diff --git a/TRUSTED-BASE.md b/TRUSTED-BASE.md
index 335a36e..45a2663 100644
--- a/TRUSTED-BASE.md
+++ b/TRUSTED-BASE.md
@@ -116,3 +116,38 @@ running Rust code. Everything else is machine-checked.
    consumer's protection is, and has always been, *review at the pinned
    commit* rather than the button's own verdict. A green button says "this is
    the apparatus that was reviewed", never "this apparatus is trustworthy".
+
+11. **The whole declaration surface is pinned, not just the certificates.**
+   `check.sh` Phase 2c reads the compiled environment and records, for EVERY
+   constant originating in an audited module — roughly three thousand of them,
+   compiler-generated auxiliaries included — its originating module, fully
+   qualified name, declaration kind and complete axiom cone. The observed set
+   must equal `inventory-allowlist.txt` exactly, in BOTH directions: a
+   declaration present but not allowlisted (`UNCLASSIFIED`) and an allowlist
+   entry with no declaration (`STALE`) are both build failures, and a count
+   trailer disagreeing with the lines received is a third.
+
+   The gap this closes: Phase 2b asks the kernel only whether an AXIOM is
+   declared, and Phase 3 pins the cones of the named certificates. Between
+   them sat every helper lemma in the corpus. One of those quietly acquiring
+   a hash oracle in its cone moved nothing either phase looked at.
+
+   **Two limits, stated because a reader would otherwise assume neither.**
+
+   · *No independent cone walker here.* The companion accumulator runs a
+     hand-written closure walker alongside the kernel's `collectAxioms` and
+     requires the two to agree on every constant, so each checks the other.
+     Ported to this corpus on 2026-07-29 that walker was wrong in BOTH
+     directions on mathlib's inductive shapes — it reported no axioms for
+     `CurveFieldProofs.EdPoint` where the kernel reported three, and after
+     being extended it reported three for `CurveFieldProofs.ProjPoint` where
+     the kernel reported none. Two implementations disagreeing both ways are
+     not a cross-check; they are a second wrong answer. The cone figures here
+     therefore rest on `collectAxioms` alone. The accumulator keeps its
+     cross-check, its corpus being mathlib-free.
+
+   · *The scalar layer is outside this phase.* Thirteen `Proofs/Scalar*`
+     modules belong to `check-scalar.sh` and are inventoried by nothing. That
+     is the two-button seam, still open. Phase 2c prints every uncovered
+     module by name on every run, so the omission is visible rather than
+     inferred.
diff --git a/verification/HARNESS.sha256 b/verification/HARNESS.sha256
index dc9b4f2..bac9253 100644
--- a/verification/HARNESS.sha256
+++ b/verification/HARNESS.sha256
@@ -1,10 +1,15 @@
 6c821b8e465d3b394cb3cbb4bb3757791ace064b6d1b273ba9a41402dac74e24  AUDIT-MANIFEST.txt
 b88f4bc16d3188f4830f8333201fc7826d46acf829c37f7da398d6ae9bfca15e  check-scalar.sh
-813c31664484adddd1752ea3bb30da826ad1050fd378604c242bcafb105fb4a3  check.sh
+c0062555569ee4287770385ab5a1923d1028888e1bb62a32a52c33305c1a3222  check.sh
 afa13c814ba9757de8d59777524e496653351112a1a7037a56f1b0b436b28cf9  extract.sh
 0ea20d74cd359da404ee3be116058374cbb9fd992ed170e5f6c64f8d7a6b2733  GEN-MODEL.sha256
+86ee83b703d17c1f04af654657219b344b0076bc994c0b791ca6b6c5a0090d4f  inventory-allowlist.txt
+0bb01bc4abaafa8537d460682004d1f336980b28bc4fe1968bcc9c3bc3bc71ba  inventory_gate.sh
 736ea4be712e1b5bcda10ecb466f0dec7008a2a36eabdfd77563976299c43cce  lean-guard
 772ca6dd22443c83dc35d5428598c8d17a01c69db5be008474d06476fa66f7f8  Proofs/Audit.lean
-79611f9689ba714fb8d3f57aee86ad9655509303445beaad766bf8b049de8c44  selftest-axgate.sh
+84bc670991fd7456d8c8569ff7b7c32410513a63d3cb7fe8877bb19a82d36a7d  Proofs/InventoryCore.lean
+4b1d7f5249a80375b4ef849a760ae8e4bbcecf103c3f8b9e8d0a5d5a9ae377fc  Proofs/Inventory.lean
+62da1de45d2e19abe588a75e32454548e8caa3067ff51a97d7ae155886dbe0c0  selftest-axgate.sh
 3d5898161d663eccad162269a5a6c102319077e22e1f2d89a8bfcab6926d29f6  selftest-harness.sh
-a14acaafe914aabb9df44fcd05fd50d475804280fab9e332fdb5ea0b0d35f164  selftest-statements.sh
+1df031a075fc438c5229d01cbc44ee6ac489a272cd736624f7ca45ef1a4ddb7f  selftest-inventory.sh
+bf88da29034ae32fe6aef8677c8952adcc2b6903e7b2972ea70971f276be0f45  selftest-statements.sh
diff --git a/verification/Proofs/Inventory.lean b/verification/Proofs/Inventory.lean
new file mode 100644
index 0000000..1d71ca4
--- /dev/null
+++ b/verification/Proofs/Inventory.lean
@@ -0,0 +1,70 @@
+/- ──────────────────────────────────────────────────────────────────────────
+   Proofs/Inventory.lean — environment-derived declaration inventory (main chain).
+
+   Audit INFRASTRUCTURE, not corpus: excluded from check.sh's compile manifest
+   and from its own inventory (its constants live in modules the corpus list
+   below does not name). It proves nothing and is imported by nothing.
+
+   Covers every module check.sh compiles except any listed as needing a
+   separate driver (see Proofs/InventoryBasic.lean if present). Whether
+   a split is needed was determined by compiling a probe, per repo.
+   ────────────────────────────────────────────────────────────────────────── -/
+import Proofs.InventoryCore
+import Proofs.Denote
+import Proofs.P25519
+import Proofs.ReduceSpec
+import Proofs.SubNegSpec
+import Proofs.ConstSpecs
+import Proofs.AddSpec
+import Proofs.MulSpec
+import Proofs.SquareSpec
+import Proofs.Square2Spec
+import Proofs.Field
+import Proofs.InvertSpec
+import Proofs.FieldMain
+import Proofs.FeQ
+import Proofs.EdCurve
+import Proofs.EdDenote
+import Proofs.EdDouble
+import Proofs.EdAddProjNiels
+import Proofs.EdAddAffNiels
+import Proofs.EdConvert
+import Proofs.EdMain
+import Proofs.DsmTableSpec
+import Proofs.DsmStepSpec
+import Proofs.DsmLoopSpec
+import Proofs.DsmNafLoadSpec
+import Proofs.DsmNafMath
+import Proofs.DsmNafLoopSpec
+import Proofs.DsmNafSpec
+import Proofs.DsmMulSpec
+import Proofs.ToBytesMath
+import Proofs.ToBytesSpec
+import Proofs.ScalarPackSpec
+import Proofs.CompressSpec
+import Proofs.SigApexSpec
+import Proofs.PointLiftSpec
+import Proofs.PointEqSpec
+import Proofs.DecompressSpec
+import Proofs.FromBytesSpec
+import Proofs.DecompressMain
+open Lean Ed25519Inventory
+
+/-- Exactly the modules this driver covers. check.sh verifies, in BOTH
+    directions, that the union of the two drivers' lists is its PROOFS
+    manifest minus the audit infrastructure. -/
+def corpus : Array Name :=
+  #[`Proofs.Denote, `Proofs.P25519, `Proofs.ReduceSpec, `Proofs.SubNegSpec,
+   `Proofs.ConstSpecs, `Proofs.AddSpec, `Proofs.MulSpec,
+   `Proofs.SquareSpec, `Proofs.Square2Spec, `Proofs.Field,
+   `Proofs.InvertSpec, `Proofs.FieldMain, `Proofs.FeQ, `Proofs.EdCurve,
+   `Proofs.EdDenote, `Proofs.EdDouble, `Proofs.EdAddProjNiels,
+   `Proofs.EdAddAffNiels, `Proofs.EdConvert, `Proofs.EdMain,
+   `Proofs.DsmTableSpec, `Proofs.DsmStepSpec, `Proofs.DsmLoopSpec,
+   `Proofs.DsmNafLoadSpec, `Proofs.DsmNafMath, `Proofs.DsmNafLoopSpec,
+   `Proofs.DsmNafSpec, `Proofs.DsmMulSpec, `Proofs.ToBytesMath,
+   `Proofs.ToBytesSpec, `Proofs.ScalarPackSpec, `Proofs.CompressSpec,
+   `Proofs.SigApexSpec, `Proofs.PointLiftSpec, `Proofs.PointEqSpec,
+   `Proofs.DecompressSpec, `Proofs.FromBytesSpec, `Proofs.DecompressMain]
+
+#eval show MetaM Unit from emitInventory corpus
diff --git a/verification/Proofs/InventoryCore.lean b/verification/Proofs/InventoryCore.lean
new file mode 100644
index 0000000..e872017
--- /dev/null
+++ b/verification/Proofs/InventoryCore.lean
@@ -0,0 +1,110 @@
+/- ──────────────────────────────────────────────────────────────────────────
+   Proofs/InventoryCore.lean — shared machinery for the declaration inventory.
+
+   PORTED, NOT REINVENTED. This is the ltl-accumulator-verified design
+   (Proofs/Inventory.lean there), which survived a nine-attack self-test that
+   defeated a source-regex enumerator: attributed, private, indented and
+   `instance` declarations were all invisible to the regex, and a nested
+   `namespace Hidden theorem MTH` collided with the basename of an audited
+   declaration. Reading the compiled ENVIRONMENT sees exactly what the kernel
+   saw, and there is no name shape that can hide from it.
+
+   WHY TWO DRIVERS IMPORT THIS. Unlike the accumulator, this corpus cannot be
+   imported as one environment: `Proofs.Basic` and `Proofs.ConstSpecs` both
+   declare `CurveFieldProofs.zero_spec`. That is deliberate and documented —
+   Basic.lean is compiled by check.sh but imported by nothing, so the reuse is
+   harmless — but it makes a single whole-corpus import impossible. The corpus
+   therefore splits into the main chain and Basic, one driver each, and
+   check.sh concatenates their output before gating. The split is asserted in
+   check.sh against the compile manifest, so a module cannot fall between the
+   two drivers unnoticed.
