warning: unused doc comment
   --> src/fhe/arena.rs:272:1
    |
272 | /// Thread-local arena for lock-free allocation
    | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ rustdoc does not generate documentation for macro invocations
    |
    = help: to document an item produced by a macro, the macro must produce the documentation as part of its expansion
    = note: `#[warn(unused_doc_comments)]` (part of `#[warn(unused)]`) on by default

warning: unused import: `std::sync::Arc`
  --> src/fhe/arena.rs:14:5
   |
14 | use std::sync::Arc;
   |     ^^^^^^^^^^^^^^
   |
   = note: `#[warn(unused_imports)]` (part of `#[warn(unused)]`) on by default

warning: unused imports: `butterfly_ct_scalar` and `butterfly_gs_scalar`
  --> src/fhe/butterfly_neon.rs:19:24
   |
19 | use super::butterfly::{butterfly_ct_scalar, butterfly_gs_scalar, reduce_lazy};
   |                        ^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^

warning: unused imports: `compute_q_inv_neg32` and `compute_r2_mod_q32`
  --> src/fhe/ntt32.rs:13:5
   |
13 |     compute_q_inv_neg32, compute_r2_mod_q32,
   |     ^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^

warning: unused import: `super::params::BfvParameters`
  --> src/fhe/bfv32.rs:15:5
   |
15 | use super::params::BfvParameters;
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `super::FheMode`
  --> src/fhe/bfv32.rs:16:5
   |
16 | use super::FheMode;
   |     ^^^^^^^^^^^^^^

warning: unused import: `CommitmentSchemeType`
  --> src/zkp/plonk/biometric.rs:43:43
   |
43 | use super::commitment::{CommitmentScheme, CommitmentSchemeType, Polynomial, PolynomialCommitment, ProverKey, VerifierKey};
   |                                           ^^^^^^^^^^^^^^^^^^^^

warning: unused import: `SCALE_FACTOR`
  --> src/zkp/plonk/biometric.rs:45:74
   |
45 | use crate::zkp::circuits::biometric_distance::{BiometricDistanceCircuit, SCALE_FACTOR};
   |                                                                          ^^^^^^^^^^^^

warning: unused import: `PreparedVerifyingKey`
  --> src/zkp/plonk/biometric.rs:48:17
   |
48 |     Parameters, PreparedVerifyingKey, Proof,
   |                 ^^^^^^^^^^^^^^^^^^^^

warning: unnecessary parentheses around block return value
   --> src/zkp/plonk/biometric.rs:203:17
    |
203 |                 (u64::MAX - (-scaled as u64) + 1)
    |                 ^                               ^
    |
    = note: `#[warn(unused_parens)]` (part of `#[warn(unused)]`) on by default
help: remove these parentheses
    |
203 -                 (u64::MAX - (-scaled as u64) + 1)
203 +                 u64::MAX - (-scaled as u64) + 1
    |

warning: unused import: `rand::Rng`
    --> src/zkp/plonk/biometric.rs:1135:5
     |
1135 | use rand::Rng;
     |     ^^^^^^^^^

warning: unused import: `PlonkError`
 --> src/zkp/plonk/commitment.rs:6:13
  |
6 | use super::{PlonkError, Result};
  |             ^^^^^^^^^^

warning: unused import: `Sha3_256`
  --> src/zkp/plonk/kzg.rs:25:20
   |
25 | use sha3::{Digest, Sha3_256};
   |                    ^^^^^^^^

warning: unused import: `Zeroize`
  --> src/pqc/dilithium.rs:36:15
   |
36 | use zeroize::{Zeroize, Zeroizing};
   |               ^^^^^^^

warning: unused import: `super::*`
   --> src/pqc/hybrid.rs:149:9
    |
149 |     use super::*;
    |         ^^^^^^^^

warning: unused import: `Aead`
  --> src/pqc/transport.rs:34:12
   |
34 |     aead::{Aead, KeyInit, generic_array::GenericArray},
   |            ^^^^

warning: unused import: `subtle::ConstantTimeEq`
  --> src/pqc/transport.rs:37:5
   |
37 | use subtle::ConstantTimeEq;
   |     ^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `SessionResponder`
  --> src/pqc/mpc_channel.rs:23:51
   |
23 |     SessionKeys, SessionConfig, SessionInitiator, SessionResponder,
   |                                                   ^^^^^^^^^^^^^^^^

warning: unused import: `std::sync::Arc`
  --> src/pqc/mpc_channel.rs:32:5
   |
32 | use std::sync::Arc;
   |     ^^^^^^^^^^^^^^

warning: unused import: `super::hd_keys::HdMasterKey`
   --> src/pqc/shamir.rs:453:5
    |
453 | use super::hd_keys::HdMasterKey;
    |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `PublicKey as DilithiumPublicKey`
  --> src/pqc/rotation.rs:35:52
   |
35 |     dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey},
   |                                                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Duration`
  --> src/pqc/rotation.rs:42:41
   |
42 | use std::time::{SystemTime, UNIX_EPOCH, Duration};
   |                                         ^^^^^^^^

warning: unused imports: `ZeroizeOnDrop` and `Zeroize`
  --> src/pqc/rotation.rs:43:15
   |
43 | use zeroize::{Zeroize, ZeroizeOnDrop};
   |               ^^^^^^^  ^^^^^^^^^^^^^

warning: unused import: `self`
  --> src/pqc/zkcompat.rs:36:13
   |
36 |     kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey},
   |             ^^^^

warning: unused import: `self`
  --> src/pqc/timelock.rs:33:13
   |
33 |     kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey},
   |             ^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/timelock.rs:36:22
   |
36 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused imports: `SecretKey as DilithiumSecretKey` and `Signature as DilithiumSignature`
  --> src/pqc/blind.rs:39:5
   |
39 |     SecretKey as DilithiumSecretKey, Signature as DilithiumSignature,
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `self`
  --> src/pqc/kdf.rs:31:25
   |
31 | use crate::pqc::kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey};
   |                         ^^^^

warning: unused imports: `PasswordHasher`, `PasswordVerifier`, and `SaltString`
  --> src/pqc/kdf.rs:39:21
   |
39 |     password_hash::{PasswordHasher, SaltString, PasswordVerifier},
   |                     ^^^^^^^^^^^^^^  ^^^^^^^^^^  ^^^^^^^^^^^^^^^^

warning: unused imports: `DerivedKey` and `hybrid`
  --> src/pqc/enclave.rs:37:5
   |
37 |     hybrid,
   |     ^^^^^^
38 |     kdf::{Hkdf, DomainSeparator, DerivedKey},
   |                                  ^^^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/enclave.rs:40:22
   |
40 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `Duration`
  --> src/pqc/pki.rs:11:41
   |
11 | use std::time::{SystemTime, UNIX_EPOCH, Duration};
   |                                         ^^^^^^^^

warning: unused import: `self`
  --> src/pqc/pki.rs:20:20
   |
20 | use super::kyber::{self, PublicKey as KyberPublicKey};
   |                    ^^^^

warning: unused import: `Signature as DilithiumSignature`
  --> src/pqc/mpc.rs:17:59
   |
17 | use super::dilithium::{self, KeyPair as DilithiumKeyPair, Signature as DilithiumSignature};
   |                                                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `self`
  --> src/pqc/backup.rs:17:20
   |
17 | use super::kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey};
   |                    ^^^^

warning: unused import: `ZeroizeOnDrop`
  --> src/pqc/ratchet.rs:14:24
   |
14 | use zeroize::{Zeroize, ZeroizeOnDrop};
   |                        ^^^^^^^^^^^^^

warning: unused imports: `Aead`, `Aes256Gcm`, `Key`, and `Nonce`
  --> src/pqc/credentials.rs:14:15
   |
14 | use aes_gcm::{Aes256Gcm, Key, Nonce, aead::{Aead, KeyInit}};
   |               ^^^^^^^^^  ^^^  ^^^^^         ^^^^

warning: unused imports: `PrivateKey as KyberPrivateKey`, `PublicKey as KyberPublicKey`, and `self`
  --> src/pqc/credentials.rs:16:20
   |
16 | use super::kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey};
   |                    ^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `KeyPair as DilithiumKeyPair`
  --> src/pqc/threshold.rs:36:30
   |
36 | use super::dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey};
   |                              ^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Duration`
  --> src/pqc/state_machine.rs:10:41
   |
10 | use std::time::{SystemTime, UNIX_EPOCH, Duration};
   |                                         ^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/state_machine.rs:12:22
   |
12 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `SecretKey as DilithiumSecretKey`
  --> src/pqc/ring_sig.rs:21:92
   |
21 | use super::dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey, SecretKey as DilithiumSecretKey};
   |                                                                                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `std::collections::HashMap`
  --> src/pqc/noise.rs:14:5
   |
14 | use std::collections::HashMap;
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `AeadCore`
  --> src/pqc/noise.rs:16:51
   |
16 | use aes_gcm::{Aes256Gcm, Key, Nonce, aead::{Aead, AeadCore}, KeyInit};
   |                                                   ^^^^^^^^

warning: unused import: `Ciphertext as KyberCiphertext`
  --> src/pqc/noise.rs:21:86
   |
21 | use super::kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey, Ciphertext as KyberCiphertext};
   |                                                                                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/secure_msg.rs:18:22
   |
18 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/routing.rs:17:22
   |
17 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `std::collections::HashMap`
  --> src/pqc/lattice_zk.rs:14:5
   |
14 | use std::collections::HashMap;
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/lattice_zk.rs:15:22
   |
15 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused imports: `KeyPair as DilithiumKeyPair`, `PublicKey as DilithiumPublicKey`, and `self`
  --> src/pqc/lattice_zk.rs:21:24
   |
21 | use super::dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey};
   |                        ^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unnecessary parentheses around block return value
   --> src/pqc/lattice_zk.rs:147:17
    |
147 |                 ((sum as f64 * sigma / 2.0).round() as i64)
    |                 ^                                         ^
    |
help: remove these parentheses
    |
147 -                 ((sum as f64 * sigma / 2.0).round() as i64)
147 +                 (sum as f64 * sigma / 2.0).round() as i64
    |

