Profile exact dynamic-programming work

[omar07ibrahim]

Summary

This stacked change makes dynamic-programming complexity observable without turning hardware timing into a claim.

• instruments the real PasswordSpace construction under six fixed public policies
• counts exact product vectors, materialized DP cells, and _consume transitions
• retains selected cProfile call counts while discarding all timing fields
• checks layer occupancy and the final arbitrary-precision count with independent oracles
• proves the production budget rejects the sixth case before enumeration
• publishes a canonical JSON receipt, a real CLI transcript/PNG, and two accessible SVG diagrams

Commit progression

1. 6842796 — Add deterministic DP work profiling
2. 09b346c — Publish differential DP complexity evidence

Evidence

• 5 new generated outputs; 23 generated artifacts total
• balanced L=24: 31,213 occupied cells and 124,848 transitions
• skewed L=24 with the same class widths and total minimum: 2,288 cells and 9,148 transitions
• near-budget eight-class case: 164,025 / 216,513 cells and 1,312,192 / 1,732,104 transitions
• rejected eight-class case: 2,162,688-cell and 17,301,504-transition bounds, with zero product/build/consume work
• maximum one-class case exercises a 1,678-bit exact count
• two consecutive full captures were byte-identical across all 23 artifacts plus the canonical manifest

Verification

• make PYTHON=.venv/bin/python check
• 300 tests passed
• 100% production line and branch coverage
• Ruff, format check, strict mypy, and pip check passed
• wheel/sdist reproducibility and installed smoke attestation passed
• evidence verifier byte-rebuilds JSON/text, both SVGs, and the CLI PNG
• independent code and documentation audits: GO

Claim boundaries

No elapsed-time, throughput, RSS, allocation, CPU, hardware, password-strength, cross-machine performance, entropy-consumption, or generated-candidate claim is made. Production/package inputs, the existing distribution attestation artifacts, and licensing are unchanged.