+
+   The corpus module list lives in each DRIVER, not here, and is checked
+   textually against check.sh's manifest in both directions. A listed module
+   that is not actually imported is an elaboration error, not a silent skip.
+   ────────────────────────────────────────────────────────────────────────── -/
+import Lean
+
+open Lean
+
+namespace Ed25519Inventory
+
+def kindOf : ConstantInfo → String
+  | .axiomInfo  _ => "axiom"
+  | .defnInfo   _ => "def"
+  | .thmInfo    _ => "theorem"
+  | .opaqueInfo _ => "opaque"
+  | .quotInfo   _ => "quot"
+  | .inductInfo _ => "inductive"
+  | .ctorInfo   _ => "ctor"
+  | .recInfo    _ => "recursor"
+
+/-- Axiom cone of `n`, from the kernel's own collector — the same machinery
+    `#print axioms` uses.
+
+    NO INDEPENDENT SECOND WALKER HERE, and that is a deliberate REDUCTION in
+    strength against the ltl-accumulator design this is ported from. There, a
+    hand-written closure walker runs alongside `collectAxioms` and every
+    constant must get the same answer from both, so the two implementations
+    check each other. Porting that walker to this corpus was tried on
+    2026-07-29 and abandoned on evidence:
+
+      · without traversing inductive families it UNDER-approximated —
+        `CurveFieldProofs.EdPoint`: walker [] vs kernel [Classical.choice,
+        Quot.sound, propext];
+      · adding constructors, recursor rules and `all` groups made it
+        OVER-approximate — `CurveFieldProofs.ProjPoint`: walker
+        [Classical.choice, Quot.sound, propext] vs kernel [].
+
+    Disagreeing in BOTH directions means the second implementation is not an
+    independent check, it is a second wrong answer. Matching the kernel's
+    traversal exactly over mathlib's inductive shapes is a Lean-internals
+    project, not a gate, and shipping a walker that is wrong in two directions
+    would be worse than shipping none: it would fail builds for reasons that
+    are the checker's fault and teach everyone to ignore it.
+
+    CONSEQUENCE, stated so nobody assumes otherwise: on this corpus the cone
+    figures rest on `collectAxioms` alone. The accumulator's corpus is
+    mathlib-free, its walker agrees there, and it KEEPS the cross-check. This
+    is recorded in TRUSTED-BASE.md. -/
+def axiomCone (n : Name) : MetaM (Array Name) := do
+  let cone ← collectAxioms n
+  return cone.qsort (fun a b => a.toString < b.toString)
+
+/-- Emit `INV|name|kind|cone` for every constant originating in `corpus`.
+    EVERY constant is emitted — fully qualified, NO filtering. Compiler-
+    generated auxiliaries (equation lemmas, match/eq/induct helpers, private
+    manglings) are emitted too and pinned in the allowlist, so anything new,
+    renamed, removed, or with a changed cone shows up as a diff. -/
+def emitInventory (corpus : Array Name) : MetaM Unit := do
+  let env ← getEnv
+  let mut idxs : Array Nat := #[]
+  for m in corpus do
+    match env.getModuleIdx? m with
+    | some i => idxs := idxs.push i
+    | none   => throwError "INVENTORY ERROR: corpus module {m} is not imported"
+  let mut lines : Array String := #[]
+  for (n, ci) in env.constants.toList do
+    if let some i := env.getModuleIdxFor? n then
+      if idxs.contains i then
+        let cone ← axiomCone n
+        let coneStr := ",".intercalate (cone.toList.map (·.toString))
+        -- The ORIGINATING MODULE is part of the record, unlike the accumulator's
+        -- format. It has to be: this corpus contains two distinct declarations
+        -- both named `CurveFieldProofs.zero_spec` (Proofs.Basic and
+        -- Proofs.ConstSpecs), inventoried by different drivers. Keyed on name
+        -- alone their records were byte-identical, so the merged allowlist held
+        -- 3021 entries for 3022 declarations and one real declaration was
+        -- covered by an entry describing a different one. The count trailer
+        -- caught it; the module field is what fixes it.
+        let mdl := env.header.moduleNames[i]!
+        lines := lines.push s!"INV|{mdl}|{n}|{kindOf ci}|{coneStr}"
+  let sorted := lines.qsort (· < ·)
+  for l in sorted do
+    IO.println l
+  -- Output-integrity trailer: a truncated or crashed run must never pass as an
+  -- empty diff. inventory_gate.sh compares this against the lines it actually
+  -- received, in both directions.
+  IO.println s!"INV-COUNT|{sorted.size}"
+
+end Ed25519Inventory
diff --git a/verification/check.sh b/verification/check.sh
index df44168..f2e8abc 100755
--- a/verification/check.sh
+++ b/verification/check.sh
@@ -205,9 +205,12 @@ echo "  $(wc -l < "$HERE/GEN-MODEL.sha256") extracted-model files match their pi
 # the audit driver, the committed manifests, the policy tables — cannot be
 # discovered that way and are listed explicitly.
 HARNESS_EXTRA=(
-  AUDIT-MANIFEST.txt      # the statement block Phase 3c's digest is taken over
-  GEN-MODEL.sha256        # the extracted-model pins Phase 0b enforces
-  Proofs/Audit.lean       # the audit driver: it computes the digest it is judged by
+  AUDIT-MANIFEST.txt        # the statement block Phase 3c's digest is taken over
+  GEN-MODEL.sha256          # the extracted-model pins Phase 0b enforces
+  inventory-allowlist.txt   # the audit surface Phase 2c diffs against
+  Proofs/Audit.lean         # the audit driver: it computes the digest it is judged by
+  Proofs/InventoryCore.lean # inventory machinery
+  Proofs/Inventory.lean     # inventory driver: main chain
 )
 echo "=== Phase 0c: harness integrity ==="
 if [ ! -s "$HERE/HARNESS.sha256" ]; then
@@ -269,6 +272,11 @@ lake env bash -c "
   for f in Proofs/*.lean; do
     b=\$(basename \"\$f\" .lean)
     [ \"\$b\" = AxiomCheck ] && continue
+    # Inventory drivers are compiled by Phase 2c, not here: they must elaborate
+    # with the corpus already in the environment, and the two of them cannot be
+    # imported together. They are NOT unchecked — Phase 2b reads their compiled
+    # .olean like every other module, and Phase 0c pins their sources.
+    case \"\$b\" in Inventory|InventoryBasic|InventoryCore) continue;; esac
     case \"\$b\" in Scalar*) continue;; esac  # scalar layer: checked by check-scalar.sh (coherence pass 2)
     case \" ${PROOFS[*]} \" in (*\" \$b \"*) ;; (*) echo \"DEAD FILE: \$f not in check manifest\"; exit 1;; esac
   done
@@ -354,6 +362,85 @@ if [ "$GATE_RC" -ne 0 ]; then
   exit 1
 fi
 
+# ── Phase 2c: environment-derived declaration inventory ─────────────────────
+# WHAT THIS ADDS over Phase 2b. Phase 2b asks the kernel whether any AXIOM is
+# declared under Proofs/. It says nothing about the ~3000 other declarations:
+# a `def` or `theorem` whose cone quietly acquired an oracle, a declaration
+# renamed, added or removed, or a compiler-generated auxiliary that changed
+# shape, all pass 2b unremarked.
+#
+# This phase pins the whole surface. Every constant originating in an audited
+# module contributes NAME, MODULE, KIND and full AXIOM CONE, and the observed
+# set must equal inventory-allowlist.txt EXACTLY, both directions:
+# UNCLASSIFIED (in the environment, not allowlisted) and STALE (allowlisted,
+# not in the environment) are both build failures.
+#
+# PORTED from ltl-accumulator-verified, where a nine-attack self-test proved a
+# source-regex enumerator evadable by attributed, private, indented and
+# `instance` declarations and by a nested-namespace basename collision.
+#
+# TWO DRIVERS, because this corpus cannot be imported as one environment:
+# Proofs.Basic and Proofs.ConstSpecs both declare CurveFieldProofs.zero_spec.
+# The records carry their originating module precisely so those two remain
+# distinct entries — keyed on name alone they were byte-identical, and the
+# merged allowlist covered 3022 declarations with 3021 entries.
+echo "=== Phase 2c: environment-derived declaration inventory ==="
+INVFAIL=0
+INVLOG=$(mktemp /tmp/check-inv-XXXX.log)
+cd "$AENEAS_LEAN"
+# The DRIVERS are discovered, not listed: whether this corpus needs one or two
+# is a per-repo fact (dalek and anza cannot import Proofs.Basic together with
+# Proofs.ConstSpecs; risc0 and betrusted have no Proofs.Basic at all). A
+# hardcoded pair would silently look for a file that does not exist here.
+DRIVERS=$(ls "$HERE"/Proofs/Inventory*.lean 2>/dev/null | xargs -r -n1 basename \
+          | sed 's/\.lean$//' | grep -v '^InventoryCore$' | sort)
+if [ -z "$DRIVERS" ]; then
+  echo "  NO INVENTORY DRIVER FOUND — the audit surface would go unchecked."; exit 1
+fi
+N_DRIVERS=$(printf '%s\n' "$DRIVERS" | grep -c .)
+for drv in $DRIVERS; do
+  lake env bash -c "
+    set -uo pipefail
+    cd '$HERE/gen' && export LEAN_PATH=\"\$LEAN_PATH:\$PWD:$HERE\"
+    cd '$HERE'
+    LEAN_TIMEOUT=$TIMEOUT LEAN_MEM_MB=8192 '$HERE/lean-guard' Proofs/$drv.lean
+  " >> "$INVLOG" 2>&1 || { cat "$INVLOG"; echo "INVENTORY COMPILE FAILED ($drv)"; rm -f "$INVLOG"; exit 1; }
+done
+# Reconcile the two trailers into one. Summing them and comparing against the
+# lines actually collected preserves the integrity property in the presence of
+# the split: truncation in EITHER driver shows up as a mismatch.
+N_TRAILERS=$(grep -c '^INV-COUNT|' "$INVLOG")
+if [ "$N_TRAILERS" -ne "$N_DRIVERS" ]; then
+  echo "  INVENTORY INCOMPLETE: expected a count trailer from each of the $N_DRIVERS driver(s), saw $N_TRAILERS"
+  INVFAIL=1
+fi
+SUM=$(grep '^INV-COUNT|' "$INVLOG" | cut -d'|' -f2 | paste -sd+ - | bc)
+OBS=$(mktemp /tmp/check-inv-obs-XXXX.log)
+grep '^INV|' "$INVLOG" > "$OBS"
+echo "INV-COUNT|${SUM:-0}" >> "$OBS"
+"$HERE/inventory_gate.sh" "$OBS" "$HERE/inventory-allowlist.txt" || INVFAIL=1
+rm -f "$INVLOG" "$OBS"
+
+# The drivers' corpus lists must together BE the compile manifest, minus the
+# audit infrastructure and the scalar layer. Checked in both directions so a
+# module cannot fall between the two drivers, and NO SILENT TRUNCATION: what
+# this phase does not cover is named on stdout every run.
