted-ed25519-verified/verification/lean-guard
  note: All Lean compiles route through the repo's lean-guard (memory cap, core pinning,
    timeout, single-flight lock) when configured.
subject:
  component: betrusted-ed25519-verified
  repo_url: https://github.com/saymrwulf/betrusted-ed25519-verified.git
  repo_commit: 81f614a3cbd26412c6af7f0a31c0f128121fbfa4
  verification_dir: verification
  kind: ed25519
  verified_backend: serial/u64
environment:
  lean_version: Lean (version 4.30.0-rc2, x86_64-unknown-linux-gnu, commit 3dc1a088b6d2d8eafe25a7cd7ec7b58d731bd7cc,
    Release)
  lake_version: Lake version 5.0.0-src+3dc1a08 (Lean version 4.30.0-rc2)
  env_script: ~/aeneas-toolchain/env.sh
  lean_project_dir: /home/oho/aeneas-toolchain/aeneas/backends/lean
replay:
  check_attempted: true
  check_ok: true
  check_log_path: provider/out/logs/lean-check.log
  checked_files: 63
  failed_files: []
  diagnostics: []
  axiom_attempted: true
  axiom_ok: true
  axiom_log_path: provider/out/logs/axiom-audit.log
  axiom_diagnostics: []
certificates:
- name: CurveFieldProofs.fieldImplementation
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.edwardsImplementation
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: ScalarProofs.scalarImplementation
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.verify_loop_full
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.to_bytes_spec
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.ed_compress_spec
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: ScalarProofs.from_bytes_mod_order_wide_spec
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.vartime_dsm_basepoint_spec
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.enc_point_inj
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.sqrt_ratio_i_sq_spec
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.from_bytes_spec
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.decompress_of_canonical
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  diagnostics: []
- name: CurveFieldProofs.verify_accepts_iff
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  diagnostics: []
- name: CurveFieldProofs.verify_accepts_iff_point
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  diagnostics: []
- name: CurveFieldProofs.verify_accepts_iff_point_eq
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  diagnostics: []
- name: CurveFieldProofs.verify_accepts_iff_decompress
  status: proven
  axiom_status: clean
  observed_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  expected_axioms:
  - propext
  - Classical.choice
  - Quot.sound
  - ed25519.Signature
  - verifying.sha512_hash3
  - ed25519.Signature.to_bytes
  - signature.error.Error
  - signature.error.Error.new
  diagnostics: []
signature:
  scheme: openssl-ed25519
  status: signed
  payload_digest_sha256: bb1226fa66ae0e51677ccc8c8361ba121ac5464911f1cb9e305ff7c76b7d2c57
  signature_base64: Lsxje95BPXHfc7l3wxQrRvDgG/5tb7WNaO3wIDsfY/xg/WYRDFrWF3Bb6frs0Dmln00QxA99Gt43PMxLUHq0Ag==
  public_key_fingerprint_sha256: 874c8a008a607021528b2493fa1caf059f9d5c123d29193dfabc09a6d1e7a56a