Wycheproof

1. Boundary+source

1. DEFINE primitive, public operation, params, encodings, sizes, implementation version; test caller API including parsers.
2. Distinguish encrypt/decrypt, sign/verify, keygen/key-validation, encaps/decaps.
3. PIN full C2SP/wycheproof commit via submodule/vendor/versioned package; no default branch in CI.
4. Current=testvectors_v1/; v0 tag only explicit legacy.
5. RECORD commit, vectors, schemas, update mechanism.
6. READ references/integration.md before selection/vendor work.

2. Validate corpus