================================================================================
Preset: c2_toy_noisy q=7 n=16 n_c=24 m_c=97
Depth=1 additions=1 C3 block size=2
Dictionary entries: 390
Public CLPN samples: 37830
Worst-case compaction terms: 9
Compaction aggregate noise: 0.00448951
Compaction failure bound: 5.72559e-06
Final replicated failure bound: 0.00481455
Storage model:
  dense C2 field entries: 945750
  seeded C3 field-entry equivalent: 73393.726
  storage reduction factor: 12.886x

Attack surface: expansion
  samples=289 ratio=18.0625 expected_errors=0.1445
  conservative min bits=8.78463484555752 passes=False
  q-ary BKW bits=8.78463484555752 block=2 levels=8 finite=True
  Warnings:
    - public/evaluation key exposes at least as many samples as the secret dimension
    - very small sparse row weight; use only for tests unless justified by a proof/estimator
    - q-ary block-BKW screen below 128 bits

Attack surface: seeded_dictionary_compaction
  samples=37830 ratio=1576.25 expected_errors=18.915
  conservative min bits=10.596609998809749 passes=False
  q-ary BKW bits=10.596609998809749 block=2 levels=12 finite=True
  Warnings:
    - public/evaluation key exposes at least as many samples as the secret dimension
    - very large public sample-to-dimension ratio; multi-sample LPN attacks require specialist review
    - q-ary block-BKW screen below 128 bits

Overall warnings:
  - toy preset: algebraic validation only, not a security parameter set
  - q-ary/sparse-LPN screen does not meet the target; parameters remain research-only
research-only screening; requires external sparse/q-ary-LPN cryptanalysis before any security claim
================================================================================
Preset: c2_design_smallq q=7 n=512 n_c=512 m_c=4096
Depth=2 additions=1 C3 block size=3
Dictionary entries: 58482
Public CLPN samples: 239542272
Worst-case compaction terms: 171
Compaction aggregate noise: 0.0103741
Compaction failure bound: 8.87147e-221
Final replicated failure bound: 3.53684e-06
Storage model:
  dense C2 field entries: 122885185536
  seeded C3 field-entry equivalent: 244875189.431
  storage reduction factor: 501.828x

Attack surface: expansion
  samples=263169 ratio=514.002 expected_errors=4.01564
  conservative min bits=27.011271140999146 passes=False
  q-ary BKW bits=77.38354539627647 block=26 levels=20 finite=False
  Warnings:
    - public/evaluation key exposes at least as many samples as the secret dimension
    - very small sparse row weight; use only for tests unless justified by a proof/estimator
    - q-ary block-BKW screen is sample-limited on this fixed public surface

Attack surface: seeded_dictionary_compaction
  samples=239542272 ratio=467856 expected_errors=14620.5
  conservative min bits=27.045085595944972 passes=False
  q-ary BKW bits=85.66122025311411 block=29 levels=18 finite=False
  Warnings:
    - public/evaluation key exposes at least as many samples as the secret dimension
    - very large public sample-to-dimension ratio; multi-sample LPN attacks require specialist review
    - q-ary block-BKW screen is sample-limited on this fixed public surface

Overall warnings:
  - C2 public CLPN sample surface is extremely large; attack analysis must account for it
  - seeded storage reduces bytes but not the very large public LPN sample surface
  - q-ary/sparse-LPN screen does not meet the target; parameters remain research-only
research-only screening; requires external sparse/q-ary-LPN cryptanalysis before any security claim