+COVERED=$(for d in $DRIVERS; do grep -ohE '`Proofs\.[A-Za-z0-9]+' "$HERE/Proofs/$d.lean"; done \
+          | sed 's/`Proofs\.//' | sort -u)
+for m in "${PROOFS[@]}"; do
+  case "$m" in Audit|Inventory|InventoryBasic|InventoryCore) continue;; esac
+  grep -qx "$m" <<<"$COVERED" || { echo "  UNINVENTORIED: $m is compiled by this script but no driver covers it"; INVFAIL=1; }
+done
+while read -r m; do
+  [ -z "$m" ] && continue
+  case " ${PROOFS[*]} " in (*" $m "*) ;; (*) echo "  PHANTOM: driver claims $m, which this script does not compile"; INVFAIL=1;; esac
+done <<<"$COVERED"
+for f in "$HERE"/Proofs/*.lean; do
+  b=$(basename "$f" .lean)
+  case "$b" in Audit|Inventory|InventoryBasic|InventoryCore) continue;; esac
+  grep -qx "$b" <<<"$COVERED" || echo "  NOT INVENTORIED HERE (separate button): Proofs/$b.lean"
+done
+[ "$INVFAIL" = 0 ] || { echo "INVENTORY COVERAGE FAILED"; exit 1; }
 # ── Phase 3: axiom audit of every certificate ───────────────────────────────
 echo "=== Phase 3: axiom audit ==="
 EXPECTED="[propext, Classical.choice, Quot.sound]"
diff --git a/verification/inventory-allowlist.txt b/verification/inventory-allowlist.txt
new file mode 100644
index 0000000..8e23d17
--- /dev/null
+++ b/verification/inventory-allowlist.txt
@@ -0,0 +1,3019 @@
+# inventory-allowlist.txt — the pinned audit surface (check.sh Phase 2c).
+#
+# One line per constant in the compiled environment of the audited corpus:
+#   INV|<fully qualified name>|<kind>|<comma-separated axiom cone>
+#
+# Generated from a green run; every entry reviewed as a DIFF, not read
+# line by line — 3000 compiler-generated auxiliaries are not human-readable
+# prose, and pretending otherwise would be the point of failure. What a
+# reader checks is that a change to this file is explained by a change to
+# the proofs.
+#
+# Regenerate deliberately: run check.sh, take the observed inventory, and
+INV|Proofs.AddSpec|Aeneas.Std.core.cmp.impls.PartialOrdUsize.lt.eq_1|theorem|
+INV|Proofs.AddSpec|Aeneas.Std.core.iter.range.StepUsize.forward_checked.eq_1|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_10|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_11|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_12|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_13|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_14|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_15|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_16|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_17|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_43|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_6|theorem|Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec._simp_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_limbs_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_spec._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.add_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.loop_step.match_1|def|
+INV|Proofs.AddSpec|CurveFieldProofs.loop_step|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.range_next_ge_spec._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.range_next_ge_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.range_next_lt_spec._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.range_next_lt_spec._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|CurveFieldProofs.range_next_lt_spec._simp_1_6|theorem|propext
+INV|Proofs.AddSpec|CurveFieldProofs.range_next_lt_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.Aeneas.Std.core.iter.adapters.step_by.skipN.match_1.eq_1|theorem|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.Aeneas.Std.core.iter.adapters.step_by.skipN.match_1.eq_2|theorem|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.Aeneas.Std.core.iter.adapters.step_by.skipN.match_1.splitter|def|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.CurveFieldProofs.loop_step.match_1.eq_1|theorem|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.CurveFieldProofs.loop_step.match_1.eq_2|theorem|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.CurveFieldProofs.loop_step.match_1.splitter|def|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.eq_1|theorem|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.eq_2|theorem|
+INV|Proofs.AddSpec|_private.Proofs.AddSpec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.splitter|def|
+INV|Proofs.CompressSpec|CurveFieldProofs.Bytes32.exists_bytes.match_1_1|def|
+INV|Proofs.CompressSpec|CurveFieldProofs.Bytes32.exists_bytes|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_10|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_11|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_12|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_13|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_14|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_7|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_8|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec._simp_1_9|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.ed_compress_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_10|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_11|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_12|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_13|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_14|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_18|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_7|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_8|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec._simp_1_9|theorem|propext
+INV|Proofs.CompressSpec|CurveFieldProofs.is_negative_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|CurveFieldProofs.to_bytes_spec'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.CompressSpec|subtle.Choice.Insts.CoreConvertFromU8.from.eq_1|theorem|
+INV|Proofs.CompressSpec|subtle.Choice.unwrap_u8.eq_1|theorem|
+INV|Proofs.ConstSpecs|Aeneas.Std.Array.make.eq_1|theorem|
+INV|Proofs.ConstSpecs|CurveFieldProofs.feVal._sparseCasesOn_1.else_eq|theorem|propext
+INV|Proofs.ConstSpecs|CurveFieldProofs.feVal._sparseCasesOn_2.else_eq|theorem|propext
+INV|Proofs.ConstSpecs|CurveFieldProofs.minus_one_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ConstSpecs|CurveFieldProofs.natCast_P_sub_one|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ConstSpecs|CurveFieldProofs.one_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ConstSpecs|CurveFieldProofs.sqrt_m1_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ConstSpecs|CurveFieldProofs.zero_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ConstSpecs|_private.Proofs.ConstSpecs.0.CurveFieldProofs.feVal.match_1.eq_1|theorem|propext
+INV|Proofs.ConstSpecs|_private.Proofs.ConstSpecs.0.CurveFieldProofs.feVal.match_1.eq_2|theorem|propext
+INV|Proofs.ConstSpecs|_private.Proofs.ConstSpecs.0.CurveFieldProofs.feVal.match_1.splitter._sparseCasesOn_2|def|propext
+INV|Proofs.ConstSpecs|_private.Proofs.ConstSpecs.0.CurveFieldProofs.feVal.match_1.splitter._sparseCasesOn_4|def|propext
+INV|Proofs.ConstSpecs|_private.Proofs.ConstSpecs.0.CurveFieldProofs.feVal.match_1.splitter|def|propext
+INV|Proofs.DecompressMain|Bool.Insts.CoreConvertFromChoice.from.eq_1|theorem|
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_10|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_11|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_12|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_13|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_14|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_7|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_8|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical._simp_1_9|theorem|propext
+INV|Proofs.DecompressMain|CurveFieldProofs.decompress_of_canonical|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.edwards_d_denote.match_1_1|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.edwards_d_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressMain|CurveFieldProofs.verify_accepts_iff_decompress|theorem|Classical.choice,Quot.sound,ed25519.Signature,ed25519.Signature.to_bytes,propext,signature.error.Error,signature.error.Error.new,verifying.sha512_hash3
+INV|Proofs.DecompressSpec|CurveFieldProofs.bytesVal_congr|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.bytesVal_inj|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.bytes_eq_iff_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.eq_neg_self_iff_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_10|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_11|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_12|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_13|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_14|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_15|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_8|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec._simp_1_9|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_cond_assign_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_10|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_11|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_12|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_13|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_14|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_16|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_7|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_8|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec._simp_1_9|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.fe_ct_eq_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.one_add_i_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_10|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_11|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_12|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_13|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_14|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_7|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_8|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec._simp_1_9|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.pow_p58_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_core|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_10|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_11|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_12|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_13|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_14|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_7|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_8|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec._simp_1_9|theorem|propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.sqrt_ratio_i_sq_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|CurveFieldProofs.u64_cond_assign|theorem|
+INV|Proofs.DecompressSpec|Slice.Insts.SubtleConstantTimeEq.ct_eq.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DecompressSpec|subtle.Choice.Insts.CoreOpsBitBitOrChoiceChoice.bitor.eq_1|theorem|Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Bnd.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Bnd.mono._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Bnd.mono|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Bnd_eq._simp_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Bnd_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Bnd|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Fe.exists_limbs.match_1_1|def|
+INV|Proofs.Denote|CurveFieldProofs.Fe.exists_limbs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Fe|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.Fp|def|propext
+INV|Proofs.Denote|CurveFieldProofs.P.eq_1|theorem|propext
+INV|Proofs.Denote|CurveFieldProofs.P_pos|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.P|def|propext
+INV|Proofs.Denote|CurveFieldProofs._aux_Proofs_Denote___unexpand_CurveFieldProofs_denote_1|def|
+INV|Proofs.Denote|CurveFieldProofs.denote|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.feVal._sparseCasesOn_1|def|propext
+INV|Proofs.Denote|CurveFieldProofs.feVal._sparseCasesOn_2|def|propext
+INV|Proofs.Denote|CurveFieldProofs.feVal.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.feVal.match_1|def|propext
+INV|Proofs.Denote|CurveFieldProofs.feVal_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.feVal|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_add|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_invert|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_minus_one|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_mul|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_neg|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_one|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_pow2k|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_reduce|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_square|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_sub|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.fe_zero|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.limbsVal|def|propext
+INV|Proofs.Denote|CurveFieldProofs.two_pow_255_eq|theorem|Quot.sound,propext
+INV|Proofs.Denote|CurveFieldProofs.«_aux_Proofs_Denote___macroRules_CurveFieldProofs_term⟪_⟫_1»|def|
+INV|Proofs.Denote|CurveFieldProofs.«term⟪_⟫»|def|
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.NafDigits|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.NafTableOf|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsmFold._f|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsmFold._sunfold|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsmFold.match_1|def|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsmFold_succ|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsmFold_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsmFold|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_21|theorem|Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_15|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_16|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_17|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_18|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_19|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_20|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_3|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_7|theorem|Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec._simp_1_9|theorem|Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec.match_1_33|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_loop_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._proof_1_16|theorem|Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._proof_1_17|theorem|Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_15|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_8|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec._simp_1_9|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec.match_1_18|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_loop_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_top_index_spec._simp_1_1|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.dsm_top_index_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.nafDigit._proof_1|theorem|propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.nafDigit.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|CurveFieldProofs.nafDigit|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmLoopSpec|_private.Proofs.DsmLoopSpec.0.CurveFieldProofs.loop_step.match_1.eq_1|theorem|
+INV|Proofs.DsmLoopSpec|_private.Proofs.DsmLoopSpec.0.CurveFieldProofs.loop_step.match_1.eq_2|theorem|
+INV|Proofs.DsmLoopSpec|_private.Proofs.DsmLoopSpec.0.CurveFieldProofs.loop_step.match_1.splitter|def|
+INV|Proofs.DsmMulSpec|CurveFieldProofs.edBasePt._proof_1|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.edBasePt._proof_2|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.edBasePt|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.fp_mul_eq_of_witness|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.onCurve_of_witness|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.run_basepoint|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_7|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_8|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec._simp_1_9|theorem|propext
+INV|Proofs.DsmMulSpec|CurveFieldProofs.vartime_double_base_mul_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_15|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_16|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_41|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_5|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec._simp_1_9|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_load_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_100|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_101|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_102|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_104|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_105|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_106|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_107|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_108|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_109|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_110|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_111|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_112|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_113|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_114|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_115|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_117|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_118|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_119|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_120|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_121|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_122|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_123|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_124|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_125|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_126|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_127|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_129|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_1|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_32|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_33|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_35|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_46|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_58|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_60|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_62|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_63|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_65|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_67|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_68|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_69|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_70|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_71|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_72|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_74|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_75|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_76|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_78|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_79|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_80|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_81|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_82|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_83|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_84|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_85|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_86|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_87|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_88|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_89|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_91|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_92|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_93|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_94|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_95|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_96|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_97|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_98|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_99|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_130|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_14|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_16|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_20|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_21|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_22|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_23|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_24|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_25|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_26|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0._simp_1_27|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_0|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_100|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_101|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_102|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_103|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_104|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_105|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_106|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_107|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_108|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_109|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_110|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_111|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_112|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_113|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_115|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_116|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_117|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_118|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_119|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_120|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_121|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_122|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_123|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_124|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_125|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_126|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_127|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_128|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_130|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_131|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_132|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_133|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_134|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_135|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_136|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_137|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_138|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_139|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_140|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_141|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_142|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_144|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_1|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_33|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_35|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_37|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_49|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_60|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_62|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_63|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_64|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_65|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_67|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_68|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_70|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_71|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_72|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_74|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_75|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_76|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_77|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_78|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_79|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_80|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_81|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_82|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_83|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_85|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_86|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_87|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_88|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_89|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_90|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_91|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_92|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_93|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