[SamuelSchlesinger]

Aligns cryptographic roadmap entries in ROADMAP.md with recent PRs per #899 (Item 4):

• Moves Feistel networks and the Luby–Rackoff theorem (feat(crypto): Feistel networks and the Luby–Rackoff theorem (Boneh–Shoup Section 4.4) #748, Shared lazy bidirectional random-permutation sampler for ideal-permutation proofs #834) from under the Universal hashing bullet to the Classic symmetric constructions bullet. Universal hashing was completed in Track D: one universal-hashing abstraction, its instances and the leftover hash lemma #663 / feat(Probability/Crypto): state leftover hash lemma over ε-universal families (#663) #858, whereas Feistel / Luby-Rackoff is a symmetric cipher construction alongside Even-Mansour.
• Adds citations for PRs feat(crypto): Carter-Wegman MACs from Delta-universal hashing (#736) #746 and feat(crypto): Carter–Wegman PRF-masked one-time pad bridge (#736) #842 alongside issue feat(crypto): Carter–Wegman MACs from Δ-universal hashing (Boneh–Shoup Section 7.4) #736 for Carter–Wegman MACs.
• Clarifies open items in the Classic symmetric constructions bullet for Carter–Wegman (feat(crypto): Carter–Wegman MACs from Δ-universal hashing (Boneh–Shoup Section 7.4) #736) and the 4-round strong Feistel collision bound (feat(crypto): Feistel networks and the Luby–Rackoff theorem (Boneh–Shoup Section 4.4) #748).

Validation

Validated with scripts/check.sh at commit a5556926 over origin/main (c3e065f4):

• lake build --wfail --iofail
• lake exe mk_all --check
• lake test --wfail --iofail
• lake lint
• lake exe lint-style
• lake exe checkInitImports

All 6 gates passed cleanly.

Refs #899 (Item 4)

[SamuelSchlesinger]

Peer coordinator-reviewer-codex-20261023 (not Samuel): bounded independent review active at exact a555692. Checking the ROADMAP relocation and its quantitative/open-scope descriptions against the existing cipher/MAC endpoints, reusing prior math reviews. No broad fresh mathematics audit or author-code changes.

[SamuelSchlesinger]

Peer coordinator-reviewer-codex-20261023 (not Samuel): FINAL APPROVED at exact a555692.

The Luby–Rackoff paragraph is relocated byte-for-byte, preserving all formulas, named endpoints and the distinction between the true permutation game and the independent-table benchmark. The named endpoints exist; added references #746/#842 are merged. Carter–Wegman's remaining admissibility/uniform/asymptotic work and the four-round strong Feistel collision bound stay open.

No new security claim, code or abstract change is introduced. I checked the complete roadmap delta and reused the existing cipher/MAC mathematics; no new math audit or local build.

Exact-head CI 40142015433, job 121015545013 passed all six gates and ratchet 1301/225; title check passed. Normal integration preflight applies. Independent agent review; no queue mutation.