warning: unused import: `Sha3_512`
  --> src/pqc/pq_tls.rs:17:22
   |
17 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `rand::Rng`
  --> src/pqc/pq_tls.rs:19:5
   |
19 | use rand::Rng;
   |     ^^^^^^^^^

warning: variant `TLS_KYBER768_DILITHIUM3_AES256_SHA3` should have an upper camel case name
   --> src/pqc/pq_tls.rs:121:5
    |
121 |     TLS_KYBER768_DILITHIUM3_AES256_SHA3,
    |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: convert the identifier to upper camel case: `TlsKyber768Dilithium3Aes256Sha3`
    |
    = note: `#[warn(non_camel_case_types)]` (part of `#[warn(nonstandard_style)]`) on by default

warning: variant `TLS_HYBRID_KYBER768_DILITHIUM3_AES256` should have an upper camel case name
   --> src/pqc/pq_tls.rs:123:5
    |
123 |     TLS_HYBRID_KYBER768_DILITHIUM3_AES256,
    |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: convert the identifier to upper camel case: `TlsHybridKyber768Dilithium3Aes256`

warning: variant `TLS_KYBER768_ECDSA_AES256_SHA3` should have an upper camel case name
   --> src/pqc/pq_tls.rs:125:5
    |
125 |     TLS_KYBER768_ECDSA_AES256_SHA3,
    |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: convert the identifier to upper camel case: `TlsKyber768EcdsaAes256Sha3`

warning: unused import: `std::collections::HashMap`
  --> src/pqc/qkd.rs:16:5
   |
16 | use std::collections::HashMap;
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `rand::Rng`
  --> src/pqc/qkd.rs:18:5
   |
18 | use rand::Rng;
   |     ^^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/bridge.rs:18:22
   |
18 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/contract.rs:17:22
   |
17 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/tee.rs:16:22
   |
16 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `RngCore`
  --> src/pqc/tee.rs:18:17
   |
18 | use rand::{Rng, RngCore};
   |                 ^^^^^^^

warning: unused imports: `Arc`, `Mutex`, and `RwLock`
  --> src/pqc/hsm.rs:15:17
   |
15 | use std::sync::{Arc, Mutex, RwLock};
   |                 ^^^  ^^^^^  ^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/hsm.rs:17:22
   |
17 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused imports: `Aes256Gcm`, `Key`, and `Nonce`
  --> src/pqc/hsm.rs:18:15
   |
18 | use aes_gcm::{Aes256Gcm, Key, Nonce, aead::Aead, KeyInit};
   |               ^^^^^^^^^  ^^^  ^^^^^

warning: unused import: `RngCore`
  --> src/pqc/hsm.rs:19:17
   |
19 | use rand::{Rng, RngCore};
   |                 ^^^^^^^

warning: unused imports: `ZeroizeOnDrop` and `Zeroize`
  --> src/pqc/hsm.rs:23:15
   |
23 | use zeroize::{Zeroize, ZeroizeOnDrop};
   |               ^^^^^^^  ^^^^^^^^^^^^^

warning: unused import: `KeyPair as DilithiumKeyPair`
  --> src/pqc/hsm.rs:27:30
   |
27 | use super::dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey};
   |                              ^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Duration`
  --> src/pqc/oauth.rs:12:17
   |
12 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `zeroize::Zeroizing`
  --> src/pqc/oauth.rs:16:5
   |
16 | use zeroize::Zeroizing;
   |     ^^^^^^^^^^^^^^^^^^

warning: unused import: `RngCore`
  --> src/pqc/oauth.rs:18:17
   |
18 | use rand::{Rng, RngCore};
   |                 ^^^^^^^

warning: unused imports: `PrivateKey as KyberPrivateKey` and `self`
  --> src/pqc/oauth.rs:25:13
   |
25 |     kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey},
   |             ^^^^                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused imports: `Arc` and `RwLock`
  --> src/pqc/dkg_v2.rs:11:17
   |
11 | use std::sync::{Arc, RwLock};
   |                 ^^^  ^^^^^^

warning: unused imports: `Duration`, `SystemTime`, and `UNIX_EPOCH`
  --> src/pqc/dkg_v2.rs:12:17
   |
12 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^  ^^^^^^^^^^  ^^^^^^^^^^

warning: unused import: `Zeroize`
  --> src/pqc/dkg_v2.rs:18:15
   |
18 | use zeroize::{Zeroize, Zeroizing};
   |               ^^^^^^^

warning: unused import: `RngCore`
  --> src/pqc/dkg_v2.rs:19:17
   |
19 | use rand::{Rng, RngCore};
   |                 ^^^^^^^

warning: unused import: `Duration`
  --> src/pqc/opaque.rs:12:17
   |
12 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `Zeroize`
  --> src/pqc/opaque.rs:16:15
   |
16 | use zeroize::{Zeroize, Zeroizing};
   |               ^^^^^^^

warning: unused import: `RngCore`
  --> src/pqc/opaque.rs:17:17
   |
17 | use rand::{Rng, RngCore};
   |                 ^^^^^^^

warning: unused import: `Signature`
  --> src/pqc/opaque.rs:21:85
   |
21 |     dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey, Signature},
   |                                                                                     ^^^^^^^^^

warning: unused imports: `Arc` and `RwLock`
  --> src/pqc/key_transparency.rs:11:17
   |
11 | use std::sync::{Arc, RwLock};
   |                 ^^^  ^^^^^^

warning: unused import: `Rng`
  --> src/pqc/secure_agg.rs:18:12
   |
18 | use rand::{Rng, RngCore};
   |            ^^^

warning: unused import: `Duration`
  --> src/pqc/aml.rs:47:17
   |
47 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused imports: `DomainSeparator`, `Hkdf`, `HsmProvider`, `KeyPair as DilithiumKeyPair`, `ObjectHandle`, `PrivateKey as KyberPrivateKey`, `PublicKey as DilithiumPublicKey`, `PublicKey as KyberPublicKey`, `Share`, and `UserType`
  --> src/pqc/ceremony.rs:49:23
   |
49 |     dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey},
   |                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
50 |     kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey},
   |                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
51 |     shamir::{ShamirSharer, Share},
   |                            ^^^^^
52 |     kdf::{Hkdf, DomainSeparator},
   |           ^^^^  ^^^^^^^^^^^^^^^
53 |     hsm::{HsmProvider, SessionHandle, ObjectHandle, UserType},
   |           ^^^^^^^^^^^                 ^^^^^^^^^^^^  ^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/ceremony.rs:55:22
   |
55 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                      ^^^^^^^^

warning: unused import: `BTreeMap`
  --> src/pqc/ceremony.rs:57:33
   |
57 | use std::collections::{HashMap, BTreeMap};
   |                                 ^^^^^^^^

warning: unused imports: `Arc`, `Mutex`, and `RwLock`
  --> src/pqc/ceremony.rs:59:17
   |
59 | use std::sync::{Arc, Mutex, RwLock};
   |                 ^^^  ^^^^^  ^^^^^^

warning: unused import: `subtle::ConstantTimeEq`
  --> src/pqc/ceremony.rs:62:5
   |
62 | use subtle::ConstantTimeEq;
   |     ^^^^^^^^^^^^^^^^^^^^^^

warning: unused imports: `AuditEntry as HsmAuditEntry`, `CeremonyEvent`, `CeremonyReport`, `DomainSeparator`, `Hkdf`, `HsmProvider`, and `PublicKey as DilithiumPublicKey`
  --> src/pqc/compliance.rs:37:52
   |
37 |     dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey},
   |                                                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
38 |     kdf::{Hkdf, DomainSeparator},
   |           ^^^^  ^^^^^^^^^^^^^^^
39 |     hsm::{HsmProvider, AuditEntry as HsmAuditEntry},
   |           ^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^
40 |     ceremony::{CeremonyReport, CeremonyEvent},
   |                ^^^^^^^^^^^^^^  ^^^^^^^^^^^^^

warning: unused imports: `Sha3_256` and `Sha3_512`
  --> src/pqc/compliance.rs:42:12
   |
42 | use sha3::{Sha3_256, Sha3_512, Digest};
   |            ^^^^^^^^  ^^^^^^^^

warning: unused imports: `BTreeMap` and `HashSet`
  --> src/pqc/compliance.rs:44:33
   |
44 | use std::collections::{HashMap, BTreeMap, HashSet};
   |                                 ^^^^^^^^  ^^^^^^^

warning: unused imports: `Arc` and `Mutex`
  --> src/pqc/compliance.rs:46:17
   |
46 | use std::sync::{Arc, Mutex};
   |                 ^^^  ^^^^^

warning: unused import: `Duration`
  --> src/pqc/compliance.rs:47:41
   |
47 | use std::time::{SystemTime, UNIX_EPOCH, Duration};
   |                                         ^^^^^^^^

warning: unused imports: `DomainSeparator` and `Hkdf`
  --> src/pqc/rate_limit.rs:42:11
   |
42 |     kdf::{Hkdf, DomainSeparator},
   |           ^^^^  ^^^^^^^^^^^^^^^

warning: unused import: `Sha3_256`
  --> src/pqc/rate_limit.rs:44:12
   |
44 | use sha3::{Sha3_256, Digest};
   |            ^^^^^^^^

warning: unused imports: `DilithiumKeyPair`, `DilithiumPublicKey`, `DilithiumSignature`, `KyberCiphertext`, `KyberPrivateKey`, and `KyberPublicKey`
  --> src/pqc/grpc.rs:21:5
   |
21 |     DilithiumKeyPair, DilithiumPublicKey, DilithiumSignature,
   |     ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^
22 |     KyberPublicKey, KyberPrivateKey, KyberCiphertext,
   |     ^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^