_94|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_95|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_96|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_97|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_98|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_145|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_14|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_16|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_20|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_21|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_22|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_23|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_24|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_25|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_26|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1._simp_1_27|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_100|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_101|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_102|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_103|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_104|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_105|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_106|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_107|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_108|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_109|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_110|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_111|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_112|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_113|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_115|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_116|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_117|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_118|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_119|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_120|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_121|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_122|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_123|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_124|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_125|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_126|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_127|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_128|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_130|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_131|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_132|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_133|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_134|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_135|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_136|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_137|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_138|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_139|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_140|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_141|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_142|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_144|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_1|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_33|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_35|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_37|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_50|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_60|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_62|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_63|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_64|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_65|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_67|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_68|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_70|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_71|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_72|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_74|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_75|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_76|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_77|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_78|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_79|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_80|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_81|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_82|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_83|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_85|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_86|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_87|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_88|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_89|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_90|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_91|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_92|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_93|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_94|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_95|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_96|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_97|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_98|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_145|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_14|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_16|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_20|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_21|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_22|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_23|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_24|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_25|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_26|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2._simp_1_27|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_100|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_101|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_102|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_103|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_104|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_105|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_106|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_107|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_108|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_109|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_110|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_111|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_112|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_113|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_115|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_116|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_117|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_118|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_119|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_120|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_121|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_122|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_123|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_124|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_125|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_126|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_127|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_128|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_130|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_131|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_132|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_133|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_134|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_135|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_136|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_137|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_138|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_139|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_140|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_141|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_142|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_144|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_1|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_33|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_35|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_37|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_50|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_60|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_62|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_63|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_64|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_65|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_67|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_68|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_69|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_71|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_72|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_74|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_75|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_76|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_77|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_78|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_79|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_80|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_81|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_82|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_83|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_85|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_86|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_87|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_88|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_89|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_90|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_91|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_92|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_93|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_94|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_95|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_96|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_97|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_98|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_145|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_14|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_16|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_20|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_21|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_22|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_23|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_24|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_25|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_26|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3._simp_1_27|theorem|propext
+INV|Proofs.DsmNafLoadSpec|CurveFieldProofs.naf_word_loop_spec_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoadSpec|_private.Proofs.DsmNafLoadSpec.0.CurveFieldProofs.loop_step.match_1.eq_1|theorem|
+INV|Proofs.DsmNafLoadSpec|_private.Proofs.DsmNafLoadSpec.0.CurveFieldProofs.loop_step.match_1.eq_2|theorem|
+INV|Proofs.DsmNafLoadSpec|_private.Proofs.DsmNafLoadSpec.0.CurveFieldProofs.loop_step.match_1.splitter|def|
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.nafDigit_set_eq._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.nafDigit_set_eq._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.nafDigit_set_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.nafDigit_set_ne._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.nafDigit_set_ne._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.nafDigit_set_ne._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.nafDigit_set_ne|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_28|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_29|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_30|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_31|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_32|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_33|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_34|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_35|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_36|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_37|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_38|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_39|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_41|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_49|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_50|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_51|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_52|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_53|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_54|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_55|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_56|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_57|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_58|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_59|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_60|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_61|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_62|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_63|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_64|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_6|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_12|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_14|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_18|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_19|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_20|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_21|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_22|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_23|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_24|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec._simp_1_25|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_bitbuf_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_30|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_39|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_40|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_41|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_43|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_47|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_48|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_49|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_50|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_51|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_12|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_14|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_18|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_19|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_20|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_21|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_22|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_23|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_24|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_25|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec._simp_1_3|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_digit_loop_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_21|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_22|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_23|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_28|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_29|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_30|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_31|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._proof_1_32|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_15|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_16|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_5|theorem|Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec._simp_1_9|theorem|propext
+INV|Proofs.DsmNafLoopSpec|CurveFieldProofs.naf_update_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafLoopSpec|_private.Proofs.DsmNafLoopSpec.0.CurveFieldProofs.loop_step.match_1.eq_1|theorem|
+INV|Proofs.DsmNafLoopSpec|_private.Proofs.DsmNafLoopSpec.0.CurveFieldProofs.loop_step.match_1.eq_2|theorem|
+INV|Proofs.DsmNafLoopSpec|_private.Proofs.DsmNafLoopSpec.0.CurveFieldProofs.loop_step.match_1.splitter|def|
+INV|Proofs.DsmNafMath|CurveFieldProofs.div_pow_shift._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.div_pow_shift|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.mod32_absorb._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.mod32_absorb|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum._proof_1|theorem|propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum_set._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum_set._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum_set._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum_set._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum_set._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum_set|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.nafSum|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_even._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_even._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_even._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_even|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_odd._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_odd._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_odd._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_odd._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_carry_odd|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_even_step._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_even_step|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_exit._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_exit._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_exit._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_exit|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_odd_step|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_cross._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_cross._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_cross._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_cross._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_cross._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_cross|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_single._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_single._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.DsmNafMath|CurveFieldProofs.naf_window_single|theorem|Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_15|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_8|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec._simp_1_9|theorem|propext
+INV|Proofs.DsmNafSpec|CurveFieldProofs.non_adjacent_form_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|Aeneas.Std.I8.ofInt.congr_simp|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_10|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_11|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_12|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_13|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_14|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_7|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_8|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law._simp_1_9|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.compl_as_projective_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_b_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_18|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_19|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_20|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_21|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_28|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_29|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_30|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_31|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_32|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_10|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_11|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_12|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_13|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_14|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_15|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_16|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_34|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_5|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law._simp_1_9|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.dsm_step_p_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.edDigit.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.edDigit|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.naf_select_entry._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.naf_select_entry|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq._simp_1_1|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq._simp_1_2|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq._simp_1_3|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq._simp_1_4|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq._simp_1_5|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq._simp_1_7|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_X_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq._simp_1_1|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq._simp_1_2|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq._simp_1_3|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq._simp_1_4|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq._simp_1_5|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq._simp_1_7|theorem|propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_Y_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmStepSpec|CurveFieldProofs.proj_double_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.NafEntryOf|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.edOdd._f|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.edOdd._sunfold|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.edOdd.match_1|def|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.edOdd_succ|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.edOdd_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.edOdd|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_23|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_24|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_25|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_26|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_27|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_28|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_29|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._proof_1_30|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_7|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_8|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec._simp_1_9|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_select_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_27|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_28|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_29|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_37|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_38|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_45|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_46|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_53|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_54|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_61|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_62|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_63|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_64|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_65|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_67|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_69|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_70|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_71|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_72|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_74|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_75|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._proof_1_77|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_15|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_16|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_17|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_6|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_78|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec._simp_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_loop_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_10|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_11|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_12|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_13|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_14|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_7|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_8|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec._simp_1_9|theorem|propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.naf_table_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.tblEntries.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|CurveFieldProofs.tblEntries|def|Classical.choice,Quot.sound,propext
