Checkpoint the party/runtime stack before share-program and malicious-mode work.

Ship the TLS mesh, composer, Beaver/Yao/leaf MPC, prep/online paths, apps, and docs so the tree is pushable before elevating share_expr, security_mode, and prep resume.

Co-authored-by: Cursor <cursoragent@cursor.com>

include/dpf/wildcard.hpp

@@ -36,6 +36,13 @@ namespace dpf
 
 /// @brief represents a placeholder value of a given type, with a concrete value to be assigned later
 /// @tparam T the underlying type
+/// @note As an output, `eval` throws until the leaf is assigned. As an input,
+///       `make_dpf` plants a random mask in `offset_x`; parties open
+///       `mask - alpha` and eval before that throws. `float` and `double`
+///       wildcards combine by bitwise XOR, not IEEE addition.
+/// @see dpf::offset_wrapper
+/// @see dpf::leaf_wrapper
+/// @see dpf::wildcards
 template <typename T>
 struct wildcard_value
 {
@@ -119,6 +126,11 @@ template <typename T> constexpr auto concrete_value_v = concrete_value<T>{};
 
 namespace wildcards
 {
+/// @name Named placeholders
+/// @{
+
+/// @brief Empty `wildcard_value` for the named type. `ieee_float` and `ieee_double` use bitwise XOR, not IEEE addition.
+/// @see dpf::wildcard_value
     using bit_t = wildcard_value<dpf::bit>;
     static constexpr auto bit = wildcard<dpf::bit>;
 
@@ -212,6 +224,8 @@ HEDLEY_PRAGMA(GCC diagnostic pop)
     /// @brief Placeholder for a `double` whose leaf group is bitwise XOR.
     static constexpr auto ieee_double = wildcard<double>;
 
+/// @}
+
 }  // namespace wildcards
 
 template <std::size_t I,