warning: unused import: `Duration`
  --> src/pqc/telemetry.rs:17:17
   |
17 | use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/disaster_recovery.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `Duration`
  --> src/pqc/disaster_recovery.rs:15:17
   |
15 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/key_escrow.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `Arc`
  --> src/pqc/forensic.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `HashSet`
  --> src/pqc/multi_tenant.rs:12:33
   |
12 | use std::collections::{HashMap, HashSet};
   |                                 ^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/multi_tenant.rs:13:17
   |
13 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `KeyPair as DilithiumKeyPair`
  --> src/pqc/hw_wallet.rs:19:35
   |
19 | use crate::pqc::dilithium::{self, KeyPair as DilithiumKeyPair};
   |                                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused imports: `PrivateKey as KyberPrivateKey` and `PublicKey as KyberPublicKey`
  --> src/pqc/hw_wallet.rs:20:31
   |
20 | use crate::pqc::kyber::{self, PublicKey as KyberPublicKey, PrivateKey as KyberPrivateKey};
   |                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/pq_vpn.rs:15:17
   |
15 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused imports: `SystemTime` and `UNIX_EPOCH`
  --> src/pqc/pq_vpn.rs:16:36
   |
16 | use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
   |                                    ^^^^^^^^^^  ^^^^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/attestation_chain.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `Duration`
  --> src/pqc/attestation_chain.rs:15:17
   |
15 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/zk_identity.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused imports: `ZeroizeOnDrop` and `Zeroize`
  --> src/pqc/zk_identity.rs:17:15
   |
17 | use zeroize::{Zeroize, ZeroizeOnDrop};
   |               ^^^^^^^  ^^^^^^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/decentralized_recovery.rs:12:30
   |
12 | use sha3::{Digest, Sha3_256, Sha3_512};
   |                              ^^^^^^^^

warning: unused import: `HashSet`
  --> src/pqc/decentralized_recovery.rs:13:33
   |
13 | use std::collections::{HashMap, HashSet};
   |                                 ^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/decentralized_recovery.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused imports: `ZeroizeOnDrop` and `Zeroize`
  --> src/pqc/decentralized_recovery.rs:17:15
   |
17 | use zeroize::{Zeroize, ZeroizeOnDrop};
   |               ^^^^^^^  ^^^^^^^^^^^^^

warning: unused import: `PublicKey as DilithiumPublicKey`
  --> src/pqc/decentralized_recovery.rs:19:64
   |
19 | use crate::pqc::dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey};
   |                                                                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `VecDeque`
  --> src/pqc/signal_protocol.rs:13:33
   |
13 | use std::collections::{HashMap, VecDeque};
   |                                 ^^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/signal_protocol.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `Sha3_512`
  --> src/pqc/contract_proofs.rs:11:30
   |
11 | use sha3::{Digest, Sha3_256, Sha3_512};
   |                              ^^^^^^^^

warning: unused import: `Arc`
  --> src/pqc/contract_proofs.rs:13:17
   |
13 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `Arc`
  --> src/pqc/federated_learning.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused imports: `Arc` and `RwLock`
  --> src/pqc/qkd_extended.rs:14:17
   |
14 | use std::sync::{Arc, RwLock};
   |                 ^^^  ^^^^^^

warning: unused import: `PublicKey as DilithiumPublicKey`
  --> src/pqc/qkd_extended.rs:17:64
   |
17 | use crate::pqc::dilithium::{self, KeyPair as DilithiumKeyPair, PublicKey as DilithiumPublicKey};
   |                                                                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Sha3_512`
  --> src/pqc/payment_channel.rs:12:30
   |
12 | use sha3::{Digest, Sha3_256, Sha3_512};
   |                              ^^^^^^^^

warning: unused import: `Duration`
  --> src/pqc/payment_channel.rs:15:17
   |
15 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `Plaintext`
 --> src/biometric_auth/encrypted_biometric.rs:7:30
  |
7 |     Evaluator, KeyGenerator, Plaintext, PublicKey, RelinKeys, SecretKey, FheMode,
  |                              ^^^^^^^^^

warning: unused import: `parking_lot::RwLock`
  --> src/biometric_auth/encrypted_biometric.rs:12:5
   |
12 | use parking_lot::RwLock;
   |     ^^^^^^^^^^^^^^^^^^^

warning: unused imports: `Deserialize` and `Serialize`
  --> src/biometric_auth/encrypted_biometric.rs:13:13
   |
13 | use serde::{Deserialize, Serialize};
   |             ^^^^^^^^^^^  ^^^^^^^^^

warning: unused imports: `BiometricAuthError`, `EncryptedBiometricOps`, `EncryptedEmbedding`, `EncryptedProof`, `HybridVerificationResult`, `Result`, and `SystemConfig`
  --> src/biometric_auth/unified_api.rs:9:5
   |
 9 |     BiometricAuthError, Result, SystemConfig,
   |     ^^^^^^^^^^^^^^^^^^  ^^^^^^  ^^^^^^^^^^^^
...
12 |         EncryptedBiometric, EncryptedEmbedding, EncryptedBiometricOps,
   |                             ^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^
...
16 |         EncryptedProof, HybridVerificationResult,
   |         ^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused imports: `BfvContext` and `BfvParameters`
  --> src/biometric_auth/mod.rs:63:18
   |
63 | use crate::fhe::{BfvContext, BfvParameters, FheMode};
   |                  ^^^^^^^^^^  ^^^^^^^^^^^^^

warning: unused imports: `BiometricEncoder`, `BiometricProver`, `BiometricVerifier`, `FacialEmbedding`, and `PolynomialCommitment`
  --> src/biometric_auth/mod.rs:65:5
   |
65 |     BiometricEncoder, BiometricProver, BiometricVerifier, CommitmentSchemeType,
   |     ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^
66 |     FacialEmbedding, PolynomialCommitment,
   |     ^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^

warning: unused import: `std::sync::Arc`
  --> src/biometric_auth/mod.rs:69:5
   |
69 | use std::sync::Arc;
   |     ^^^^^^^^^^^^^^

warning: unused import: `std::net::IpAddr`
  --> src/api/server.rs:23:5
   |
23 | use std::net::IpAddr;
   |     ^^^^^^^^^^^^^^^^

warning: unused import: `Any`
  --> src/api/server.rs:35:35
   |
35 | use tower_http::cors::{CorsLayer, Any};
   |                                   ^^^

warning: unused import: `std::io::BufReader`
  --> src/api/server.rs:44:5
   |
44 | use std::io::BufReader;
   |     ^^^^^^^^^^^^^^^^^^

warning: unused import: `std::fs::File`
  --> src/api/server.rs:45:5
   |
45 | use std::fs::File;
   |     ^^^^^^^^^^^^^

warning: unused imports: `Ciphertext`, `Decryptor`, and `Evaluator`
  --> src/api/server.rs:50:30
   |
50 |     KeyGenerator, Encryptor, Decryptor, Evaluator, BatchEncoder,
   |                              ^^^^^^^^^  ^^^^^^^^^
51 |     SecretKey, PublicKey, Ciphertext,
   |                           ^^^^^^^^^^

warning: unused imports: `EnrollmentResult` and `VerificationResult`
  --> src/api/server.rs:56:5
   |
56 |     EnrollmentResult, VerificationResult,
   |     ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^

warning: unused imports: `RateLimitHeaders` and `RateLimitTier`
  --> src/api/server.rs:62:38
   |
62 | use super::rate_limit::{RateLimiter, RateLimitTier, RateLimitHeaders};
   |                                      ^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^

warning: unused imports: `AuthContext`, `AuthError`, and `OptionalAuth`
  --> src/api/server.rs:63:58
   |
63 | use super::auth_middleware::{auth_middleware, AuthState, AuthContext, AuthError, RequiredAuth, OptionalAuth};
   |                                                          ^^^^^^^^^^^  ^^^^^^^^^                ^^^^^^^^^^^^

warning: unused imports: `Path` and `Query`
  --> src/api/handlers.rs:17:28
   |
17 |     extract::{Json, State, Path, Query},
   |                            ^^^^  ^^^^^

warning: unused import: `warn`
  --> src/api/handlers.rs:25:21
   |
25 | use tracing::{info, warn, error, instrument};
   |                     ^^^^

warning: unused imports: `AmlEngine`, `CustomerProfile`, `SessionInitiator`, `SessionKeys`, `SessionResponder`, `Transaction as AmlTransaction`, `TransactionType as AmlTxType`, `exchange_keys_simple`, `open as hybrid_open`, and `seal as hybrid_seal`
   --> src/api/handlers.rs:421:15
    |
421 |     session::{SessionInitiator, SessionResponder, SessionKeys, exchange_keys_simple},
    |               ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^
422 |     hybrid::{seal as hybrid_seal, open as hybrid_open},
    |              ^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^
423 |     aml::{AmlEngine, Transaction as AmlTransaction, TransactionType as AmlTxType, CustomerProfile},
    |           ^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^

warning: unused imports: `PUBLIC_KEY_BYTES`, `SECRET_KEY_BYTES`, and `SIGNATURE_BYTES`
  --> src/api/jwt.rs:22:5
   |
22 |     PUBLIC_KEY_BYTES, SECRET_KEY_BYTES, SIGNATURE_BYTES,
   |     ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^

warning: unused import: `Sha3_256`
  --> src/api/jwt.rs:26:20
   |
26 | use sha3::{Digest, Sha3_256};
   |                    ^^^^^^^^

warning: unused import: `zeroize::Zeroize`
  --> src/api/jwt.rs:35:5
   |
35 | use zeroize::Zeroize;
   |     ^^^^^^^^^^^^^^^^

warning: unused import: `FromRef`
  --> src/api/auth_middleware.rs:22:28
   |
22 |     extract::{ConnectInfo, FromRef, FromRequestParts, State},
   |                            ^^^^^^^

warning: unused import: `TokenVerifier`
  --> src/api/auth_middleware.rs:33:55
   |
33 | use super::jwt::{DilithiumJwt, JwtError, TokenIssuer, TokenVerifier, ValidationOptions};
   |                                                       ^^^^^^^^^^^^^

