chore: bump version 0.8.3-shared-primitive-lift → 0.8.4-primitive-consumer-coverage

Patch bump (semver-compatible — refactor + tests + CI + docs only,
no behaviour or ABI changes) tagging the primitive-consumer
coverage milestone landed across sessions 60-78.

Three cross-cutting work streams in this milestone:

1. Shared primitives 7-10 added to mosaic-zk-primitives:
   - fr_horner_eval (s63) — polynomial Horner evaluation
   - verify_n_pair_pairing (s66) — N-pair generic pairing
   - powers_of (s72) — geometric sequence
   - fr_inner_product (s77) — dot product
   Plus their per-primitive proptest suites (5-6 properties each
   pinning the soundness invariant against a naive implementation).

2. Consumer migrations across 7 sites in mosaic-{hyperplonk,
   halo2, nova} replace inline weighted-sum / Horner / pairing /
   ν-powers patterns with shared-helper calls. After the
   migrations every BN254 polynomial-eval site, every BN254
   pairing site, every BN254 ν-powers site, and every BN254
   weighted-sum site in the workspace goes through one of the
   10 audit-grade shared primitives.

3. Audit infrastructure:
   - Session 61: CI workflows wire every sessions-47-59 bench +
     fuzz harness into GitHub Actions (PR + nightly matrices).
   - Session 70: docs/audit-coverage-runbook.md — entry point
     for external review firms with reproduce + extend recipes.
   - Session 71: AUDIT.md release entries for v0.8.2 + v0.8.3.
   - Session 75: 8th chunked-handlers integration test
     `commit_and_verify_dispatches_to_verifier` proves the
     post-finalize verifier hand-off works end-to-end.

CHANGELOG promoted [Unreleased] → [0.8.4-primitive-consumer-coverage]
release entry, with the per-session breakdowns + the 10-primitive
inventory + the 7-migration audit table preserved for external
auditors. README badge bumped.

Workspace lib + integration test totals at v0.8.4:

  mosaic-core              16
  mosaic-zk-primitives     84  (+15 since v0.8.2: horner+5, n-pair+4, powers+5, inner_product+5)
  mosaic-groth16           26
  mosaic-plonk             32
  mosaic-hyperplonk        82
  mosaic-halo2             75
  mosaic-nova              59
  mosaic-stark            117
  mosaic-serde             23
  mosaic-chunked           20
  mosaic-sdk               13
  mosaic-program            7  (+8 chunked_handlers integration tests)
  ─────────────────────  ───
  total                   554  (+10 lib, +1 integration since v0.8.2)

Author: kh0ra

CHANGELOG.md

@@ -7,6 +7,68 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Planned beyond v0.8.4-primitive-consumer-coverage
+
+- Fixture-driven differential testing for the four Phase-3 bodies
+  (Espresso HyperPlonk, PSE Halo2, sonobe Nova, Plonky3 STARK).
+  **Last named pre-audit gap on the Phase-3 verifier track.**
+- HyperPlonk full Zeromorph / PST / Gemini reduction (canonical
+  layout breaking change).
+- mosaic-nova::kzg::verify_spartan_batched_opening migration to
+  fr_inner_product (deferred from session 77; the explicit 5-term
+  unrolled chain is more legible inline at N=5 than the helper
+  call's collect-into-Vec dance).
+- External security audit commission.
+
+## [0.8.4-primitive-consumer-coverage] — 2026-04-28
+
+**Primitive consolidation reaches the production verifier surface.**
+Sessions 60-78 add 4 more shared primitives (7-10), migrate every
+remaining inline weighted-sum / Horner / pairing site in the
+workspace to the shared helpers, ship a runbook for external
+auditors, wire the v0.8.2 bench + fuzz harnesses into CI matrices,
+and add the 8th chunked-handlers integration test that proves the
+verifier dispatch path is reached end-to-end from the chunked
+upload protocol.
+
+| Surface | v0.8.3 | v0.8.4 |
+|---|---|---|
+| Shared primitives | 8 | **10** |
+| Consumer migrations using shared helpers | 0 explicit | 7 sites |
+| chunked-handlers integration tests | 7 | 8 |
+| Audit runbook | — | `docs/audit-coverage-runbook.md` |
+| CI matrix coverage | partial | full (PR + nightly) |
+
+The 4 new shared primitives:
+- `fr_horner_eval` (s63) — polynomial Horner evaluation
+- `verify_n_pair_pairing` (s66) — N-pair generic pairing
+- `powers_of` (s72) — geometric sequence
+- `fr_inner_product` (s77) — dot product
+
+Combined with the 6 from sessions 21-35
+(fr_from_be_bytes_reduced, fr_be_from_u64,
+derive_fr_challenge, verify_two_pair_pairing,
+commitment_minus_scalar_g1, compute_kzg_opening_lhs), the
+mosaic-zk-primitives crate now ships **10 audit-grade helpers**.
+
+The 7 consumer migrations (sessions 64, 65, 68, 72, 74×2, 77, 78×2):
+- mosaic-hyperplonk::sumcheck::eval_at → fr_horner_eval (s64)
+- mosaic-halo2::vanishing::compute_t_from_chunks → fr_horner_eval (s65)
+- mosaic-hyperplonk::kzg pairing → verify_two_pair_pairing (s68)
+- mosaic-hyperplonk::kzg ν-powers → powers_of (s72)
+- mosaic-halo2::kzg ν-powers → powers_of (s74)
+- mosaic-nova::kzg ν-powers → powers_of (s74)
+- mosaic-hyperplonk::kzg y-batched → fr_inner_product (s77)
+- mosaic-halo2::kzg y-batched (×2 sites) → fr_inner_product (s78)
+
+After the migrations every BN254 polynomial-eval site, every BN254
+pairing site, every BN254 ν-powers site, and every BN254 weighted-
+sum site in the workspace goes through one of the 10 audit-grade
+shared primitives.
+
+No on-chain ABI or behaviour changes — refactor + tests + CI
+infrastructure + docs only.
+
 ### Added — sessions 70-72 (post-v0.8.3)
 
