C7 relation-screen report for c7_standard_toy_noisy
mode=standard block_size=3 basis_size=None relation_screen_weight=3
public entries=18 public CLPN rows=1746
row-difference samples=83808 eta2=0.000999708
sampled relation screen passed=True
minimum finite screen bits=8.936637939002571
verdict=research-only-parameters

C7 key estimate:
  params: c7_standard_toy_noisy
  q: 7
  N: 18
  block_size: 3
  num_blocks: 6
  mode: coordinate
  public_entries: 18
  public_clpn_rows: 1746
  public_field_elements_dense: 43650
  preferred_terms_bound: 18
  dense_fallback_terms_bound: 18
  eta_preferred_bound: 0.008955513530131512
  eta_dense_fallback_bound: 0.008955513530131512
  repetition_failure_bound_preferred: 4.836046463475252e-21
  repetition_failure_bound_dense_fallback: 4.836046463475252e-21
  relation_screen_weight: 3
  relation_note: coordinate blocks are linearly independent; no within-block kernel relations
  security_status: main research default

LPN screens:
  - C7_expansion_key_sparse_LPN_rows: n=17 samples=324 eta=0.0005 min_bits=8.936637939002571 passes=False
      warning: public/evaluation key exposes at least as many samples as the secret dimension
      warning: very small sparse row weight; use only for tests unless justified by a proof/estimator
      warning: q-ary block-BKW screen below 128 bits
  - C7_CLPN_row_differences: n=24 samples=83808 eta=0.000999708333333452 min_bits=11.422064766172813 passes=False
      warning: public/evaluation key exposes at least as many samples as the secret dimension
      warning: very large public sample-to-dimension ratio; multi-sample LPN attacks require specialist review
      warning: q-ary block-BKW screen below 128 bits

Blockers / notes:
  - C7_expansion_key_sparse_LPN_rows below target: 8.94 bits
  - C7_expansion_key_sparse_LPN_rows: public/evaluation key exposes at least as many samples as the secret dimension
  - C7_expansion_key_sparse_LPN_rows: q-ary block-BKW screen below 128 bits
  - C7_CLPN_row_differences below target: 11.42 bits
  - C7_CLPN_row_differences: public/evaluation key exposes at least as many samples as the secret dimension
  - C7_CLPN_row_differences: very large public sample-to-dimension ratio; multi-sample LPN attacks require specialist review
  - C7_CLPN_row_differences: q-ary block-BKW screen below 128 bits

C7 removes the full projective dictionary as the main candidate. The standard-basis mode has no intra-block public mask relations and is the conservative ready baseline. screened_random is experimental and must pass relation screens before being used in claims. This estimator is a screening tool, not a cryptanalytic proof.