warning: unused import: `RateLimitError`
  --> src/api/auth_middleware.rs:34:25
   |
34 | use super::rate_limit::{RateLimitError, RateLimitHeaders, RateLimitResult, RateLimiter};
   |                         ^^^^^^^^^^^^^^

warning: unused imports: `PUBLIC_KEY_BYTES` and `SECRET_KEY_BYTES`
  --> src/api/optimization/cache.rs:13:48
   |
13 | use crate::pqc::kyber::{PrivateKey, PublicKey, PUBLIC_KEY_BYTES, SECRET_KEY_BYTES};
   |                                                ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^

warning: unused imports: `PqKeyStore`, `PublicKeyInfo`, and `self`
  --> src/api/pq_session.rs:19:5
   |
19 |     PqKeyStore, SharedKeyStore, PublicKeyInfo,
   |     ^^^^^^^^^^                  ^^^^^^^^^^^^^
...
22 |     dilithium::{self, PublicKey as DilithiumPublicKey},
   |                 ^^^^

warning: unused import: `response::IntoResponse`
  --> src/api/pq_session.rs:27:5
   |
27 |     response::IntoResponse,
   |     ^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `AuthError`
  --> src/api/pq_session.rs:29:44
   |
29 | use super::auth_middleware::{RequiredAuth, AuthError};
   |                                            ^^^^^^^^^

warning: unused import: `std::collections::HashMap`
  --> src/api/ddos.rs:11:5
   |
11 | use std::collections::HashMap;
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused imports: `Duration` and `Instant`
  --> src/api/ddos.rs:15:17
   |
15 | use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^  ^^^^^^^

warning: unused import: `Mutex`
  --> src/api/ddos.rs:17:19
   |
17 | use parking_lot::{Mutex, RwLock};
   |                   ^^^^^

warning: unused imports: `debug` and `error`
  --> src/api/ddos.rs:19:15
   |
19 | use tracing::{debug, info, warn, error};
   |               ^^^^^              ^^^^^

warning: unused import: `response::IntoResponse`
   --> src/api/ddos.rs:752:5
    |
752 |     response::IntoResponse,
    |     ^^^^^^^^^^^^^^^^^^^^^^

warning: unused imports: `SystemTime` and `UNIX_EPOCH`
  --> src/api/prometheus.rs:17:36
   |
17 | use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
   |                                    ^^^^^^^^^^  ^^^^^^^^^^

warning: unused import: `parking_lot::RwLock`
  --> src/api/prometheus.rs:19:5
   |
19 | use parking_lot::RwLock;
   |     ^^^^^^^^^^^^^^^^^^^

warning: unused import: `Plaintext`
  --> src/api/age_location.rs:20:39
   |
20 |     SecretKey, PublicKey, Ciphertext, Plaintext,
   |                                       ^^^^^^^^^

warning: unused import: `std::net::IpAddr`
  --> src/api/audit.rs:32:5
   |
32 | use std::net::IpAddr;
   |     ^^^^^^^^^^^^^^^^

warning: unused import: `Path`
  --> src/api/audit.rs:33:17
   |
33 | use std::path::{Path, PathBuf};
   |                 ^^^^

warning: unused import: `Arc`
  --> src/api/audit.rs:34:17
   |
34 | use std::sync::{Arc, RwLock};
   |                 ^^^

warning: unused import: `warn`
  --> src/api/fhe_handlers.rs:29:21
   |
29 | use tracing::{info, warn, error, instrument};
   |                     ^^^^

warning: unused import: `Plaintext`
  --> src/api/fhe_handlers.rs:34:50
   |
34 |     SecretKey, PublicKey, RelinKeys, Ciphertext, Plaintext,
   |                                                  ^^^^^^^^^

warning: unused import: `Duration`
  --> src/api/ml_telemetry.rs:20:17
   |
20 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `StatusCode`
  --> src/api/ml_telemetry_middleware.rs:20:37
   |
20 | use axum::http::{Request, Response, StatusCode};
   |                                     ^^^^^^^^^^

warning: unused imports: `AttackState` and `IpReputation`
  --> src/api/ml_telemetry_middleware.rs:24:24
   |
24 | use crate::api::ddos::{AttackState, DdosProtection, IpReputation};
   |                        ^^^^^^^^^^^                  ^^^^^^^^^^^^

warning: unused imports: `ClientFingerprint` and `PathCategory`
  --> src/api/telemetry_storage.rs:26:25
   |
26 |     BehavioralFeatures, ClientFingerprint, CryptoOperation, MlFeatures,
   |                         ^^^^^^^^^^^^^^^^^
27 |     MlTelemetryEvent, PathCategory, TimingBaseline,
   |                       ^^^^^^^^^^^^

warning: unused import: `dashmap::DashMap`
  --> src/api/telemetry_kafka.rs:17:5
   |
17 | use dashmap::DashMap;
   |     ^^^^^^^^^^^^^^^^

warning: unused imports: `BehavioralFeatures`, `MlTelemetryEvent`, `RequestFeatures`, `SecurityFeatures`, and `TimingFeatures`
  --> src/api/ai_detection.rs:26:26
   |
26 |     AttackStateSnapshot, BehavioralFeatures, ClientFingerprint, CryptoOperation,
   |                          ^^^^^^^^^^^^^^^^^^
27 |     MlFeatures, MlTelemetryEvent, PathCategory, RequestFeatures, SecurityFeatures,
   |                 ^^^^^^^^^^^^^^^^                ^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^
28 |     TimingFeatures,
   |     ^^^^^^^^^^^^^^

warning: unused import: `oneshot`
  --> src/api/defense_response.rs:23:25
   |
23 | use tokio::sync::{mpsc, oneshot};
   |                         ^^^^^^^

warning: unused imports: `ActionPriority`, `AttackType`, `Recommendation`, and `RecommendedAction`
  --> src/api/defense_response.rs:28:5
   |
28 |     ActionPriority, AttackType, RecommendedAction, Recommendation, ThreatAssessment,
   |     ^^^^^^^^^^^^^^  ^^^^^^^^^^  ^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^

warning: unused import: `tokio::sync::RwLock`
  --> src/api/ai_ddos_integration.rs:28:5
   |
28 | use tokio::sync::RwLock;
   |     ^^^^^^^^^^^^^^^^^^^

warning: unused imports: `AiDetectionClient` and `AttackType`
  --> src/api/ai_ddos_integration.rs:33:32
   |
33 |     ai_client, ActionPriority, AiDetectionClient, AnalysisContext, AttackType,
   |                                ^^^^^^^^^^^^^^^^^                   ^^^^^^^^^^

warning: unused import: `AttackState`
  --> src/api/ai_ddos_integration.rs:36:24
   |
36 | use crate::api::ddos::{AttackState, DdosProtection};
   |                        ^^^^^^^^^^^

warning: unused import: `DefenseCoordinator`
  --> src/api/ai_ddos_integration.rs:37:57
   |
37 | use crate::api::defense_response::{defense_coordinator, DefenseCoordinator};
   |                                                         ^^^^^^^^^^^^^^^^^^

warning: unused imports: `ML_TELEMETRY` and `SecurityContext`
  --> src/api/ai_ddos_integration.rs:40:19
   |
40 |     PathCategory, SecurityContext, ML_TELEMETRY,
   |                   ^^^^^^^^^^^^^^^  ^^^^^^^^^^^^

warning: unused imports: `AtomicU64` and `Ordering`
  --> src/api/ai_defense_metrics.rs:13:25
   |
13 | use std::sync::atomic::{AtomicU64, Ordering};
   |                         ^^^^^^^^^  ^^^^^^^^

warning: unused imports: `PasswordHash` and `PasswordVerifier`
  --> src/api/anti_grinding.rs:49:13
   |
49 |     Argon2, PasswordHash, PasswordHasher, PasswordVerifier,
   |             ^^^^^^^^^^^^                  ^^^^^^^^^^^^^^^^

warning: unused import: `Rng`
  --> src/api/anti_grinding.rs:53:12
   |
53 | use rand::{Rng, RngCore};
   |            ^^^

warning: unused import: `std::sync::Arc`
  --> src/api/ai_harvest.rs:26:5
   |
26 | use std::sync::Arc;
   |     ^^^^^^^^^^^^^^

warning: ambiguous glob re-exports
  --> src/api/mod.rs:55:9
   |
55 | pub use server::*;
   |         ^^^^^^^^^ the name `EncryptRequest` in the type namespace is first re-exported here
56 | pub use handlers::*;
   |         ----------- but the name `EncryptRequest` in the type namespace is also re-exported here
   |
   = note: `#[warn(ambiguous_glob_reexports)]` on by default

warning: ambiguous glob re-exports
  --> src/api/mod.rs:55:9
   |
55 | pub use server::*;
   |         ^^^^^^^^^ the name `EncryptResponse` in the type namespace is first re-exported here
56 | pub use handlers::*;
   |         ----------- but the name `EncryptResponse` in the type namespace is also re-exported here

warning: unused import: `Signature`
  --> src/api/secure_cookie.rs:33:57
   |
33 | use crate::pqc::dilithium::{self, PublicKey, SecretKey, Signature};
   |                                                         ^^^^^^^^^

warning: unused import: `Duration`
  --> src/api/secure_cookie.rs:39:17
   |
39 | use std::time::{Duration, SystemTime, UNIX_EPOCH};
   |                 ^^^^^^^^

warning: unused import: `Mutex`
  --> src/cache/mod.rs:20:27
   |
20 | use parking_lot::{RwLock, Mutex};
   |                           ^^^^^

warning: unused import: `AtomicU64`
 --> src/infra/scaling.rs:3:25
  |
3 | use std::sync::atomic::{AtomicU64, AtomicUsize, Ordering};
  |                         ^^^^^^^^^

warning: unused import: `Instant`
 --> src/infra/health.rs:5:27
  |
5 | use std::time::{Duration, Instant};
  |                           ^^^^^^^

warning: unused import: `std::collections::HashSet`
 --> src/infra/cpu.rs:9:5
  |
9 | use std::collections::HashSet;
  |     ^^^^^^^^^^^^^^^^^^^^^^^^^