 #### Session 70 — audit-coverage runbook
@@ -96,7 +158,9 @@ happy-path test (genuine Groth16 proof + VK uploaded via chunked
 flow); that's deferred to the fixture-driven differential testing
 item.
 
-### Planned beyond v0.8.3-shared-primitive-lift
+### (Planning block superseded by v0.8.4 release entry above.)
+
+#### v0.8.3 planning block (kept for historical reference)
 
 - Fixture-driven differential testing for the four Phase-3 bodies
   (Espresso HyperPlonk, PSE Halo2, sonobe Nova, Plonky3 STARK).

Cargo.lock

@@ -26,7 +26,7 @@ default-members = [
 ]
 
 [workspace.package]
-version = "0.8.3-shared-primitive-lift"
+version = "0.8.4-primitive-consumer-coverage"
 edition = "2021"
 rust-version = "1.85.0"
 license = "Apache-2.0 OR MIT"
@@ -40,18 +40,18 @@ categories = ["cryptography", "no-std"]
 
 [workspace.dependencies]
 # Workspace member crates
-mosaic-core = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-core", default-features = false }
-mosaic-zk-primitives = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-zk-primitives", default-features = false }
-mosaic-groth16 = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-groth16", default-features = false }
-mosaic-plonk = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-plonk", default-features = false }
-mosaic-hyperplonk = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-hyperplonk", default-features = false }
-mosaic-halo2 = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-halo2", default-features = false }
-mosaic-stark = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-stark", default-features = false }
-mosaic-nova = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-nova", default-features = false }
-mosaic-serde = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-serde", default-features = false }
-mosaic-chunked = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-chunked", default-features = false }
-mosaic-program = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-program" }
-mosaic-sdk = { version = "0.8.3-shared-primitive-lift", path = "crates/mosaic-sdk" }
+mosaic-core = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-core", default-features = false }
+mosaic-zk-primitives = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-zk-primitives", default-features = false }
+mosaic-groth16 = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-groth16", default-features = false }
+mosaic-plonk = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-plonk", default-features = false }
+mosaic-hyperplonk = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-hyperplonk", default-features = false }
+mosaic-halo2 = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-halo2", default-features = false }
+mosaic-stark = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-stark", default-features = false }
+mosaic-nova = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-nova", default-features = false }
+mosaic-serde = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-serde", default-features = false }
+mosaic-chunked = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-chunked", default-features = false }
+mosaic-program = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-program" }
+mosaic-sdk = { version = "0.8.4-primitive-consumer-coverage", path = "crates/mosaic-sdk" }
 
 # Solana — pinned to 2.x; Solana 3.0 CLI is backward-compatible with 2.x program SDK.
 # We deliberately avoid the unstable 3.x API surface during phase 1 to keep MSRV stable.

Cargo.toml

@@ -6,7 +6,7 @@
 [![CI](https://img.shields.io/github/actions/workflow/status/wienerlabs/mosaic/ci.yml?branch=main)](.github/workflows/ci.yml)
 [![License: Apache-2.0 OR MIT](https://img.shields.io/badge/license-Apache--2.0%20OR%20MIT-blue.svg)](LICENSE-APACHE)
 [![MSRV: 1.85.0](https://img.shields.io/badge/MSRV-1.85.0-orange.svg)](rust-toolchain.toml)
-[![Release: v0.8.3-shared-primitive-lift](https://img.shields.io/badge/release-v0.8.3--shared--primitive--lift-green.svg)](https://github.com/wienerlabs/mosaic/releases/tag/v0.8.3-shared-primitive-lift)
+[![Release: v0.8.4-primitive-consumer-coverage](https://img.shields.io/badge/release-v0.8.4--primitive--consumer--coverage-green.svg)](https://github.com/wienerlabs/mosaic/releases/tag/v0.8.4-primitive-consumer-coverage)
 [![Audit: ready for review](https://img.shields.io/badge/audit-ready%20for%20review-yellow.svg)](AUDIT.md)
 
 The Solana ecosystem has exactly one production-grade ZK verifier today