Checkpoint the party/runtime stack before share-program and malicious-mode work.

Ship the TLS mesh, composer, Beaver/Yao/leaf MPC, prep/online paths, apps, and docs so the tree is pushable before elevating share_expr, security_mode, and prep resume.

Co-authored-by: Cursor <cursoragent@cursor.com>

include/dpf/bit.hpp

@@ -15,7 +15,7 @@
 /// @author Ryan Henry <ryan.henry@ucalgary.ca>
 /// @copyright Copyright (c) 2019-2024 Ryan Henry and [others](@ref authors)
 /// @license Released under a GNU General Public v2.0 (GPLv2) license;
-///          see [LICENSE.md](@ref license) for details.
+///          see LICENSE.md for details.
 
 #ifndef LIBDPF_INCLUDE_DPF_BIT_HPP__
 #define LIBDPF_INCLUDE_DPF_BIT_HPP__
@@ -38,6 +38,14 @@ namespace dpf
 {
 
 /// @brief binary type whose representation can be packed into one bit
+/// @note Not a DPF domain. `msb_of<dpf::bit>` does not compile. A 1-bit
+///       index is `dpf::modint<1>` or `dpf::xint<1>`. Leaf `+` and `-` are
+///       XOR. Lanes pack low-bit first.
+/// @see dpf::twobit
+/// @see dpf::nyble
+/// @see dpf::modint
+/// @see dpf::xint
+/// @see output_types
 enum bit : bool
 {
     zero = false,  ///< `0`, `false`, "unset", "off"
@@ -225,6 +233,10 @@ struct bitlength_of_output<dpf::bit, NodeT>
 template <>
 struct is_packed_subbyte<dpf::bit> : std::true_type {};
 
+/// @brief Packed bits add by XOR (`bit::one + bit::one == bit::zero`).
+template <>
+struct has_characteristic_two<dpf::bit> : std::true_type {};
+
 template <>
 struct packed_lane_bits<dpf::bit>
   : public std::integral_constant<std::size_t, 1> {};