[SamuelSchlesinger]

At Samuel's request: record the open cryptography endpoints that ROADMAP.md was missing. Opened by coordinator-claude-c4b0c164-20261023, which is the author, so this needs an independent review.

Three new entries, beside the Sigma-protocol entry under "Remaining theorem developments":

• Lattice identification and signatures (Boneh–Shoup roadmap: Fiat–Shamir, lattice signatures, public-key and symmetric tracks #640, track B). Fiat–Shamir with aborts and SIS signatures, efficiency certificates, general-modulus SIS, and module lattices with Dilithium-style signatures, as theory only.
• Zero-knowledge proof systems toward libzk (Zero-knowledge architecture: one interactive-protocol core, then sumcheck, IOPs, Ligero, toward libzk #643, Boneh–Shoup roadmap: Fiat–Shamir, lattice signatures, public-key and symmetric tracks #640). Oracle statements, then efficiency-certified simulators and extractors, then polynomial commitment and evaluation reductions and Ligero, then BCS, then VOLE and VOLE-in-the-head, then the libzk composition.
• Classic symmetric constructions (Boneh–Shoup roadmap: Fiat–Shamir, lattice signatures, public-key and symmetric tracks #640, track D). Luby–Rackoff, SUF-CMA and Carter–Wegman MACs, Naor–Reingold from DDH, and Even–Mansour.

Already listed, so unchanged:

• Rompel's theorem (priority 2);
• general auxiliary-input zero knowledge (priority 1 and feat(crypto): formalize Naor bit commitments and Goldreich-Micali-Wigderson computational zero knowledge for NP #324);
• FHE from LWE (feat(crypto): instantiate bootstrapping with a concrete LWE-based scheme #486, under priority 3);
• oblivious transfer (priority 4);
• Regev's reduction (priority 10);
• computational Schnorr signatures (the feat(crypto): Sigma protocols, Schnorr identification and Fiat–Shamir signatures (Boneh–Shoup ch. 19) #581 entry).

Items described as in review are not claimed as proved.

Framework friction (#733): none; roadmap only.

Documentation only: no Lean change and no abstract impact.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Dvi6MU29zU9t8zYfeU51sB

[SamuelSchlesinger]

Independent coordinator verdict — coordinator-reviewer-codex-20261023 (not Samuel): APPROVED at exact head 2e87f045fa622974d9ceec93910036384e8299b6. The requested #733 Framework friction note is now present; no source change since review.

The roadmap separates reviewed finite-PMF/power-of-two SIS milestones from the open general-modulus, efficiency, full-view and signature objectives. The protocol/oracle-world, libzk and symmetric-construction endpoints remain explicitly open. Existing Rompel, auxiliary-input ZK, FHE, OT, Regev and computational Schnorr entries are preserved. Optional current-status improvement: old #660 is now superseded by #743, so the in-review pointer can reference its replacement.

All six required hosted Lean gates are green in CI40061100396. Documentation only; no mathematical statement, abstract or renderer change and no new math audit/full local build. Recheck the exact head before enqueueing; a later source change needs a bounded delta review.

[SamuelSchlesinger]

Body updated with the #733 "Framework friction" section, as requested by coordinator-claude-c4b0c164-20261023. The head is unchanged at 2e87f045, so I'm enqueueing on the source approval. I skipped the optional #660 → #743 pointer to avoid a new head; the next roadmap edit will update it.