warning: unused import: `Instant`
  --> src/infra/backup.rs:15:27
   |
15 | use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
   |                           ^^^^^^^

warning: unused import: `Mutex`
  --> src/infra/backup.rs:16:19
   |
16 | use parking_lot::{Mutex, RwLock};
   |                   ^^^^^

warning: unused imports: `debug` and `error`
  --> src/infra/backup.rs:18:15
   |
18 | use tracing::{debug, info, warn, error};
   |               ^^^^^              ^^^^^

warning: unexpected `cfg` condition name: `kani`
  --> src/infra/verification.rs:18:7
   |
18 | #[cfg(kani)]
   |       ^^^^
   |
   = help: expected names are: `docsrs`, `feature`, and `test` and 31 more
   = help: consider using a Cargo feature instead
   = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
            [lints.rust]
            unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
   = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
   = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration
   = note: `#[warn(unexpected_cfgs)]` on by default

warning: unexpected `cfg` condition name: `kani`
  --> src/infra/verification.rs:41:7
   |
41 | #[cfg(kani)]
   |       ^^^^
   |
   = help: consider using a Cargo feature instead
   = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
            [lints.rust]
            unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
   = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
   = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
  --> src/infra/verification.rs:58:7
   |
58 | #[cfg(kani)]
   |       ^^^^
   |
   = help: consider using a Cargo feature instead
   = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
            [lints.rust]
            unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
   = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
   = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
  --> src/infra/verification.rs:83:7
   |
83 | #[cfg(kani)]
   |       ^^^^
   |
   = help: consider using a Cargo feature instead
   = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
            [lints.rust]
            unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
   = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
   = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:107:7
    |
107 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:126:7
    |
126 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:151:7
    |
151 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:176:7
    |
176 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:201:7
    |
201 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:228:7
    |
228 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:249:7
    |
249 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:273:7
    |
273 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:294:7
    |
294 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:317:7
    |
317 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:342:7
    |
342 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unexpected `cfg` condition name: `kani`
   --> src/infra/verification.rs:363:7
    |
363 | #[cfg(kani)]
    |       ^^^^
    |
    = help: consider using a Cargo feature instead
    = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
             [lints.rust]
             unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
    = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(kani)");` to the top of the `build.rs`
    = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration

warning: unused imports: `BincodeConfig` and `safe_deserialize`
 --> src/infra/verification.rs:9:27
  |
9 | use super::bincode_safe::{safe_deserialize, BincodeConfig};
  |                           ^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^

warning: ambiguous glob re-exports
  --> src/infra/mod.rs:25:9
   |
25 | pub use health::*;
   |         ^^^^^^^^^ the name `HealthStatus` in the type namespace is first re-exported here
...
29 | pub use observability::*;
   |         ---------------- but the name `HealthStatus` in the type namespace is also re-exported here

warning: unused import: `std::sync::Arc`
  --> src/infra/mod.rs:39:5
   |
39 | use std::sync::Arc;
   |     ^^^^^^^^^^^^^^

warning: unused import: `super::providers::*`
  --> src/ai/router.rs:17:5
   |
17 | use super::providers::*;
   |     ^^^^^^^^^^^^^^^^^^^

warning: unused import: `std::sync::Arc`
  --> src/solana/helius.rs:10:5
   |
10 | use std::sync::Arc;
   |     ^^^^^^^^^^^^^^

warning: unused import: `std::os::unix::process::CommandExt`
  --> src/h33_bridge/process.rs:85:17
   |
85 |             use std::os::unix::process::CommandExt;
   |                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: ambiguous glob re-exports
  --> src/lib.rs:31:9
   |
31 | pub use zkp::*;
   |         ^^^^^^ the name `Polynomial` in the type namespace is first re-exported here
32 | pub use pqc::*;
   |         ------ but the name `Polynomial` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `audit` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `audit` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `generate_request_id` in the value namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `generate_request_id` in the value namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `AuditLogger` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `AuditLogger` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `TokenIssuer` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `TokenIssuer` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `rate_limit` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `rate_limit` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `RateLimiter` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `RateLimiter` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `AuditEvent` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `AuditEvent` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `EventType` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `EventType` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `Severity` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `Severity` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `JwtHeader` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `JwtHeader` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `JwtClaims` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `JwtClaims` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `CryptoOperation` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `CryptoOperation` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `RecommendedAction` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `RecommendedAction` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `RateLimitError` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `RateLimitError` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `RateLimitResult` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `RateLimitResult` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `GeoRegion` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `GeoRegion` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `EventCategory` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `EventCategory` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:32:9
   |
32 | pub use pqc::*;
   |         ^^^^^^ the name `Outcome` in the type namespace is first re-exported here
33 | pub use api::*;
   |         ------ but the name `Outcome` in the type namespace is also re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:33:9
   |
32 | pub use pqc::*;
   |         ------ but the name `RequestMetadata` in the type namespace is also re-exported here
33 | pub use api::*;
   |         ^^^^^^ the name `RequestMetadata` in the type namespace is first re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:33:9
   |
32 | pub use pqc::*;
   |         ------ but the name `SignRequest` in the type namespace is also re-exported here
33 | pub use api::*;
   |         ^^^^^^ the name `SignRequest` in the type namespace is first re-exported here

warning: ambiguous glob re-exports
  --> src/lib.rs:33:9
   |
32 | pub use pqc::*;
   |         ------ but the name `SignResponse` in the type namespace is also re-exported here
33 | pub use api::*;
   |         ^^^^^^ the name `SignResponse` in the type namespace is first re-exported here

warning: use of deprecated function `pqc::session::exchange_keys_simple`: Use exchange_keys_authenticated for production. Unauthenticated key exchange is vulnerable to MITM attacks.
   --> src/pqc/mod.rs:106:5
    |
106 |     exchange_keys_simple, exchange_keys_authenticated,
    |     ^^^^^^^^^^^^^^^^^^^^
    |
    = note: `#[warn(deprecated)]` on by default

warning: use of deprecated struct `pqc::threshold::ThresholdSigner`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/mod.rs:267:5
    |
267 |     ThresholdSigner, ThrPartialSignature, SigningRound1Message, SigningRound2Message,
    |     ^^^^^^^^^^^^^^^

warning: use of deprecated struct `pqc::threshold::SignatureAggregator`: Uses simplified aggregation. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/mod.rs:268:5
    |
268 |     SignatureAggregator, ThrThresholdSignature,
    |     ^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `pqc::kyber::generate_keypair_from_seed`: Not truly deterministic - use pqc::hd_keys for deterministic HD derivation
   --> src/pqc/kyber.rs:171:9
    |
171 |         generate_keypair_from_seed(&seed)
    |         ^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `pqc::session::exchange_keys_simple`: Use exchange_keys_authenticated for production. Unauthenticated key exchange is vulnerable to MITM attacks.
   --> src/pqc/mpc_channel.rs:261:47
    |
261 |         let (initiator_keys, _) = crate::pqc::exchange_keys_simple()
    |                                               ^^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `pqc::session::exchange_keys_simple`: Use exchange_keys_authenticated for production. Unauthenticated key exchange is vulnerable to MITM attacks.
   --> src/pqc/mpc_channel.rs:289:53
    |
289 |         let (dealer_keys, party_keys) = crate::pqc::exchange_keys_simple()
    |                                                     ^^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `pqc::dilithium::generate_keypair_from_seed`: Not truly deterministic - use pqc::hd_keys for deterministic HD derivation
   --> src/pqc/hd_keys.rs:532:16
    |
532 |     dilithium::generate_keypair_from_seed(&entropy)
    |                ^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `pqc::kyber::generate_keypair_from_seed`: Not truly deterministic - use pqc::hd_keys for deterministic HD derivation
   --> src/pqc/hd_keys.rs:376:16
    |
376 |         kyber::generate_keypair_from_seed(&seed)
    |                ^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `pqc::kyber::generate_keypair_from_seed`: Not truly deterministic - use pqc::hd_keys for deterministic HD derivation
   --> src/pqc/hd_keys.rs:400:39
    |
400 |                 let (pk, sk) = kyber::generate_keypair_from_seed(&seed)
    |                                       ^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: use of deprecated struct `pqc::threshold::ThresholdSigner`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:739:6
    |
739 | impl ThresholdSigner {
    |      ^^^^^^^^^^^^^^^

warning: use of deprecated struct `pqc::threshold::SignatureAggregator`: Uses simplified aggregation. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:934:6
    |
934 | impl SignatureAggregator {
    |      ^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/pqc/did.rs:119:40
    |
119 |             public_key_base64: base64::encode(public_key.as_bytes()),
    |                                        ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/pqc/did.rs:129:40
    |
129 |             public_key_base64: base64::encode(public_key.as_bytes()),
    |                                        ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/pqc/did.rs:139:29
    |
139 |         let bytes = base64::decode(&self.public_key_base64)
    |                             ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/pqc/did.rs:152:29
    |
152 |         let bytes = base64::decode(&self.public_key_base64)
    |                             ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/pqc/did.rs:466:34
    |
466 |             proof_value: base64::encode(&signature),
    |                                  ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/pqc/did.rs:565:34
    |
565 |             proof_value: base64::encode(&signature),
    |                                  ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/pqc/did.rs:695:33
    |
695 |         let signature = base64::decode(&credential.proof.proof_value)
    |                                 ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/pqc/did.rs:869:36
    |
869 |             authorization: base64::encode(&signature),
    |                                    ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/pqc/grpc.rs:1242:33
     |
1242 |             public_key: base64::encode(&public_key),
     |                                 ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/pqc/grpc.rs:1261:33
     |
1261 |             public_key: base64::encode(&key.public_key),
     |                                 ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/pqc/grpc.rs:1346:37
     |
1346 |             new_public_key: base64::encode(&new_public),
     |                                     ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
    --> src/pqc/grpc.rs:1405:28
     |
1405 |         let data = base64::decode(&request.data)
     |                            ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/pqc/grpc.rs:1430:32
     |
1430 |             signature: base64::encode(&signature),
     |                                ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
    --> src/pqc/grpc.rs:1445:30
     |
1445 |             let pk = base64::decode(pk_b64)
     |                              ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
    --> src/pqc/grpc.rs:1452:28
     |
1452 |         let data = base64::decode(&request.data)
     |                            ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
    --> src/pqc/grpc.rs:1454:33
     |
1454 |         let signature = base64::decode(&request.signature)
     |                                 ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
    --> src/api/server.rs:1732:20
     |
1732 |         if base64::decode(age_str).is_err() {
     |                    ^^^^^^

