{ "historyBasis": "Historical points are estimated from current Blueprint atom-to-issue links, GitHub issue closure dates, and linked closing PR merge dates; historical atom totals count the tracked atoms authored in the documentation at each commit; the latest point is exact from rendered Blueprint manifests.", "projectEnd": "2027-01-28", "projectStart": "2026-05-07T16:55:15+02:00", "schemaVersion": 2, "snapshots": [ { "commit": "40b4b54ee9b48c7cf016f4cafb88791edd0ef4be", "date": "2026-05-07T16:55:15+02:00", "definitions": { "specified": 0, "specifiedLabels": [], "total": 0, "verified": 0, "verifiedLabels": [] }, "estimated": true, "shortCommit": "40b4b54", "source": "github-issue-or-closing-pr-estimate", "subject": "Initial commit: SecureMessaging skeleton", "theorems": { "specified": 0, "specifiedLabels": [], "total": 0, "verified": 0, "verifiedLabels": [] } }, { "commit": "c2d1f293ac050d635f5ec2c66b7d2a3ff5ddebf4", "date": "2026-05-07T18:18:18+02:00", "definitions": { "specified": 0, "specifiedLabels": [], "total": 0, "verified": 0, "verifiedLabels": [] }, "estimated": true, "shortCommit": "c2d1f29", "source": "github-issue-or-closing-pr-estimate", "subject": "Add CODEOWNERS for protocols-messaging team", "theorems": { "specified": 0, "specifiedLabels": [], "total": 0, "verified": 0, "verifiedLabels": [] } }, { "commit": "e20d0cf9c1b392e0117c00850cca3c1f6cf27e4d", "date": "2026-05-14T17:26:27+02:00", "definitions": { "specified": 3, "specifiedLabels": [ "cka", "cka_correctness", "cka_security" ], "total": 3, "verified": 3, "verifiedLabels": [ "cka", "cka_correctness", "cka_security" ] }, "estimated": true, "shortCommit": "e20d0cf", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify CKA scheme (#44)", "theorems": { "specified": 0, "specifiedLabels": [], "total": 0, "verified": 0, "verifiedLabels": [] } }, { "commit": "993b56292f0cd660f22817eff3374586d5975945", "date": "2026-05-17T17:29:24+02:00", "definitions": { "specified": 4, "specifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 4, "verified": 4, "verifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "993b562", "source": "github-issue-or-closing-pr-estimate", "subject": "CKA from DDH construction and correctness proof (#49)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "2cfcc947ae9af645d5a39ae97b33869f37641dc5", "date": "2026-05-18T09:33:28+02:00", "definitions": { "specified": 4, "specifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 4, "verified": 4, "verifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "2cfcc94", "source": "github-issue-or-closing-pr-estimate", "subject": "ToVCVio lemmas for CKA-from-DDH security proof (#51)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "db9e7f78b523624d918dab8755a037321cdf47ea", "date": "2026-05-18T10:29:41+02:00", "definitions": { "specified": 4, "specifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 4, "verified": 4, "verifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "db9e7f7", "source": "github-issue-or-closing-pr-estimate", "subject": "Add README (#54)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "9bb677bfbee9f8c5128796ae16d359f6bacd7175", "date": "2026-05-19T17:12:01+02:00", "definitions": { "specified": 4, "specifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 4, "verified": 4, "verifiedLabels": [ "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "9bb677b", "source": "github-issue-or-closing-pr-estimate", "subject": "Add CI workflow using lean-action (#55)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "7e8f20ceb1404029d1d7408888dde4000167edfe", "date": "2026-05-21T16:02:46+02:00", "definitions": { "specified": 7, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 7, "verified": 7, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "7e8f20c", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify AEAD scheme (#58)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "2c0d3c693187e446c4972a8a51cf6961c0f6db86", "date": "2026-06-01T18:00:57+02:00", "definitions": { "specified": 7, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 7, "verified": 7, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "2c0d3c6", "source": "github-issue-or-closing-pr-estimate", "subject": "Update CKA security advantage and CKA-from-DDH party state definitions", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "8d46e86adef363efa3bebf375fa30481339b059f", "date": "2026-06-03T20:39:18+02:00", "definitions": { "specified": 7, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 7, "verified": 7, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "8d46e86", "source": "github-issue-or-closing-pr-estimate", "subject": "Add GitHub Pages deploy infrastructure with Verso blueprint docs (#141)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "fdffc522170bf2f28cc6b03ec114f2a0dadc9744", "date": "2026-06-05T11:30:54+02:00", "definitions": { "specified": 7, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ], "total": 7, "verified": 7, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_security" ] }, "estimated": true, "shortCommit": "fdffc52", "source": "github-issue-or-closing-pr-estimate", "subject": "Add