+INV|Proofs.DsmTableSpec|_private.Proofs.DsmTableSpec.0.CurveFieldProofs.loop_step.match_1.eq_1|theorem|
+INV|Proofs.DsmTableSpec|_private.Proofs.DsmTableSpec.0.CurveFieldProofs.loop_step.match_1.eq_2|theorem|
+INV|Proofs.DsmTableSpec|_private.Proofs.DsmTableSpec.0.CurveFieldProofs.loop_step.match_1.splitter|def|
+INV|Proofs.DsmTableSpec|_private.Proofs.DsmTableSpec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.eq_1|theorem|
+INV|Proofs.DsmTableSpec|_private.Proofs.DsmTableSpec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.eq_2|theorem|
+INV|Proofs.DsmTableSpec|_private.Proofs.DsmTableSpec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.splitter|def|
+INV|Proofs.EdAddAffNiels|CurveFieldProofs._aux_Proofs_EdAddAffNiels___macroRules_CurveFieldProofs_edisAffNiels_1|def|
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_10|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_11|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_12|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_13|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_14|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_7|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_8|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec._simp_1_9|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.add_affniels_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec53._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec53._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec53._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec53._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec53._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec54._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec54._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec54._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec54._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec54._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec54.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_add_spec54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_neg_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_neg_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_sub_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.aff_sub_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_10|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_11|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_12|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_13|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_14|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_7|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_8|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec._simp_1_9|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.affniels_neg_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.edisAffNiels|def|
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_10|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_11|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_12|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_13|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_14|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_7|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_8|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec._simp_1_9|theorem|propext
+INV|Proofs.EdAddAffNiels|CurveFieldProofs.sub_affniels_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs._aux_Proofs_EdAddProjNiels___macroRules_CurveFieldProofs_edisProjNiels_1|def|
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add52_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add53_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_10|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_11|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_12|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_13|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_14|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_7|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_8|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec._simp_1_9|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.add_projniels_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.edisProjNiels|def|
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.neg_spec'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_10|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_11|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_12|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_13|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_14|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_7|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_8|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec._simp_1_9|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.projniels_neg_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_10|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_11|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_12|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_13|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_14|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_7|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_8|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec._simp_1_9|theorem|propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_projniels_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|CurveFieldProofs.sub_spec'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdAddProjNiels|_private.Proofs.EdAddProjNiels.0.CurveFieldProofs.add_spec''._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|_private.Proofs.EdAddProjNiels.0.CurveFieldProofs.add_spec''._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|_private.Proofs.EdAddProjNiels.0.CurveFieldProofs.add_spec''._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|_private.Proofs.EdAddProjNiels.0.CurveFieldProofs.add_spec''._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|_private.Proofs.EdAddProjNiels.0.CurveFieldProofs.add_spec''._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.EdAddProjNiels|_private.Proofs.EdAddProjNiels.0.CurveFieldProofs.add_spec''|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.ExtValid.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.IsNielsOf.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.ProjNielsValid.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.ProjValid.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs._aux_Proofs_EdConvert___macroRules_CurveFieldProofs_edisConvert_1|def|
+INV|Proofs.EdConvert|CurveFieldProofs.add_spec''._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.add_spec''._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.add_spec''._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.add_spec''._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.add_spec''._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.add_spec''.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.add_spec''|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.complX.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.complY.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_10|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_11|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_12|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_13|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_14|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_7|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_8|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec._simp_1_9|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_extended_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_10|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_11|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_12|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_13|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_14|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_7|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_8|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec._simp_1_9|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.compl_as_projective_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edX.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edY.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edisConvert|def|
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._proof_1_15|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._proof_1_16|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_10|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_11|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_12|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_13|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_14|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_7|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_8|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec._simp_1_9|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_as_projective_niels_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_10|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_11|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_12|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_13|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_14|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_7|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_8|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec._simp_1_9|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.edwards_neg_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.neg_spec''.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.neg_spec''|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.projX.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.projY.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_10|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_11|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_12|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_13|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_14|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_7|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_8|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec._simp_1_9|theorem|propext
+INV|Proofs.EdConvert|CurveFieldProofs.proj_as_extended_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.sub_spec''.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdConvert|CurveFieldProofs.sub_spec''|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.OnCurve|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.c121665_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.cast_pow_eq|theorem|Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.completeness|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.dNum_cast|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.dNum|def|
+INV|Proofs.EdCurve|CurveFieldProofs.denominator_core|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edAdd_closure|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edAdd_comm|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edAdd_id|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edAdd_neg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edAdd|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edD._proof_1|theorem|propext
+INV|Proofs.EdCurve|CurveFieldProofs.edD._proof_2|theorem|propext
+INV|Proofs.EdCurve|CurveFieldProofs.edD_char|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edD_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edD_not_square|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edD_pow_eq_neg_one|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edD|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edId|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.edNeg|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.natCast_eq_zero_of_mod|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.natCast_ne_zero_of_mod|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.neg_one_ne_one_Fp|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.onCurve_id|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.onCurve_neg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.powMod.eq_1|theorem|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux._f|def|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux._sunfold|def|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux._unsafe_rec|def|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux.eq_1|theorem|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux.eq_2|theorem|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux.eq_def|theorem|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux.match_1|def|
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux_eq._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux_eq._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux_eq._proof_1_6|theorem|Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux_eq._proof_1_7|theorem|Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux_eq|theorem|Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.powModAux|def|
+INV|Proofs.EdCurve|CurveFieldProofs.powMod|def|
+INV|Proofs.EdCurve|CurveFieldProofs.sNum|def|
+INV|Proofs.EdCurve|CurveFieldProofs.sqrtM1_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.sqrtM1_sq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.sqrtM1|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|CurveFieldProofs.two_ne_zero_Fp|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|_private.Proofs.EdCurve.0.CurveFieldProofs.c121666_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdCurve|_private.Proofs.EdCurve.0.CurveFieldProofs.powModAux.match_1.eq_1|theorem|
+INV|Proofs.EdCurve|_private.Proofs.EdCurve.0.CurveFieldProofs.powModAux.match_1.eq_2|theorem|
+INV|Proofs.EdCurve|_private.Proofs.EdCurve.0.CurveFieldProofs.powModAux.match_1.splitter|def|
+INV|Proofs.EdDenote|CurveFieldProofs.AffNiels.mk_xy2d|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.AffNiels.mk_y_minus_x|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.AffNiels.mk_y_plus_x|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.AffNielsValid|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.AffNiels|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ComplPoint.mk_T|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ComplPoint.mk_X|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ComplPoint.mk_Y|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ComplPoint.mk_Z|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ComplPoint|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ComplValid|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.EdPoint.mk_T|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.EdPoint.mk_X|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.EdPoint.mk_Y|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.EdPoint.mk_Z|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.EdPoint|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ExtValid|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.IsAffNielsOf|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.IsNielsOf._proof_1|theorem|propext
+INV|Proofs.EdDenote|CurveFieldProofs.IsNielsOf._proof_2|theorem|propext
+INV|Proofs.EdDenote|CurveFieldProofs.IsNielsOf|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjNiels.mk_T2d|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjNiels.mk_Y_minus_X|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjNiels.mk_Y_plus_X|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjNiels.mk_Z|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjNielsValid|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjNiels|def|
+INV|Proofs.EdDenote|CurveFieldProofs.ProjPoint.mk_X|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjPoint.mk_Y|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjPoint.mk_Z|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ProjPoint|def|
+INV|Proofs.EdDenote|CurveFieldProofs.ProjValid|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.c121666_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.complX|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.complY|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.edX|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.edY|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.edwards_d2_eq_two_d|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.edwards_d2_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.edwards_d_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.fp_div_eq_div_iff|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.fp_div_eq_iff|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.fp_eq_div_iff|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.natCast_P_sub|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.natCast_ne_zero_of_lt_P._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.natCast_ne_zero_of_lt_P|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.ok_ext|theorem|
+INV|Proofs.EdDenote|CurveFieldProofs.projX|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.projY|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.run_affine_niels_identity|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.run_edwards_identity|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.run_projective_identity|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.run_projective_niels_identity|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.two_mul_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|CurveFieldProofs.two_ne_zero'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDenote|_private.Proofs.EdDenote.0.CurveFieldProofs.feVal.match_1.eq_1|theorem|propext
+INV|Proofs.EdDenote|_private.Proofs.EdDenote.0.CurveFieldProofs.feVal.match_1.eq_2|theorem|propext
+INV|Proofs.EdDenote|_private.Proofs.EdDenote.0.CurveFieldProofs.feVal.match_1.splitter._sparseCasesOn_2|def|propext
+INV|Proofs.EdDenote|_private.Proofs.EdDenote.0.CurveFieldProofs.feVal.match_1.splitter._sparseCasesOn_3|def|propext
+INV|Proofs.EdDenote|_private.Proofs.EdDenote.0.CurveFieldProofs.feVal.match_1.splitter|def|propext
+INV|Proofs.EdDouble|CurveFieldProofs._aux_Proofs_EdDouble___macroRules_CurveFieldProofs_edisDouble_1|def|
+INV|Proofs.EdDouble|CurveFieldProofs.as_projective_spec._simp_1_1|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.as_projective_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edisDouble|def|
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._proof_1_16|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_10|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_11|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_12|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_13|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_14|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_7|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_8|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec._simp_1_9|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.edwards_double_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._proof_1_15|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_10|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_11|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_12|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_13|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_14|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_7|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_8|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec._simp_1_9|theorem|propext
+INV|Proofs.EdDouble|CurveFieldProofs.proj_double_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|_private.Proofs.EdDouble.0.CurveFieldProofs.add_spec''._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|_private.Proofs.EdDouble.0.CurveFieldProofs.add_spec''._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|_private.Proofs.EdDouble.0.CurveFieldProofs.add_spec''._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|_private.Proofs.EdDouble.0.CurveFieldProofs.add_spec''._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|_private.Proofs.EdDouble.0.CurveFieldProofs.add_spec''._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.EdDouble|_private.Proofs.EdDouble.0.CurveFieldProofs.add_spec''|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdDouble|_private.Proofs.EdDouble.0.CurveFieldProofs.sub_spec''|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.add_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.casesOn|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.double_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.id_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.mk._flat_ctor|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.mk|ctor|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.neg_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.recOn|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.rec|recursor|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation.sub_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.IsEdwardsImplementation|inductive|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.OnCurveExt|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.add_affniels_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.add_law_fractions|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.add_projniels_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.affniels_xy2d_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.compl_as_extended_law._simp_1_1|theorem|propext