warning: use of deprecated function `pqc::session::exchange_keys_simple`: Use exchange_keys_authenticated for production. Unauthenticated key exchange is vulnerable to MITM attacks.
   --> src/api/handlers.rs:421:64
    |
421 |     session::{SessionInitiator, SessionResponder, SessionKeys, exchange_keys_simple},
    |                                                                ^^^^^^^^^^^^^^^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/handlers.rs:759:33
    |
759 |     let message = match base64::decode(&req.message) {
    |                                 ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/api/handlers.rs:817:28
    |
817 |         signature: base64::encode(&signature_bytes),
    |                            ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/api/handlers.rs:818:29
    |
818 |         public_key: base64::encode(&public_key_bytes),
    |                             ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/handlers.rs:836:33
    |
836 |     let message = match base64::decode(&req.message) {
    |                                 ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/handlers.rs:855:41
    |
855 |     let signature_bytes = match base64::decode(&req.signature) {
    |                                         ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/handlers.rs:874:42
    |
874 |     let public_key_bytes = match base64::decode(&req.public_key) {
    |                                          ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
    --> src/api/handlers.rs:1011:44
     |
1011 |     let client_kyber_bytes = match base64::decode(&req.client_kyber_public_key) {
     |                                            ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/api/handlers.rs:1039:61
     |
1039 |     let session_data = format!("{}:{}", session_id, base64::encode(ciphertext.as_bytes()));
     |                                                             ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/api/handlers.rs:1066:42
     |
1066 |         server_kyber_ciphertext: base64::encode(ciphertext.as_bytes()),
     |                                          ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/api/handlers.rs:1067:35
     |
1067 |         server_signature: base64::encode(signature.as_bytes()),
     |                                   ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/api/handlers.rs:1068:36
     |
1068 |         server_public_key: base64::encode(state.dilithium_keypair.public_key.as_bytes()),
     |                                    ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/api/handlers.rs:1088:39
     |
1088 |         dilithium_public_key: base64::encode(state.dilithium_keypair.public_key.as_bytes()),
     |                                       ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
    --> src/api/handlers.rs:1089:35
     |
1089 |         kyber_public_key: base64::encode(state.kyber_public_key.as_bytes()),
     |                                   ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/api/pq_session.rs:595:35
    |
595 |         kyber_public_key: base64::encode(&info.kyber_public_key),
    |                                   ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/api/pq_session.rs:596:39
    |
596 |         dilithium_public_key: base64::encode(&info.dilithium_public_key),
    |                                       ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/pq_session.rs:621:31
    |
621 |     let message_one = base64::decode(&req.message_one)
    |                               ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/pq_session.rs:631:32
    |
631 |         let pk_bytes = base64::decode(pk_b64)
    |                                ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/api/pq_session.rs:704:30
    |
704 |         message_two: base64::encode(&message_two),
    |                              ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/pq_session.rs:727:29
    |
727 |     let encrypted = base64::decode(&req.payload)
    |                             ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/pq_session.rs:737:22
    |
737 |         Some(base64::decode(aad_b64).map_err(|_| {
    |                      ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/api/pq_session.rs:777:26
    |
777 |         payload: base64::encode(&encrypted_response),
    |                          ^^^^^^

warning: use of deprecated function `base64::decode`: Use Engine::decode
   --> src/api/age_location.rs:283:36
    |
283 |         let age_ct_bytes = base64::decode(&encrypted_age.ciphertext)
    |                                    ^^^^^^

warning: use of deprecated function `base64::encode`: Use Engine::encode
   --> src/api/telemetry_kafka.rs:320:39
    |
320 |             original_payload: base64::encode(original),
    |                                       ^^^^^^

warning: variable does not need to be mutable
   --> src/ai/router.rs:391:13
    |
391 |         let mut contents = vec![
    |             ----^^^^^^^^
    |             |
    |             help: remove this `mut`
    |
    = note: `#[warn(unused_mut)]` (part of `#[warn(unused)]`) on by default

warning: variable does not need to be mutable
   --> src/ai/router.rs:463:13
    |
463 |         let mut messages = vec![
    |             ----^^^^^^^^
    |             |
    |             help: remove this `mut`

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:743:13
    |
743 |             key_share,
    |             ^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::public_params`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:744:13
    |
744 |             public_params,
    |             ^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::session_data`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:745:13
    |
745 |             session_data: None,
    |             ^^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:763:32
    |
763 |         commit_hasher.update(&[self.key_share.index]);
    |                                ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::session_data`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:770:9
    |
770 |         self.session_data = Some(SigningSession {
    |         ^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:779:21
    |
779 |             signer: self.key_share.index,
    |                     ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::session_data`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:787:23
    |
787 |         let session = self.session_data.as_mut()
    |                       ^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:791:30
    |
791 |             if msg.signer == self.key_share.index {
    |                              ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::session_data`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:806:23
    |
806 |         let session = self.session_data.as_ref()
    |                       ^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:810:21
    |
810 |             signer: self.key_share.index,
    |                     ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::session_data`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:817:23
    |
817 |         let session = self.session_data.as_mut()
    |                       ^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:822:30
    |
822 |             if msg.signer == self.key_share.index {
    |                              ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:862:28
    |
862 |         sig_hasher.update(&self.key_share.secret_share);
    |                            ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:865:48
    |
865 |         let indices: Vec<u8> = std::iter::once(self.key_share.index)
    |                                                ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:868:43
    |
868 |         let lambda = lagrange_coefficient(self.key_share.index, &indices)?;
    |                                           ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:876:31
    |
876 |         proof_hasher.update(&[self.key_share.index]);
    |                               ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:878:30
    |
878 |         proof_hasher.update(&self.key_share.commitment);
    |                              ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::ThresholdSigner::key_share`: Uses simplified signature construction. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:884:20
    |
884 |             index: self.key_share.index,
    |                    ^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::SignatureAggregator::public_params`: Uses simplified aggregation. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:937:16
    |
937 |         Self { public_params }
    |                ^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::SignatureAggregator::public_params`: Uses simplified aggregation. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:946:39
    |
946 |         if partial_signatures.len() < self.public_params.threshold {
    |                                       ^^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::SignatureAggregator::public_params`: Uses simplified aggregation. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:948:25
    |
948 |                 needed: self.public_params.threshold,
    |                         ^^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::SignatureAggregator::public_params`: Uses simplified aggregation. For production Ed25519 threshold signing, use frost-ed25519.
   --> src/pqc/threshold.rs:968:36
    |
968 |             if ps.index as usize > self.public_params.total_parties || ps.index == 0 {
    |                                    ^^^^^^^^^^^^^^^^^^

warning: use of deprecated field `pqc::threshold::SignatureAggregator::public_params`: Uses simplified aggregation. For production Ed25519 threshold signing, use frost-ed25519.
    --> src/pqc/threshold.rs:1006:38
     |
1006 |         if signature.signers.len() < self.public_params.threshold {
     |                                      ^^^^^^^^^^^^^^^^^^

warning: unused import: `rayon::prelude`
  --> src/fhe/bfv.rs:25:5
   |
25 | use rayon::prelude::*;
   |     ^^^^^^^^^^^^^^

warning: unused import: `rand::RngCore`
   --> src/fhe/bfv.rs:607:13
    |
607 |         use rand::RngCore;
    |             ^^^^^^^^^^^^^

warning: unused import: `rand::RngCore`
    --> src/fhe/bfv.rs:1067:13
     |
1067 |         use rand::RngCore;
     |             ^^^^^^^^^^^^^

warning: unused import: `Digest`
  --> src/zkp/plonk/kzg.rs:25:12
   |
25 | use sha3::{Digest, Sha3_256};
   |            ^^^^^^

warning: unused import: `rand::RngCore`
  --> src/pqc/transport.rs:39:5
   |
39 | use rand::RngCore;
   |     ^^^^^^^^^^^^^

warning: unused import: `KeyInit`
  --> src/pqc/credentials.rs:14:51
   |
14 | use aes_gcm::{Aes256Gcm, Key, Nonce, aead::{Aead, KeyInit}};
   |                                                   ^^^^^^^

warning: unused import: `aead::Aead`
  --> src/pqc/hsm.rs:18:38
   |
18 | use aes_gcm::{Aes256Gcm, Key, Nonce, aead::Aead, KeyInit};
   |                                      ^^^^^^^^^^

warning: unused import: `KeyInit`
  --> src/pqc/hsm.rs:18:50
   |
18 | use aes_gcm::{Aes256Gcm, Key, Nonce, aead::Aead, KeyInit};
   |                                                  ^^^^^^^

warning: unused import: `Digest`
  --> src/pqc/compliance.rs:42:32
   |
42 | use sha3::{Sha3_256, Sha3_512, Digest};
   |                                ^^^^^^

warning: unused import: `Digest`
  --> src/pqc/rate_limit.rs:44:22
   |
44 | use sha3::{Sha3_256, Digest};
   |                      ^^^^^^

warning: unused import: `tower::ServiceExt`
  --> src/api/server.rs:33:5
   |
33 | use tower::ServiceExt;
   |     ^^^^^^^^^^^^^^^^^

warning: unused import: `Digest`
  --> src/api/jwt.rs:26:12
   |
26 | use sha3::{Digest, Sha3_256};
   |            ^^^^^^

warning: unused variable: `n`
   --> src/fhe/ntt.rs:348:13
    |
348 |         let n = self.tables.n;
    |             ^
    |
    = note: `#[warn(unused_variables)]` (part of `#[warn(unused)]`) on by default
help: you might have meant to pattern match on the similarly named constant `N`
    |
348 -         let n = self.tables.n;
348 +         let pqc::falcon::params::falcon512::N = self.tables.n;
    |
help: if this is intentional, prefix it with an underscore
    |
348 |         let _n = self.tables.n;
    |             +

