audit(gaps#4,5,6,7): ethereum diff KAT, musig2/frost fuzz, cflite +2 targets, opencl zk+bip324
Gap #4 RESOLVED: audit/test_exploit_ethereum_differential.cpp — 10 tests / 15 sub-checks
against go-ethereum, web3.py, ethers.js reference vectors (address derivation KAT,
ecrecover, EIP-191, EIP-155, eth_personal_sign, keccak256 KAT, tamper detection).
Gap #7 RESOLVED: audit/test_fuzz_musig2_frost.cpp — 15 tests / 16 sub-checks
(MuSig2 key_agg / nonce_agg / partial_verify / partial_sig_agg, FROST keygen_finalize /
sign / verify_partial / aggregate, schnorr + ecdsa adaptor, boundary n_signers=0 → error).
ClusterFuzzLite expanded to 5 targets:
+ cpu/fuzz/fuzz_ecdsa.cpp (ECDSA sign→verify invariants, parse_compact_strict)
+ cpu/fuzz/fuzz_schnorr.cpp (BIP-340 sign→verify, adversarial from_bytes verify)
Gap #5/#6 PARTIALLY RESOLVED: OpenCL now wires zk_knowledge_verify_batch,
zk_dleq_verify_batch, bip324_aead_encrypt_batch, bip324_aead_decrypt_batch.
bulletproof_verify_batch: PARITY-EXCEPTION (no WNAF multi-scalar on OpenCL).
Metal: stubs documented with PARITY-EXCEPTION / TODO(parity) markers.
ccf8f4a97d