+INV|Proofs.EdMain|CurveFieldProofs.compl_as_extended_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.edPt|def|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.edwardsImplementation|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.edwards_add_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.edwards_double_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.edwards_neg_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.edwards_sub_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.ext_T_div|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.ext_T_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.ext_X_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.ext_Y_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.ext_oncurve_poly|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.impl_add_comm_ed|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.impl_add_id_ed|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.impl_add_neg_ed|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.niels_T2d_eq|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.run_edwards_add|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.run_edwards_double|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.run_edwards_identity_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.run_edwards_neg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.run_edwards_sub|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.sub_affniels_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.EdMain|CurveFieldProofs.sub_projniels_law|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.FeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.VFe|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_add|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_injective|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_inv|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_mk|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_mul|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_neg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_one|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_qadd|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_qinv|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_qmul|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_qneg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_qone|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_qsub|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_qzero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_sub|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_surjective|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.denoteQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.feQRingEquiv._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.feQRingEquiv._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.feQRingEquiv._proof_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.feQRingEquiv|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.feq_ext|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instAddFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ._proof_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instCommRingFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_14|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ._proof_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFieldFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instFintypeFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instInvFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instMulFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instNegFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instOneFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instSubFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.instZeroFeQ|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qadd_assoc|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qadd_comm|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qadd_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qadd|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qinv_qzero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qinv|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qleft_distrib|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qmul_assoc|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qmul_comm|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qmul_inv_cancel|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qmul_one|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qmul_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qmul|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qneg_add_cancel|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qneg|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qone_mul|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qone|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qright_distrib|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qsub_eq_add_neg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qsub|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qzero_add|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qzero_mul|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qzero_ne_qone|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.qzero|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.run_add_red|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.run_reduce|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vadd._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vadd._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vadd_congr|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vadd_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vadd_runs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vadd|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vfeSetoid._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vfeSetoid|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vfe_equiv_iff|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vinv._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vinv._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vinv_congr|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vinv_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vinv_runs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vinv|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vmul._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vmul._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vmul_congr|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vmul_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vmul_runs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vmul|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vneg._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vneg._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vneg_congr|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vneg_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vneg_runs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vneg|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vone._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vone_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vone_runs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vone|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vsub._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vsub._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vsub_congr|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vsub_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vsub_runs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vsub|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vzero._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vzero_denote|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vzero_runs|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FeQ|CurveFieldProofs.vzero|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.Fp_field|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.add_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.casesOn|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.inv_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.mk._flat_ctor|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.mk|ctor|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.mul_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.neg_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.one_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.recOn|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.rec|recursor|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.sub_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.surj|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation.zero_ok|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.IsFieldImplementation|inductive|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.Valid|def|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.fieldImplementation|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_assoc|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_comm|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_add_neg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_left_distrib|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_mul_assoc|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_mul_comm|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_mul_inv_cancel|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_one_mul|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_zero_add|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.impl_zero_ne_one|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_add._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_add._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_add._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_add._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_add._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_add|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_invert|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_mul|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_neg|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_one|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_sub|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.run_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FieldMain|CurveFieldProofs.valid54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.P_prime|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_encode._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_encode._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_encode._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_encode._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_encode._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_encode._proof_1_6|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_encode|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.denote_surjective|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode._proof_1|theorem|propext
+INV|Proofs.Field|CurveFieldProofs.encode._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_10|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_6|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_7|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_8|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd._proof_1_9|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_bnd|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode_list|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.encode|def|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.instFactPrimeP|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.instNeZeroNatP|theorem|propext
+INV|Proofs.Field|CurveFieldProofs.mkU64_val._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.mkU64_val|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.mkU64|def|
+INV|Proofs.Field|CurveFieldProofs.spec_exists|theorem|Quot.sound,propext
+INV|Proofs.Field|CurveFieldProofs.val_lt_P|theorem|propext
+INV|Proofs.FromBytesSpec|Aeneas.Std.Slice.length.eq_1|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_10|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_11|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_12|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_13|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_14|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_15|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_8|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec._simp_1_9|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.closure_call_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.digits_tile._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.digits_tile|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_18|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_26|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_10|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_11|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_12|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_13|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_14|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_15|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_8|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec._simp_1_9|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.from_bytes_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.or_add_low|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.range_from_index_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.range_from_index_spec._simp_1_1|theorem|propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.range_from_index_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.window_extract._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.window_extract._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.window_extract|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.window_shift._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.window_shift._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.FromBytesSpec|CurveFieldProofs.window_shift|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs._aux_Proofs_InvertSpec___macroRules_CurveFieldProofs_tacticBnd_1|def|
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_10|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_11|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_12|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_13|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_14|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_7|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_8|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec._simp_1_9|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.invert_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.mul_spec'.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.mul_spec'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_10|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_11|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_12|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_13|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_14|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_15|theorem|
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_16|theorem|
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_17|theorem|
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_7|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_8|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec._simp_1_9|theorem|propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow22501_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow2k_spec'.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.pow2k_spec'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.square_spec'.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.square_spec'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.InvertSpec|CurveFieldProofs.tacticBnd|def|
+INV|Proofs.MulSpec|CurveFieldProofs._aux_Proofs_MulSpec___macroRules_CurveFieldProofs_tacticDis_1|def|
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_10|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_11|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_12|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_13|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_14|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_7|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_8|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec._simp_1_9|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.m_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_10|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_11|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_12|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_13|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_14|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_7|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_8|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec._simp_1_9|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_mask_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_100|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_101|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_102|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_103|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_104|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_105|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_106|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_107|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_108|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_109|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_110|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_111|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_17|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_19|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_21|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_23|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_25|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_27|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_29|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_31|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_33|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_34|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_35|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_37|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_38|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_40|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_41|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_43|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_44|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_46|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_48|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_50|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_52|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_54|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_56|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_58|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_60|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_62|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_63|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_64|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_65|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_67|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_68|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_69|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_70|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_71|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_72|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_73|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_74|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_75|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_76|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_77|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_78|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_79|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_80|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_81|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_82|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_83|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_84|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_85|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_86|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_87|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_88|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_89|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_90|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_91|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_92|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_93|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_94|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_95|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_96|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_97|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_98|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._proof_1_99|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_10|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_11|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_12|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_13|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_14|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_15|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_8|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec._simp_1_9|theorem|propext
+INV|Proofs.MulSpec|CurveFieldProofs.mul_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.MulSpec|CurveFieldProofs.tacticDis|def|
+INV|Proofs.P25519|P25519.cast_pow_eq|theorem|Quot.sound,propext
+INV|Proofs.P25519|P25519.powMod.eq_1|theorem|
+INV|Proofs.P25519|P25519.powModAux._f|def|
+INV|Proofs.P25519|P25519.powModAux._sunfold|def|
+INV|Proofs.P25519|P25519.powModAux._unsafe_rec|def|
+INV|Proofs.P25519|P25519.powModAux.eq_1|theorem|
+INV|Proofs.P25519|P25519.powModAux.eq_2|theorem|
+INV|Proofs.P25519|P25519.powModAux.eq_def|theorem|
+INV|Proofs.P25519|P25519.powModAux.match_1|def|
+INV|Proofs.P25519|P25519.powModAux_eq._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.P25519|P25519.powModAux_eq._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.P25519|P25519.powModAux_eq._proof_1_6|theorem|Quot.sound,propext
+INV|Proofs.P25519|P25519.powModAux_eq._proof_1_7|theorem|Quot.sound,propext
+INV|Proofs.P25519|P25519.powModAux_eq|theorem|Quot.sound,propext
+INV|Proofs.P25519|P25519.powModAux|def|
+INV|Proofs.P25519|P25519.powMod|def|
+INV|Proofs.P25519|P25519.pow_eq_one_of_powMod|theorem|Quot.sound,propext
+INV|Proofs.P25519|P25519.pow_ne_one_of_powMod|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_1919519569386763|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_2773320623|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_31757755568855353|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_57896044618658097711785492504343953926634992332820282019728792003956564819949|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_72106336199|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_74058212732561358302231226437062788676166966415465897661863160754340907|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_75445702479781427272750846543864801|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|P25519.prime_8574133|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.P25519|_private.Proofs.P25519.0.P25519.powModAux.match_1.eq_1|theorem|
+INV|Proofs.P25519|_private.Proofs.P25519.0.P25519.powModAux.match_1.eq_2|theorem|
+INV|Proofs.P25519|_private.Proofs.P25519.0.P25519.powModAux.match_1.splitter|def|
+INV|Proofs.P25519|p25519_prime|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_inj_coord._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_inj_coord|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_point_inj._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_point_inj._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_point_inj._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_point_inj._proof_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_point_inj._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.enc_point_inj|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero._simp_1_1|theorem|propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero._simp_1_2|theorem|propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero._simp_1_3|theorem|propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero._simp_1_4|theorem|propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero._simp_1_5|theorem|propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero._simp_1_7|theorem|propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.one_add_d_y_sq_ne_zero|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointEqSpec|CurveFieldProofs.verify_accepts_iff_point_eq|theorem|Classical.choice,Quot.sound,ed25519.Signature,ed25519.Signature.to_bytes,propext,signature.error.Error,signature.error.Error.new,verifying.sha512_hash3
+INV|Proofs.PointEqSpec|CurveFieldProofs.x_sq_of_onCurve|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.Bytes64.exists_bytes.match_1_1|def|
+INV|Proofs.PointLiftSpec|CurveFieldProofs.Bytes64.exists_bytes|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.List.exists_len32.match_1_1|def|
+INV|Proofs.PointLiftSpec|CurveFieldProofs.List.exists_len32|theorem|propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.bind_ok_inv|theorem|propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.byte_peel._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.byte_peel|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.rangeEq_iff_bytesVal._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.rangeEq_iff_bytesVal._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.rangeEq_iff_bytesVal|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.recompute_inv|theorem|Classical.choice,Quot.sound,propext,verifying.sha512_hash3
+INV|Proofs.PointLiftSpec|CurveFieldProofs.vartime_dsm_basepoint_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.verify_accepts_iff_point._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.PointLiftSpec|CurveFieldProofs.verify_accepts_iff_point|theorem|Classical.choice,Quot.sound,ed25519.Signature,ed25519.Signature.to_bytes,propext,signature.error.Error,signature.error.Error.new,verifying.sha512_hash3
+INV|Proofs.PointLiftSpec|curve25519_dalek.edwards.CompressedEdwardsY.as_bytes.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|Aeneas.Std.I32.ofInt.congr_simp|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.limbsVal.eq_1|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.nat_and_mask|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.nat_shift_div|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_10|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_11|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_12|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_13|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_14|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_15|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_8|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec._simp_1_9|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_mask_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._proof_1_80|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_10|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_11|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_12|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_13|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_14|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_15|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_16|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_5|theorem|Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec._simp_1_9|theorem|propext