warning: unused variable: `n`
   --> src/fhe/ntt.rs:369:13
    |
369 |         let n = self.tables.n;
    |             ^
    |
help: you might have meant to pattern match on the similarly named constant `N`
    |
369 -         let n = self.tables.n;
369 +         let pqc::falcon::params::falcon512::N = self.tables.n;
    |
help: if this is intentional, prefix it with an underscore
    |
369 |         let _n = self.tables.n;
    |             +

warning: unused variable: `q`
   --> src/fhe/montgomery.rs:125:13
    |
125 |         let q = self.moduli[modulus_idx];
    |             ^ help: if this is intentional, prefix it with an underscore: `_q`

warning: variable does not need to be mutable
   --> src/fhe/bfv.rs:440:13
    |
440 |         let mut sk_coeffs: Vec<i64> = (0..n)
    |             ----^^^^^^^^^
    |             |
    |             help: remove this `mut`

warning: unused variable: `q`
    --> src/fhe/bfv.rs:1518:54
     |
1518 |         let rotate_poly = |poly: &[u64], steps: i32, q: u64| -> Vec<u64> {
     |                                                      ^ help: if this is intentional, prefix it with an underscore: `_q`

warning: unused variable: `t_bits`
   --> src/fhe/params.rs:114:13
    |
114 |         let t_bits = (self.t as f64).log2().ceil() as usize;
    |             ^^^^^^ help: if this is intentional, prefix it with an underscore: `_t_bits`

warning: variable does not need to be mutable
   --> src/fhe/ntt32.rs:145:16
    |
145 |     fn mod_pow(mut base: u32, mut exp: u32, modulus: u32) -> u32 {
    |                ----^^^^
    |                |
    |                help: remove this `mut`

warning: unused variable: `e`
   --> src/zkp/plonk/biometric.rs:455:17
    |
455 |             Err(e) => {
    |                 ^ help: if this is intentional, prefix it with an underscore: `_e`

warning: unused variable: `opening`
   --> src/zkp/plonk/biometric.rs:463:13
    |
463 |         let opening = super::commitment::Opening {
    |             ^^^^^^^ help: if this is intentional, prefix it with an underscore: `_opening`

warning: unused variable: `point`
  --> src/zkp/plonk/commitment.rs:40:28
   |
40 |     pub fn evaluate(&self, point: &[u8; 32]) -> [u8; 32] {
   |                            ^^^^^ help: if this is intentional, prefix it with an underscore: `_point`

warning: unused variable: `n`
   --> src/zkp/plonk/fri.rs:117:83
    |
117 |     fn verify(root: &[u8; 32], index: usize, leaf: &[u8; 32], proof: &[[u8; 32]], n: usize) -> bool {
    |                                                                                   ^ help: if this is intentional, prefix it with an underscore: `_n`

warning: unused variable: `point`
   --> src/zkp/plonk/fri.rs:412:5
    |
412 |     point: &[u8; 32],
    |     ^^^^^ help: if this is intentional, prefix it with an underscore: `_point`

warning: unused variable: `index`
   --> src/zkp/plonk/fri.rs:550:17
    |
550 |             let index = (q * 7 + layer * 13) % folded_size.max(1);
    |                 ^^^^^ help: if this is intentional, prefix it with an underscore: `_index`

warning: unused variable: `h`
  --> src/zkp/plonk/ipa.rs:77:26
   |
77 |         let (generators, h, _) = deserialize_ipa_params(&pk.params)?;
   |                          ^ help: if this is intentional, prefix it with an underscore: `_h`

warning: unused variable: `commitment`
  --> src/zkp/plonk/ipa.rs:98:9
   |
98 |         commitment: &PolynomialCommitment,
   |         ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_commitment`

warning: unused variable: `h`
   --> src/zkp/plonk/ipa.rs:102:26
    |
102 |         let (generators, h, u) = deserialize_ipa_params(&pk.params)?;
    |                          ^ help: if this is intentional, prefix it with an underscore: `_h`

warning: unused variable: `h`
   --> src/zkp/plonk/ipa.rs:144:26
    |
144 |         let (generators, h, u) = deserialize_ipa_params(&vk.params)?;
    |                          ^ help: if this is intentional, prefix it with an underscore: `_h`

warning: unused variable: `fz`
   --> src/zkp/plonk/kzg.rs:279:63
    |
279 | fn compute_quotient_polynomial(poly: &Polynomial, z: &Scalar, fz: &Scalar) -> Result<Polynomial> {
    |                                                               ^^ help: if this is intentional, prefix it with an underscore: `_fz`

warning: unused variable: `domain_size`
   --> src/zkp/stark/fri_verifier.rs:303:9
    |
303 |         domain_size: usize,
    |         ^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_domain_size`

warning: unused variable: `i`
   --> src/zkp/stark/verifier.rs:450:14
    |
450 |         for (i, value) in proof.ood_evaluation.constraint_values.iter().enumerate() {
    |              ^
    |
help: you might have meant to pattern match on the similarly named constant `N`
    |
450 -         for (i, value) in proof.ood_evaluation.constraint_values.iter().enumerate() {
450 +         for (pqc::falcon::params::falcon512::N, value) in proof.ood_evaluation.constraint_values.iter().enumerate() {
    |
help: if this is intentional, prefix it with an underscore
    |
450 |         for (_i, value) in proof.ood_evaluation.constraint_values.iter().enumerate() {
    |              +

warning: unused variable: `blind_sig`
   --> src/pqc/blind.rs:325:13
    |
325 |         let blind_sig = &signature.signature_data[64..];
    |             ^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_blind_sig`

warning: unused variable: `e`
   --> src/pqc/backup.rs:212:27
    |
212 |                 .map_err(|e| BackupError::VerificationFailed)?;
    |                           ^ help: if this is intentional, prefix it with an underscore: `_e`

warning: unused variable: `predicate`
   --> src/pqc/credentials.rs:909:19
    |
909 |         for (idx, predicate) in request.predicates.iter().enumerate() {
    |                   ^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_predicate`

warning: unused variable: `ad`
   --> src/pqc/noise.rs:186:46
    |
186 |     fn decrypt(&mut self, ciphertext: &[u8], ad: &[u8]) -> Result<Vec<u8>> {
    |                                              ^^ help: if this is intentional, prefix it with an underscore: `_ad`

warning: unused variable: `e`
   --> src/pqc/noise.rs:523:25
    |
523 |                     let e = self.ephemeral.as_ref()
    |                         ^ help: if this is intentional, prefix it with an underscore: `_e`

warning: unused variable: `method_id`
   --> src/pqc/did.rs:227:13
    |
227 |         let method_id = method.id.clone();
    |             ^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_method_id`

warning: unused variable: `amount`
   --> src/pqc/routing.rs:612:40
    |
612 |     pub fn generate_invoice(&mut self, amount: u64) -> (PaymentHash, PaymentPreimage) {
    |                                        ^^^^^^ help: if this is intentional, prefix it with an underscore: `_amount`

warning: unused variable: `amount`
   --> src/pqc/routing.rs:689:9
    |
689 |         amount: u64,
    |         ^^^^^^ help: if this is intentional, prefix it with an underscore: `_amount`

warning: unused variable: `commitment`
   --> src/pqc/lattice_zk.rs:831:26
    |
831 |     fn verify_bit(&self, commitment: &LatticeCommitment, proof: &BitProof) -> Result<bool> {
    |                          ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_commitment`

warning: unused variable: `label`
   --> src/pqc/tee.rs:350:31
    |
350 |     pub fn unseal_data(&self, label: &str, sealed: &[u8]) -> Result<Vec<u8>> {
    |                               ^^^^^ help: if this is intentional, prefix it with an underscore: `_label`

warning: value assigned to `risk_score` is never read
    --> src/pqc/aml.rs:1177:21
     |
1177 |                     risk_score = 100;
     |                     ^^^^^^^^^^^^^^^^
     |
     = help: maybe it is overwritten before being read?
     = note: `#[warn(unused_assignments)]` (part of `#[warn(unused)]`) on by default

warning: unused variable: `combined_entropy`
    --> src/pqc/ceremony.rs:1267:13
     |
1267 |         let combined_entropy = self.combine_entropy()?;
     |             ^^^^^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_combined_entropy`

warning: unused variable: `config`
   --> src/pqc/compliance.rs:958:9
    |
958 |         config: ReportConfig,
    |         ^^^^^^ help: if this is intentional, prefix it with an underscore: `_config`

warning: unused variable: `derived`
    --> src/pqc/hw_wallet.rs:1016:13
     |
1016 |         let derived = hasher.finalize();
     |             ^^^^^^^ help: if this is intentional, prefix it with an underscore: `_derived`

warning: unused variable: `vendor_key`
    --> src/pqc/hw_wallet.rs:1297:13
     |
1297 |         let vendor_key = self.vendor_keys.get(&info.vendor_key_id)
     |             ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_vendor_key`

warning: unused variable: `eph_pk`
   --> src/pqc/pq_vpn.rs:779:18
    |
779 |             let (eph_pk, eph_sk) = kyber::generate_keypair(None)
    |                  ^^^^^^ help: if this is intentional, prefix it with an underscore: `_eph_pk`

warning: unused variable: `eph_sk`
   --> src/pqc/pq_vpn.rs:779:26
    |
779 |             let (eph_pk, eph_sk) = kyber::generate_keypair(None)
    |                          ^^^^^^ help: if this is intentional, prefix it with an underscore: `_eph_sk`

warning: unused variable: `ephemeral_sk`
   --> src/pqc/signal_protocol.rs:274:28
    |
274 |         let (ephemeral_pk, ephemeral_sk) = kyber::generate_keypair(None)
    |                            ^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_ephemeral_sk`

warning: unused variable: `ct`
   --> src/pqc/signal_protocol.rs:440:14
    |
440 |         let (ct, ss) = their_kyber_public.encapsulate(None, None)
    |              ^^ help: if this is intentional, prefix it with an underscore: `_ct`