verso-blueprint chapter stubs with bibliography and dependency graph (#150)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "f4cf9438cadc385a02751bde5f35fb04f832bce0", "date": "2026-06-07T17:34:23+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 8, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "f4cf943", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify CKA-from-KEM construction (#57)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 1, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "f8d42ded98fc046f4bc28e917420d8e6f27dc059", "date": "2026-06-10T17:14:19+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 43, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "f8d42de", "source": "github-issue-or-closing-pr-estimate", "subject": "Update blueprint with Lean pills and game boxes (#154)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 47, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "de65f06e18f832c9a6af78bc4442606d67778c1d", "date": "2026-06-15T10:41:05+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 43, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "de65f06", "source": "github-issue-or-closing-pr-estimate", "subject": "Sketch PRF-PRNG syntax, security game, and PRP+PRG construction (#155)", "theorems": { "specified": 1, "specifiedLabels": [ "cka_from_ddh_correctness" ], "total": 47, "verified": 1, "verifiedLabels": [ "cka_from_ddh_correctness" ] } }, { "commit": "fad33ef914e2d17500cf2bcfdedcccf8a40b3567", "date": "2026-06-15T13:55:26+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 43, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "fad33ef", "source": "github-issue-or-closing-pr-estimate", "subject": "feat(cka): prove correctness of CKA from KEM (#156)", "theorems": { "specified": 2, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_kem_correctness" ], "total": 47, "verified": 2, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_kem_correctness" ] } }, { "commit": "29592aeeb0b320789af1d5d912bad834326d63c3", "date": "2026-06-16T15:58:25+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 43, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "29592ae", "source": "github-issue-or-closing-pr-estimate", "subject": "Prove security of CKA-from-DDH construction (#151)", "theorems": { "specified": 3, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness" ], "total": 47, "verified": 3, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness" ] } }, { "commit": "10d53a4876408162c3be83d062162e8e39d8ee43", "date": "2026-06-18T13:17:25+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 43, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "10d53a4", "source": "github-issue-or-closing-pr-estimate", "subject": "feat(cka): prove correctness of CKA from KEM (#157)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 47, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "6a4692392dc8228572b17ea43d17279f94740da0", "date": "2026-06-18T16:30:12+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 46, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "6a46923", "source": "github-issue-or-closing-pr-estimate", "subject": "Update verso blueprint with progress chart (#160)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "65ac02c06982b0b4453a005f264c8c67b5f603c8", "date": "2026-06-19T15:58:36+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 46, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "65ac02c", "source": "github-issue-or-closing-pr-estimate", "subject": "ci: reuse veritooling for sorry auditing (#159)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "9498f3abed3c24f84b8de5fa24d34e22ee83deb7", "date": "2026-06-19T17:18:23+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 46, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "9498f3a", "source": "github-issue-or-closing-pr-estimate", "subject": "Run lake lint in CI (#203)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "e9e50675f2b945b71bdbc7afc582f37fe3a2a38f", "date": "2026-06-22T10:35:22+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 46, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "e9e5067", "source": "github-issue-or-closing-pr-estimate", "subject": "comment only when new sorry (#204)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "9c2ad707286b2439194bf00c873a535a88763984", "date": "2026-06-22T16:23:58+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 46, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "9c2ad70", "source": "github-issue-or-closing-pr-estimate", "subject": "ci: scope sorry audit to proof libraries (#209)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "86da0ac8a9c364dc8ff28627a783a3a5850ed95f", "date": "2026-06-23T13:03:29+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 46, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "86da0ac", "source": "github-issue-or-closing-pr-estimate", "subject": "ci: save Lake dependency cache even on failure (#207)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "0c63f03635b097fa6ff0d13fb3deb9d55ff8982b", "date": "2026-06-24T18:46:47+02:00", "definitions": { "specified": 8, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ], "total": 46, "verified": 8, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security" ] }, "estimated": true, "shortCommit": "0c63f03", "source": "github-issue-or-closing-pr-estimate", "subject": "chore(deps): bump VCVio to a41b514, migrate to Lean/Mathlib v4.30.0 (#212)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "6433734c39851c44cf3ad7ccc136ccd5565d030b", "date": "2026-06-25T20:30:45+02:00", "definitions": { "specified": 11, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "scka_correctness", "scka_scheme", "scka_security" ], "total": 46, "verified": 11, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "6433734", "source": "github-issue-or-closing-pr-estimate", "subject": "Sparse Continuous Key Agreement (SCKA) definitions and security game (#217)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 48, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "e3d82456bba73f439a63e211cb20b56eb33ceaf5", "date": "2026-06-29T11:09:52+02:00", "definitions": { "specified": 11, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "scka_correctness", "scka_scheme", "scka_security" ], "total": 47, "verified": 11, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "e3d8245", "source": "github-issue-or-closing-pr-estimate", "subject": "Update verso blueprint and fix epoch key indexing (#218)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 50, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "5effc525282b195840298cd6507382bf4d71f87c", "date": "2026-06-30T09:24:10+02:00", "definitions": { "specified": 12, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 47, "verified": 12, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "5effc52", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify Online-Offline KEM scheme (#220)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 50, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "ac6c34e2e27b95af0c8beca57558a9db027b9174", "date": "2026-06-30T13:16:04+02:00", "definitions": { "specified": 14, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 47, "verified": 14, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "ac6c34e", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify Erasure Code scheme (#221)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 50, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "e8bbb8f92dc1d1ff878e569f5b11caf4d1f9b37c", "date": "2026-07-01T12:12:29+02:00", "definitions": { "specified": 14, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 47, "verified": 14, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "e8bbb8f", "source": "github-issue-or-closing-pr-estimate", "subject": "Use do-notation in erasure code encodeChunks and Correct (#223)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 50, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "605c44a01dfc3fb6bee526427855843b5299d34a", "date": "2026-07-03T14:08:23+02:00", "definitions": { "specified": 15, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 15, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "605c44a", "source": "github-issue-or-closing-pr-estimate", "subject": "Incremental KEM specification (#227)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 50, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "9d88d067a4952939839e387982eef63bbacb89fa", "date": "2026-07-07T09:05:03+02:00", "definitions": { "specified": 15, "specifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 15, "verifiedLabels": [ "aead", "aead_correctness", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "9d88d06", "source": "github-issue-or-closing-pr-estimate", "subject": "chore(deps): bump VCVio to 8f5dc4f (#228)", "theorems": { "specified": 4, "specifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 50, "verified": 4, "verifiedLabels": [ "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "25e9da5f03fbaaee61e111d287956c70fe3aa7c3", "date": "2026-07-15T20:33:03+02:00", "definitions": { "specified": 16, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 16, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "25e9da5", "source": "github-issue-or-closing-pr-estimate", "subject": "Verify AEAD encrypt-then-MAC construction (#60)", "theorems": { "specified": 6, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ], "total": 50, "verified": 6, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security" ] } }, { "commit": "86b5f48bd6ee0ad7fd73966892be508487222eb0", "date": "2026-07-15T23:20:46+02:00", "definitions": { "specified": 17, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 17, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "86b5f48", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify ML-KEM and prove (conditional) correctness (#229)", "theorems": { "specified": 7, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ], "total": 50, "verified": 7, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ] } }, { "commit": "b5a047c68922c2620c38f8dfc451935ed24d5ff5", "date": "2026-07-16T10:32:32+02:00", "definitions": { "specified": 17, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 17, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "b5a047c", "source": "github-issue-or-closing-pr-estimate", "subject": "docs(AEAD): wire EtM verso blueprint atoms to their Lean atoms (#232)", "theorems": { "specified": 7, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ], "total": 50, "verified": 7, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ] } }, { "commit": "31511378aa116cb2f9570c46dd007ec801cd99bc", "date": "2026-07-16T22:37:58+02:00", "definitions": { "specified": 18, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "opp_unikem_cka_spec", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 18, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "opp_unikem_cka_spec", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "3151137", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify Opp-UniKEM-CKA protocol (#230)", "theorems": { "specified": 7, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ], "total": 50, "verified": 7, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ] } }, { "commit": "9b014148a2a6315b121b5b25b2d2de3fc71de6a6", "date": "2026-07-17T09:47:49+02:00", "definitions": { "specified": 18, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "opp_unikem_cka_spec", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 18, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_scheme", "opp_unikem_cka_spec", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "9b01414", "source": "github-issue-or-closing-pr-estimate", "subject": "verso docs: foldable game boxes and two-column CKA oracles (#233)", "theorems": { "specified": 7, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ], "total": 50, "verified": 7, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ] } }, { "commit": "08176cf8b75283bd82cf162caae4dcbf1ea4974b", "date": "2026-07-21T17:54:32+02:00", "definitions": { "specified": 19, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 19, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "08176cf", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify on-off KEM from ML-KEM construction (#235)", "theorems": { "specified": 7, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ], "total": 50, "verified": 7, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness" ] } }, { "commit": "88c7c2f0ed8b8f127780f1e514da2c1682a6e09b", "date": "2026-07-29T12:04:32+02:00", "definitions": { "specified": 20, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 20, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "88c7c2f", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify Reed-Solomon erasure code (#237)", "theorems": { "specified": 8, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness", "reed_solomon_erasure_code_correctness" ], "total": 50, "verified": 8, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "7af6862c961a105d2858d29b07c6a65f72508fa2", "date": "2026-07-29T13:29:40+02:00", "definitions": { "specified": 20, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 20, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "7af6862", "source": "github-issue-or-closing-pr-estimate", "subject": "Clarify `R_q` vs `T_q` notation in On-Off KEM docs (#236)", "theorems": { "specified": 8, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness", "reed_solomon_erasure_code_correctness" ], "total": 50, "verified": 8, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "ml_kem_correctness", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "07e99a731c2fa2772bcd5b7a7e6ee6aa9ab5da9e", "date": "2026-07-30T20:35:05+02:00", "definitions": { "specified": 21, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 49, "verified": 21, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "07e99a7", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify incremental KEM-from-ML-KEM construction (#238)", "theorems": { "specified": 10, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 50, "verified": 10, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "f8797bdd898d47ceedc57ae76f1cbd483621ce8d", "date": "2026-08-03T18:14:46+02:00", "definitions": { "specified": 22, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 50, "verified": 22, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "f8797bd", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify GCM authenticated encryption and prove correctness (#234)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 52, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "300a69e797d9762d772a6206c36e810c043bb2d1", "date": "2026-08-04T07:51:09+02:00", "definitions": { "specified": 22, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 50, "verified": 22, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "300a69e", "source": "github-issue-or-closing-pr-estimate", "subject": "Add verso documentation pills for new KEM atoms (#239)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "1e3deb5dad4f3d339f9f52e790fb88202e12d083", "date": "2026-08-06T09:29:43+02:00", "definitions": { "specified": 23, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 51, "verified": 23, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "1e3deb5", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify ratcheted authenticator scheme (#249)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "58caf9cdda26b850c91606fdda999b8007c10886", "date": "2026-08-06T10:58:04+02:00", "definitions": { "specified": 25, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 54, "verified": 25, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_scheme", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "58caf9c", "source": "github-issue-or-closing-pr-estimate", "subject": "Specify randomness leakage variants for KEM structures (#247)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "128bbcf33d61f8c3cb5b36345a0294cdbb7dbd3e", "date": "2026-08-10T20:17:37+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "128bbcf", "source": "github-issue-or-closing-pr-estimate", "subject": "Specificy stateful erasure-code streaming (#253)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "22785195aad1779e216395a6b72bc63bb2d140fa", "date": "2026-08-12T10:00:00+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "2278519", "source": "github-issue-or-closing-pr-estimate", "subject": "Expected-payoff lemmas and on/off KEM correctness decomposition (#254)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "fd00be2f8c6ade9346c4f49c1a045bf4669ccd5a", "date": "2026-08-12T17:30:00+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "fd00be2", "source": "github-issue-or-closing-pr-estimate", "subject": "Make the Blueprint progress chart interactive and attribute atoms to their PRs", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "ab365ee1e6f58604bfed787fe948918783e9000b", "date": "2026-08-12T18:47:36+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": true, "shortCommit": "ab365ee", "source": "github-issue-or-closing-pr-estimate", "subject": "Give every pull request its own snapshot card and reclaim chart space", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "12ddca58e14860e767c6c8357826f120e2c1e64d", "date": "2026-08-13T08:50:35+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": false, "shortCommit": "12ddca5", "source": "rendered-blueprint-manifest", "subject": "Stop reseeding the progress history on every render", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "5e798ad40605e6a281927cfba07b68803f2e5eae", "date": "2026-08-13T09:54:59+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": false, "shortCommit": "5e798ad", "source": "rendered-blueprint-manifest", "subject": "Interactive Blueprint progress chart with per-PR attribution", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "9c9db60bc949ee6fb49b4dc2e0d535c383951c95", "date": "2026-08-13T10:36:15+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": false, "shortCommit": "9c9db60", "source": "rendered-blueprint-manifest", "subject": "Interactive Blueprint progress chart with per-PR attribution", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "d9349337bd8fd32946e3ea3dbc9f95eca35d3625", "date": "2026-08-14T10:12:38+02:00", "definitions": { "specified": 27, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 56, "verified": 27, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": false, "shortCommit": "d934933", "source": "rendered-blueprint-manifest", "subject": "Interactive Blueprint progress chart with per-PR attribution (#256)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } }, { "commit": "d59b142066ec492b60095d4d09712ef1ea9dea24", "date": "2026-08-14T16:30:18+02:00", "definitions": { "specified": 30, "specifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "mlkem_braid_unchunked_ct_sender", "mlkem_braid_unchunked_derive_epoch_key", "mlkem_braid_unchunked_ek_sender", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ], "total": 59, "verified": 30, "verifiedLabels": [ "aead", "aead_correctness", "aead_etm_spec", "aead_gcm_spec", "aead_security_exp", "cka", "cka_correctness", "cka_from_ddh", "cka_from_kem_spec", "cka_security", "erasure_code_correctness", "erasure_code_payload", "erasure_code_scheme", "erasure_code_streaming", "incremental_kem_from_ml_kem_spec", "incremental_kem_rand_leak", "incremental_kem_scheme", "ml_kem_scheme", "mlkem_braid_ratcheted_authenticator", "mlkem_braid_unchunked_ct_sender", "mlkem_braid_unchunked_derive_epoch_key", "mlkem_braid_unchunked_ek_sender", "on_off_kem_from_kpke_spec", "on_off_kem_rand_leak", "on_off_kem_scheme", "opp_unikem_cka_spec", "reed_solomon_erasure_code", "scka_correctness", "scka_scheme", "scka_security" ] }, "estimated": false, "shortCommit": "d59b142", "source": "rendered-blueprint-manifest", "subject": "Specify unchunked ML-KEM Braid core (#257)", "theorems": { "specified": 11, "specifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ], "total": 54, "verified": 11, "verifiedLabels": [ "aead_etm_correctness", "aead_etm_security", "aead_gcm_correctness", "cka_from_ddh_correctness", "cka_from_ddh_security", "cka_from_kem_correctness", "cka_from_kem_security", "incremental_kem_from_ml_kem_correctness", "ml_kem_correctness", "ml_kem_correctness_easycrypt", "reed_solomon_erasure_code_correctness" ] } } ], "updatedAt": "2026-08-14T15:05:00.863720+00:00" }