+INV|Proofs.ReduceSpec|CurveFieldProofs.reduce_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.byte_split_52_4._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.byte_split_52_4|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_10|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_11|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_12|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_13|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_14|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_7|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_8|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec._simp_1_9|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.from_bytes_mod_order_wide_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_26|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_27|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_44|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_45|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_59|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._proof_1_60|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_10|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_11|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_12|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_13|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_14|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_15|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_8|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec._simp_1_9|theorem|propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar52_to_bytes_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ScalarPackSpec|ScalarProofs.scalar_pack|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.instDecidableRangeEq._proof_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.instDecidableRangeEq._proof_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.instDecidableRangeEq|def|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.rangeEq._proof_1|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.rangeEq|def|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_accepts_iff|theorem|Classical.choice,Quot.sound,ed25519.Signature,ed25519.Signature.to_bytes,propext,signature.error.Error,signature.error.Error.new,verifying.sha512_hash3
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_full._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_full|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_24|theorem|Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_28|theorem|Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_30|theorem|Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._proof_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_13|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_14|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_15|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_16|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_17|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_18|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_19|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_20|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_26|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_3|theorem|propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_7|theorem|Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec._simp_1_9|theorem|Quot.sound,propext
+INV|Proofs.SigApexSpec|CurveFieldProofs.verify_loop_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.CurveFieldProofs.loop_step.match_1.eq_1|theorem|
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.CurveFieldProofs.loop_step.match_1.eq_2|theorem|
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.CurveFieldProofs.loop_step.match_1.splitter|def|
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.core.result.Result.Insts.CoreOpsTry_traitTry.branch.match_1.eq_1|theorem|
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.core.result.Result.Insts.CoreOpsTry_traitTry.branch.match_1.eq_2|theorem|
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.core.result.Result.Insts.CoreOpsTry_traitTry.branch.match_1.splitter|def|
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.ed25519_dalek.verifying.verify_sha512.match_1.eq_1|theorem|Classical.choice,Quot.sound,propext,signature.error.Error
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.ed25519_dalek.verifying.verify_sha512.match_1.eq_2|theorem|Classical.choice,Quot.sound,propext,signature.error.Error
+INV|Proofs.SigApexSpec|_private.Proofs.SigApexSpec.0.ed25519_dalek.verifying.verify_sha512.match_1.splitter|def|Classical.choice,Quot.sound,propext,signature.error.Error
+INV|Proofs.SigApexSpec|core.result.Result.Insts.CoreOpsTry_traitTry.branch.eq_1|theorem|
+INV|Proofs.SigApexSpec|core.result.Result.Insts.CoreOpsTry_traitTry.branch.eq_2|theorem|
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_10|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_11|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_12|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_13|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_14|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_15|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_16|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_17|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_39|theorem|propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_6|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec._simp_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_loop_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec'.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec'|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_10|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_11|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_12|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_13|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_5|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_6|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_7|theorem|Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec._proof_1_9|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|CurveFieldProofs.square2_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.Square2Spec|_private.Proofs.Square2Spec.0.CurveFieldProofs.loop_step.match_1.eq_1|theorem|
+INV|Proofs.Square2Spec|_private.Proofs.Square2Spec.0.CurveFieldProofs.loop_step.match_1.eq_2|theorem|
+INV|Proofs.Square2Spec|_private.Proofs.Square2Spec.0.CurveFieldProofs.loop_step.match_1.splitter|def|
+INV|Proofs.Square2Spec|_private.Proofs.Square2Spec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.eq_1|theorem|
+INV|Proofs.Square2Spec|_private.Proofs.Square2Spec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.eq_2|theorem|
+INV|Proofs.Square2Spec|_private.Proofs.Square2Spec.0.curve25519_dalek.backend.serial.u64.field.FieldElement51.square2_loop.body.match_1.splitter|def|
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_100|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_101|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_102|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_103|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_105|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_106|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_107|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_17|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_19|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_21|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_23|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_25|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_27|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_29|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_31|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_33|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_35|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_37|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_39|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_41|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_43|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_45|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_47|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_49|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_51|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_53|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_55|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_57|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_59|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_60|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_62|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_63|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_64|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_65|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_66|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_67|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_68|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_69|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_70|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_71|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_72|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_74|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_75|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_76|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_77|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_78|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_79|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_80|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_81|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_82|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_83|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_84|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_85|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_86|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_87|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_88|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_89|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_90|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_91|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_92|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_93|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_94|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_95|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_96|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_97|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_98|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._proof_1_99|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_104|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_10|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_11|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_12|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_13|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_14|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_15|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_2|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_3|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_4|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_8|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec._simp_1_9|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_body_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_loop_spec_aux._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_loop_spec_aux._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_loop_spec_aux._proof_1_3|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_loop_spec_aux._proof_1_4|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_loop_spec_aux|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_loop_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_10|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_11|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_12|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_13|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_14|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_7|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_8|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec._simp_1_9|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_m_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_10|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_11|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_12|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_13|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_14|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_7|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_8|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec._simp_1_9|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_mask_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_10|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_11|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_12|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_13|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_14|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_15|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_16|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_18|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_5|theorem|Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec._simp_1_9|theorem|propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.pow2k_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.square_spec._proof_1_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.square_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.square_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SquareSpec|CurveFieldProofs.square_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|Aeneas.Std.Array.make.congr_simp|theorem|
+INV|Proofs.SubNegSpec|CurveFieldProofs.cast_key|theorem|Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.denote.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_10|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_11|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_12|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_13|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_14|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_15|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_16|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_5|theorem|Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec._simp_1_9|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.neg_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.reduce_make_spec.mvcgen_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.reduce_make_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sixteen_p|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_33|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_10|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_11|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_12|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_13|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_14|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_15|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_16|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_5|theorem|Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_7|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_8|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec._simp_1_9|theorem|propext
+INV|Proofs.SubNegSpec|CurveFieldProofs.sub_spec|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_0._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_0|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_1._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_2._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_2|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_3._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_3|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_4._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.byte_split_4|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.bytes_pack|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.carry_pack._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.carry_pack|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.div_rung._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.div_rung|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.nat_shr|theorem|propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.q_facts._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.q_facts._proof_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.q_facts|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.q_mod_p._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.q_mod_p._proof_1_2|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.q_mod_p|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.q_telescope|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.xor_top_bit._proof_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesMath|CurveFieldProofs.xor_top_bit|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.bytesVal._proof_1|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.bytesVal._sparseCasesOn_1|def|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.bytesVal._sparseCasesOn_2|def|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.bytesVal.eq_1|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.bytesVal.match_1|def|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.bytesVal|def|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.fe_to_bytes|def|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_15|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_16|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_17|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_18|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_19|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_20|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_21|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_22|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_23|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_24|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_25|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_26|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_27|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_28|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_29|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_30|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_31|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_32|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_33|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_34|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_35|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_36|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_37|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_38|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_39|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_40|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_41|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_42|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_43|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_44|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_45|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_46|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_47|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_48|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_49|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_50|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_51|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_52|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_53|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_54|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_55|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_56|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_57|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_58|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_59|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_60|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_61|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_62|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_63|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_64|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_65|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_66|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_67|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_68|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_69|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_70|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_71|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_72|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_73|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_74|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_75|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_76|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_77|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_78|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_79|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_80|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_81|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_82|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_83|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_84|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_85|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_86|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_87|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_88|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_89|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_90|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._proof_1_91|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_10|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_11|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_12|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_13|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_14|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_1|theorem|Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_2|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_3|theorem|Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_4|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_5|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_6|theorem|Classical.choice,Quot.sound,propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_7|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_8|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec._simp_1_9|theorem|propext
+INV|Proofs.ToBytesSpec|CurveFieldProofs.to_bytes_spec|theorem|Classical.choice,Quot.sound,propext
diff --git a/verification/inventory_gate.sh b/verification/inventory_gate.sh
new file mode 100755
index 0000000..a5e59d0
--- /dev/null
+++ b/verification/inventory_gate.sh
@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+# ─────────────────────────────────────────────────────────────────────────────
+# inventory_gate.sh — diff an observed environment inventory against the
+# pinned allowlist. PORTED VERBATIM from ltl-accumulator-verified apart from
+# the axiom-surface assertion, which is repo-specific: there the corpus admits
+# exactly one sanctioned axiom, here it admits none.
+#
+# This is THE production coverage gate: check.sh Phase 2c calls it, and the
+# self-test exercises this exact script — the tested logic IS the shipping
+# logic.
+#
+# Usage: inventory_gate.sh <observed-lean-output> <allowlist-file>
+#
+# Fail-closed in BOTH directions:
+#   UNCLASSIFIED — constant in the environment, absent from the allowlist
+#                  (new/renamed decl, changed kind, or changed axiom cone)
+#   STALE        — allowlist entry absent from the environment
+# plus an output-integrity check: the INV-COUNT trailer emitted by
+# Proofs/Inventory.lean must equal the number of INV lines actually seen,
+# so a truncated or crashed run can never pass as an empty diff.
+# ─────────────────────────────────────────────────────────────────────────────
+set -uo pipefail
+export LC_ALL=C   # byte-order collation: sort/comm must agree with Lean's String order
+obs_file="$1"; allow_file="$2"
+
+OBS=$(grep '^INV|' "$obs_file" | sort -u)
+N_OBS=$(printf '%s' "$OBS" | grep -c '^INV|' || true)
+TRAILER=$(grep '^INV-COUNT|' "$obs_file" | tail -1 | cut -d'|' -f2)
+if [ -z "$TRAILER" ] || [ "$TRAILER" != "$N_OBS" ]; then
+  echo "  INVENTORY TRUNCATED: trailer=${TRAILER:-absent}, observed $N_OBS lines"
+  exit 1
+fi
+
+ALLOW=$(grep '^INV|' "$allow_file" | sort -u)
+FAILGATE=0
+UNCLASS=$(comm -23 <(printf '%s\n' "$OBS") <(printf '%s\n' "$ALLOW"))
+STALE=$(comm -13 <(printf '%s\n' "$OBS") <(printf '%s\n' "$ALLOW"))
+if [ -n "$UNCLASS" ]; then
+  printf '%s\n' "$UNCLASS" | sed 's/^/  UNCLASSIFIED (in environment, not allowlisted): /'
+  FAILGATE=1
+fi
+if [ -n "$STALE" ]; then
+  printf '%s\n' "$STALE" | sed 's/^/  STALE (allowlisted, not in environment): /'
+  FAILGATE=1
+fi
+
+# The audited corpus admits NO axiom declarations at all: the sanctioned
+# external models live in gen/, outside every module these drivers cover, and
+# are byte-pinned by Phase 0b. An axiom appearing here would be a declaration
+# smuggled into the proof corpus, which Phase 2b also catches kernel-side —
+# two independent gates on the same property, deliberately.
+AXLINES=$(printf '%s\n' "$OBS" | grep '|axiom|' || true)
+if [ -n "$AXLINES" ]; then
+  echo "  AXIOM SURFACE DRIFT: the audited corpus must declare no axioms; observed:"
+  printf '%s\n' "$AXLINES" | sed 's/^/    /'
+  FAILGATE=1
+fi
+
+# The message must describe what was actually checked. It said "single
+# sanctioned axiom" when ported, which is the accumulator's policy; here the
+# audited corpus permits NONE, and a success line describing a different rule
+# is how an assertion quietly stops meaning anything.
