Checkpoint the party/runtime stack before share-program and malicious-mode work.

Ship the TLS mesh, composer, Beaver/Yao/leaf MPC, prep/online paths, apps, and docs so the tree is pushable before elevating share_expr, security_mode, and prep resume.

Co-authored-by: Cursor <cursoragent@cursor.com>

include/grotto/gadgets/elementary/approx.hpp

@@ -23,10 +23,21 @@ namespace gadgets
 static constexpr double approx_default_target = 0;
 static constexpr unsigned approx_default_ULPs = 1;
 
+/// @brief Cleartext `approx`.
+/// @see grotto::make_threshold_lut
+/// @tparam ULPs functor parameter (a `double` bound or scale)
+/// @tparam target functor parameter (a `double` bound or scale)
+/// @note Straight-line cleartext. Fixed-point evaluation is the symbol in `@see` when that symbol is a LUT or an `eval_*` function.
+/// \complexity One evaluation of `operator()` as written in this header. There is no domain scan and no loop. `Θ(1)` time and extra space relative to that expression.
 template <double const & target  = approx_default_target,
           unsigned const & ULPs = approx_default_ULPs>
 struct approx
 {
+    /// @brief Evaluate the cleartext map.
+    /// @tparam T argument and result type
+    /// @param x the input
+    /// @return the cleartext image of `x`
+    /// \complexity The body is straight-line. `Θ(1)` time and extra space.
     template <typename T>
     T operator()(T x) { return std::abs(x - target) <= ULPs * ulp_of(target) ? 1 : 0; }
 };