Exact first-phase execution factors and source envelopes #
The actual prefix, matched extraction, advice construction, and final matched extraction have an exact alternating transcript over the original left and right states. All kernels are normalized, including null rows. The XOR equations connect the executed masked program to the side-local maps used in that transcript.
The original left envelope pays for all first extraction outputs. The original right envelope pays for all initial seed-and-mask messages and all advice outputs. Opposite-side observations preserve envelope totals. These are exact execution and counting laws, with no statistical premise or conclusion about the component programs.
The message order follows Chattopadhyay--Liao, Extractors for Sum of Two Sources (2021), first phase of Theorem 6.1, printed p.23, using the observation rule of Lemma 3.25, printed p.15: https://arxiv.org/abs/2110.12652.
The actual first extractor splits a masked input into its two XOR contributions.
Fixing the first right message makes every actual first output left-only.
Fixing all first outputs makes every actual advice output right-only.
The actual final output is the XOR of its original-left and mask contributions.
The first right observation has a normalized transcript and normalized right rows.
The first two observations have normalized transcript and original-state kernels.
All three actual observations have normalized transcript and original-state kernels.
The first observed law is exactly the original law with its right message retained.
Both first observations preserve the actual joint law of the original latent states.
The complete actual first-phase transcript has the displayed exact factorization.
The first right message scales the original-left envelope by its message probability.
The original-right source pays for the first right message by copying its envelope.
The original-left source pays for the family of first extraction outputs.
Observing the first extraction outputs preserves the right-source envelope total.
The complete transcript preserves the displayed original-left source bound.
The complete transcript preserves the displayed original-right source bound.
A normalized right kernel preserves the first original-left envelope total.
The left-envelope total pays exactly the number of first output families.
The right-envelope total after two stages pays exactly the first right-message size.
The final left-envelope total pays only the first output-family alphabet.
The final right-envelope total pays both right-message alphabets.
Nonnegative original-left envelopes remain nonnegative after the first two stages.
Nonnegative original-right envelopes remain nonnegative after the first two stages.
The final original-left envelope is nonnegative, including null transcript rows.
The final original-right envelope is nonnegative, including null transcript rows.
There are exactly this many families of honest and tampered Boolean words.
The first right message contains all seed prefixes and all mask outputs.