pub fn conjectured_commit_phase_error(
regime: &FriRegime,
shape: &InstanceShape,
) -> Option<ErrorBits>Expand description
FRI commit-phase per-round error in the conjectured regime.
Identical to commit_phase_error_udr, and deliberately so: the bound
counts the folding challenges that are exceptional for a given committed
word, and that count does not depend on the decoding regime. What the
random-words conjecture buys is the removal of the list-size multiplier
L⁺ that the Johnson-bound analysis pays (see
crate::stark::conjectured_security_report) — it does not assert that a
bad folding challenge cannot exist. Dropping the round entirely, as an
LDT-only conjectured number does, therefore overstates security for a large
LDE domain over a small field.
Returns None when no fold occurs, in which case there is no such round.