+[ "$FAILGATE" = 0 ] && echo "  inventory gate: $N_OBS constants, environment == allowlist, zero axioms declared in the audited corpus"
+exit "$FAILGATE"
diff --git a/verification/selftest-axgate.sh b/verification/selftest-axgate.sh
index 140f0a1..7282529 100755
--- a/verification/selftest-axgate.sh
+++ b/verification/selftest-axgate.sh
@@ -43,13 +43,24 @@ DRIVER="$STASH/phase2b.sh"
   echo "HERE=\"$HERE\""
   echo 'AENEAS_LEAN="$AENEAS_HOME/backends/lean"'
   echo "TIMEOUT=$TIMEOUT; CORES=\"$CORES\""
-  sed -n '/^# ── Phase 2b/,/^# ── Phase 3/p' "$HERE/check.sh" | sed '$d'
+  # Stop at the NEXT phase marker, whatever it is called. A hardcoded
+  # terminator ("...to Phase 3") silently widens the moment a phase is
+  # inserted between the two: adding Phase 2c made this driver swallow 2c as
+  # well and die on variables that phase expects check.sh to have defined,
+  # which surfaced as the BASELINE failing — a self-test blaming a gate for
+  # its own extraction bug.
+  awk '/^# ── Phase 2b/{f=1} f&&/^# ── Phase /&&!/Phase 2b/{exit} f{print}' "$HERE/check.sh"
 } > "$DRIVER"
 if [ "$(wc -l < "$DRIVER")" -lt 40 ]; then
   echo "FATAL: could not lift Phase 2b out of check.sh — the phase markers moved."
   echo "This self-test must attack the shipping gate; refusing to run against nothing."
   exit 1
 fi
+if [ "$(grep -c '^# ── Phase ' "$DRIVER")" -ne 1 ]; then
+  echo "FATAL: the lifted block spans more than one phase; the extraction is wrong."
+  grep '^# ── Phase ' "$DRIVER" | sed 's/^/    /'
+  exit 1
+fi
 
 expect() {   # expect <name> <expected-rc> <required-substring>
   local name="$1" want_rc="$2" want_txt="$3"
diff --git a/verification/selftest-inventory.sh b/verification/selftest-inventory.sh
new file mode 100755
index 0000000..0ea2798
--- /dev/null
+++ b/verification/selftest-inventory.sh
@@ -0,0 +1,108 @@
+#!/usr/bin/env bash
+# ─────────────────────────────────────────────────────────────────────────────
+# selftest-inventory.sh — adversarial self-test for check.sh Phase 2c.
+#
+# WHAT PHASE 2c IS FOR. Phase 2b asks the kernel whether any AXIOM is declared
+# under Proofs/. It says nothing about the ~3000 other declarations. Phase 3
+# pins the cones of the 31 named certificates. Between them sits everything
+# else: a helper lemma that quietly acquired an oracle in its cone, a
+# declaration added, removed or renamed, a compiler-generated auxiliary that
+# changed shape. Phase 2c pins that whole surface and diffs it both ways.
+#
+# Cases, each asserting a SPECIFIC diagnostic:
+#   0  positive control: the untouched tree passes
+#   1  an allowlist row deleted        -> UNCLASSIFIED (in env, not allowlisted)
+#   2  an allowlist row invented       -> STALE (allowlisted, not in env)
+#   3  a cone silently widened         -> BOTH, because the record changed
+#   4  an axiom row appears            -> AXIOM SURFACE DRIFT
+#   5  the count trailer disagrees     -> INVENTORY TRUNCATED (no vacuous pass)
+#
+# It runs the SHIPPING inventory_gate.sh against a recorded observation, so no
+# Lean is needed and the whole thing takes a second. The observation itself is
+# produced by check.sh Phase 2c; this test attacks the gate that judges it.
+# ─────────────────────────────────────────────────────────────────────────────
+set -uo pipefail
+HERE="$(cd "$(dirname "$0")" && pwd)"
+FAILURES=0
+STASH="$(mktemp -d)"
+trap 'rm -rf "$STASH"' EXIT INT TERM
+
+ALLOW="$HERE/inventory-allowlist.txt"
+[ -s "$ALLOW" ] || { echo "FATAL: inventory-allowlist.txt missing or empty"; exit 1; }
+
+# The observation a green run would produce: the allowlist itself plus a
+# trailer. Deriving it from the allowlist is exactly right for this test — the
+# question is whether the GATE reacts correctly to differences, and each case
+# below introduces one.
+mkobs() {  # mkobs <file> [extra-line...]
+  local out="$1"; shift
+  grep '^INV|' "$ALLOW" > "$out"
+  for l in "$@"; do printf '%s\n' "$l" >> "$out"; done
+  LC_ALL=C sort -o "$out" "$out"
+  echo "INV-COUNT|$(grep -c '^INV|' "$out")" >> "$out"
+}
+
+expect() {  # expect <label> <obs> <allow> <want-rc> <want-substring>
+  local label="$1" obs="$2" allow="$3" want_rc="$4" want_txt="$5" out rc
+  out=$("$HERE/inventory_gate.sh" "$obs" "$allow" 2>&1); rc=$?
+  if [ "$rc" -ne "$want_rc" ]; then
+    echo "  ✗ $label: exit $rc, expected $want_rc"; echo "$out" | sed 's/^/      /'
+    FAILURES=$((FAILURES+1)); return
+  fi
+  if ! grep -qF "$want_txt" <<<"$out"; then
+    echo "  ✗ $label: exit code right, diagnostic wrong (rejected for the wrong reason)"
+    echo "      wanted: $want_txt"; echo "$out" | sed 's/^/      /'
+    FAILURES=$((FAILURES+1)); return
+  fi
+  echo "  ✓ $label"
+}
+
+echo "=== selftest-inventory: attacking check.sh Phase 2c's gate ==="
+
+# ── 0. positive control ────────────────────────────────────────────────────
+mkobs "$STASH/obs.txt"
+expect "case 0 control: a faithful observation passes" "$STASH/obs.txt" "$ALLOW" 0 "environment == allowlist"
+
+# ── 1. a row deleted from the allowlist: the declaration is still there, so
+#      the gate must report it as unclassified rather than shrug.
+VICTIM=$(grep '^INV|' "$ALLOW" | grep '|theorem|' | head -1)
+grep -vxF "$VICTIM" "$ALLOW" > "$STASH/allow-short.txt"
+expect "case 1: allowlist row deleted -> UNCLASSIFIED" "$STASH/obs.txt" "$STASH/allow-short.txt" 1 "UNCLASSIFIED"
+
+# ── 2. a row invented in the allowlist: nothing in the environment matches it.
+cp "$ALLOW" "$STASH/allow-extra.txt"
+echo "INV|Proofs.Ghost|CurveFieldProofs.ghost_lemma|theorem|Classical.choice" >> "$STASH/allow-extra.txt"
+expect "case 2: allowlist row with no declaration -> STALE" "$STASH/obs.txt" "$STASH/allow-extra.txt" 1 "STALE"
+
+# ── 3. THE ONE THAT MATTERS: a cone silently widened. Same module, same name,
+#      same kind — only the axiom cone grew. Phases 2b and 3 both pass this:
+#      2b only looks for axiom DECLARATIONS, and 3 only pins the 31 named
+#      certificates. If the victim is not one of those, nothing else sees it.
+WIDENED=$(sed 's/$/,sha2.Sha512/' <<<"$VICTIM")
+mkobs "$STASH/obs-wide.txt"
+grep -vxF "$VICTIM" "$STASH/obs-wide.txt" > "$STASH/t" && mv "$STASH/t" "$STASH/obs-wide.txt"
+printf '%s\n' "$WIDENED" >> "$STASH/obs-wide.txt"
+LC_ALL=C sort -o "$STASH/obs-wide.txt" "$STASH/obs-wide.txt"
+echo "INV-COUNT|$(grep -c '^INV|' "$STASH/obs-wide.txt")" >> "$STASH/obs-wide.txt"
+expect "case 3: a cone widened by one oracle -> UNCLASSIFIED" "$STASH/obs-wide.txt" "$ALLOW" 1 "UNCLASSIFIED"
+
+# ── 4. an axiom appears in the audited corpus. The sanctioned external models
+#      live in gen/, outside every module the drivers cover, so any axiom here
+#      is a declaration smuggled into the proof corpus.
+mkobs "$STASH/obs-ax.txt" "INV|Proofs.FeQ|CurveFieldProofs.rogue|axiom|"
+expect "case 4: an axiom in the corpus -> AXIOM SURFACE DRIFT" "$STASH/obs-ax.txt" "$ALLOW" 1 "AXIOM SURFACE DRIFT"
+
+# ── 5. truncation. "Nothing found" and "nothing wrong" must not share a path:
+#      a crashed or cut-short run has to fail, not pass as an empty diff.
+grep '^INV|' "$ALLOW" | head -100 > "$STASH/obs-trunc.txt"
+echo "INV-COUNT|$(grep -c '^INV|' "$ALLOW")" >> "$STASH/obs-trunc.txt"
+expect "case 5: trailer disagrees with the lines -> INVENTORY TRUNCATED" "$STASH/obs-trunc.txt" "$ALLOW" 1 "INVENTORY TRUNCATED"
+
+echo ""
+if [ "$FAILURES" -eq 0 ]; then
+  echo "SELFTEST PASSED — Phase 2c's gate rejects surface drift in both directions,"
+  echo "for the stated reason in each case."
+  exit 0
+fi
+echo "SELFTEST FAILED: $FAILURES case(s) did not behave as claimed."
+exit 1
diff --git a/verification/selftest-statements.sh b/verification/selftest-statements.sh
index 1413178..175fb94 100755
--- a/verification/selftest-statements.sh
+++ b/verification/selftest-statements.sh
@@ -68,7 +68,9 @@ build_driver() {
     sed -n '/^CERTS=(/,/^)/p' "$HERE/check.sh"
     # `$0` inside Phase 3c must resolve to the shipping check.sh, not to this
     # driver, or the apex-name recovery would read the wrong file.
-    sed -n '/^# ── Phase 3c/,/^echo ""$/p' "$HERE/check.sh" | sed '$d' \
+    # Stop at the next phase marker, not at a blank echo: a terminator that is
+    # not itself a phase boundary breaks the moment the phase's body changes.
+    awk '/^# ── Phase 3c/{f=1} f&&/^# ── Phase /&&!/Phase 3c/{exit} f{print}' "$HERE/check.sh" \
       | sed "s|\"\$0\"|\"$HERE/check.sh\"|g"
   } > "$DRIVER"
   if [ "$(wc -l < "$DRIVER")" -lt 60 ]; then