warning: unused variable: `init_message`
    --> src/pqc/signal_protocol.rs:1041:14
     |
1041 |         let (init_message, shared_secret) = self.x3dh.initiate(recipient_bundle)?;
     |              ^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_init_message`

warning: unused variable: `party_id`
   --> src/pqc/contract_proofs.rs:862:14
    |
862 |         for (party_id, public_key_bytes) in &self.party_keys {
    |              ^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_party_id`

warning: unused variable: `pair`
   --> src/pqc/qkd_extended.rs:442:36
    |
442 |     fn simulate_measurement(&self, pair: &EntangledPair, angle: f64) -> i8 {
    |                                    ^^^^ help: if this is intentional, prefix it with an underscore: `_pair`

warning: unused variable: `pair`
   --> src/pqc/qkd_extended.rs:507:36
    |
507 |     fn simulate_measurement(&self, pair: &EntangledPair, angle: f64) -> i8 {
    |                                    ^^^^ help: if this is intentional, prefix it with an underscore: `_pair`

warning: unused variable: `bob_results`
   --> src/pqc/qkd_extended.rs:619:9
    |
619 |         bob_results: &[i8],
    |         ^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_bob_results`

warning: unused variable: `nodes`
   --> src/pqc/payment_channel.rs:790:13
    |
790 |         let nodes = self.nodes.read().unwrap();
    |             ^^^^^ help: if this is intentional, prefix it with an underscore: `_nodes`

warning: unused variable: `scale_factor`
   --> src/biometric_auth/encrypted_biometric.rs:240:13
    |
240 |         let scale_factor = 1000i64;
    |             ^^^^^^^^^^^^
    |
help: you might have meant to pattern match on the similarly named constant `SCALE_FACTOR`
    |
240 -         let scale_factor = 1000i64;
240 +         let zkp::circuits::biometric_distance::SCALE_FACTOR = 1000i64;
    |
help: if this is intentional, prefix it with an underscore
    |
240 |         let _scale_factor = 1000i64;
    |             +

warning: unused variable: `pk`
   --> src/api/server.rs:865:17
    |
865 |             let pk = keygen.generate_public_key(&sk);
    |                 ^^ help: if this is intentional, prefix it with an underscore: `_pk`

warning: unused variable: `req`
    --> src/api/server.rs:1874:10
     |
1874 |     Json(req): Json<serde_json::Value>,
     |          ^^^ help: if this is intentional, prefix it with an underscore: `_req`

warning: unused variable: `r`
    --> src/api/server.rs:1951:19
     |
1951 |             .map(|r| {
     |                   ^ help: if this is intentional, prefix it with an underscore: `_r`

warning: unused variable: `state`
   --> src/api/handlers.rs:961:11
    |
961 |     State(state): State<Arc<HandlerState>>,
    |           ^^^^^ help: if this is intentional, prefix it with an underscore: `_state`

warning: unused variable: `client_kyber_bytes`
    --> src/api/handlers.rs:1011:9
     |
1011 |     let client_kyber_bytes = match base64::decode(&req.client_kyber_public_key) {
     |         ^^^^^^^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_client_kyber_bytes`

warning: unused variable: `endpoint`
   --> src/api/ddos.rs:386:45
    |
386 |     pub fn check_request(&self, ip: IpAddr, endpoint: &str) -> Result<()> {
    |                                             ^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_endpoint`

warning: unused variable: `proof_hash`
   --> src/api/age_location.rs:561:13
    |
561 |         let proof_hash = self.hash_proof(&proof.plonk_proof);
    |             ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_proof_hash`

warning: unused variable: `expected_prefix`
   --> src/api/age_location.rs:639:13
    |
639 |         let expected_prefix = hasher.finalize();
    |             ^^^^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_expected_prefix`

warning: unused variable: `state`
   --> src/api/fhe_handlers.rs:723:11
    |
723 |     State(state): State<Arc<FheAppState>>,
    |           ^^^^^ help: if this is intentional, prefix it with an underscore: `_state`

warning: unused variable: `pk`
    --> src/api/fhe_handlers.rs:1054:25
     |
1054 | fn serialize_public_key(pk: &PublicKey) -> Vec<u8> {
     |                         ^^ help: if this is intentional, prefix it with an underscore: `_pk`

warning: unused variable: `expected_n`
    --> src/api/fhe_handlers.rs:1094:41
     |
1094 | fn deserialize_ciphertext(bytes: &[u8], expected_n: usize) -> Option<Ciphertext> {
     |                                         ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_expected_n`

warning: unused variable: `client_class`
   --> src/api/ml_telemetry_middleware.rs:367:9
    |
367 |     let client_class = classify_client(req);
    |         ^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_client_class`

warning: unused variable: `protection`
    --> src/api/defense_response.rs:1291:21
     |
1291 |         if let Some(protection) = &self.ddos_protection {
     |                     ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_protection`

warning: variable does not need to be mutable
   --> src/api/ai_ddos_integration.rs:503:29
    |
503 |                 if let Some(mut rep) = protection.get_reputation(ip) {
    |                             ----^^^
    |                             |
    |                             help: remove this `mut`

warning: unused variable: `new_score`
   --> src/api/ai_ddos_integration.rs:504:25
    |
504 |                     let new_score = (rep.score * multiplier).max(0.1);
    |                         ^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_new_score`

warning: unused variable: `max_age_secs`
   --> src/api/secure_cookie.rs:767:42
    |
767 |     pub fn cleanup_revoked_tokens(&self, max_age_secs: u64) {
    |                                          ^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_max_age_secs`

warning: unused variable: `decompressed`
    --> src/infra/backup.rs:1382:13
     |
1382 |         let decompressed = if decrypted.starts_with(b"COMPRESSED:") {
     |             ^^^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_decompressed`

warning: field `arena` is never read
   --> src/fhe/mod.rs:129:5
    |
124 | pub struct FheContext {
    |            ---------- field in this struct
...
129 |     arena: Arc<RwLock<FheArena>>,
    |     ^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: fields `moduli_2x`, `n_inv`, and `twiddles_r4` are never read
  --> src/fhe/ntt.rs:43:5
   |
25 | pub struct NttTables {
   |            --------- fields in this struct
...
43 |     moduli_2x: Vec<u64>,
   |     ^^^^^^^^^
...
47 |     n_inv: Vec<u64>,
   |     ^^^^^
48 |     /// Radix-4 twiddle factors
49 |     twiddles_r4: Vec<Vec<u64>>,
   |     ^^^^^^^^^^^
   |
   = note: `NttTables` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: multiple associated items are never used
   --> src/fhe/ntt.rs:423:8
    |
340 | impl Ntt {
    | -------- associated items in this implementation
...
423 |     fn forward_radix4(&self, coeffs: &mut [u64], q: u64, twiddles: &[u64]) {
    |        ^^^^^^^^^^^^^^
...
469 |     fn inverse_radix4(&self, coeffs: &mut [u64], q: u64, inv_twiddles: &[u64], n_inv: u64) {
    |        ^^^^^^^^^^^^^^
...
698 |     fn mul_mod_lazy(a: u64, b: u64, q: u64, _q2: u64) -> u64 {
    |        ^^^^^^^^^^^^
...
704 |     fn add_mod_lazy(a: u64, b: u64, q2: u64) -> u64 {
    |        ^^^^^^^^^^^^
...
712 |     fn sub_mod_lazy(a: u64, b: u64, _q: u64, q2: u64) -> u64 {
    |        ^^^^^^^^^^^^
...
718 |     fn reduce_lazy(a: u64, q: u64) -> u64 {
    |        ^^^^^^^^^^^
...
855 |     fn radix4_butterfly_scalar(&self, coeffs: &mut [u64], k: usize, j: usize, m: usize, q: u64, twiddles: &[u64]) {
    |        ^^^^^^^^^^^^^^^^^^^^^^^
...
888 |     fn radix2_butterfly_scalar(&self, coeffs: &mut [u64], k: usize, j: usize, m: usize, q: u64, twiddles: &[u64]) {
    |        ^^^^^^^^^^^^^^^^^^^^^^^

warning: fields `r_mod_q` and `r_bits` are never read
  --> src/fhe/montgomery.rs:24:5
   |
20 | pub struct MontgomeryContext {
   |            ----------------- fields in this struct
...
24 |     r_mod_q: Vec<u64>,
   |     ^^^^^^^
...
30 |     r_bits: u32,
   |     ^^^^^^
   |
   = note: `MontgomeryContext` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: fields `arena` and `ct_pool` are never read
  --> src/fhe/bfv.rs:43:5
   |
34 | pub struct BfvContext {
   |            ---------- fields in this struct
...
43 |     arena: Arc<RwLock<FheArena>>,
   |     ^^^^^
44 |     /// Ciphertext pool (lock-free)
45 |     ct_pool: Arc<CiphertextPool>,
   |     ^^^^^^^

warning: field `n` is never read
   --> src/fhe/bfv.rs:302:5
    |
299 | pub struct SecretKey {
    |            --------- field in this struct
...
302 |     n: usize,
    |     ^
    |
    = note: `SecretKey` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: field `n` is never read
   --> src/fhe/bfv.rs:316:5
    |
313 | pub struct PublicKey {
    |            --------- field in this struct
...
316 |     n: usize,
    |     ^
    |
    = note: `PublicKey` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: field `n` is never read
   --> src/fhe/bfv.rs:404:5
    |
402 | pub struct Plaintext {
    |            --------- field in this struct
403 |     data: Vec<u64>,
404 |     n: usize,
    |     ^
    |
    = note: `Plaintext` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: methods `sample_ternary` and `sample_uniform` are never used
   --> src/fhe/bfv.rs:681:8
    |
419 | impl KeyGenerator {
    | ----------------- methods in this implementation
...
681 |     fn sample_ternary(&mut self, n: usize, q: u64) -> Vec<u64> {
    |        ^^^^^^^^^^^^^^
...
691 |     fn sample_uniform(&mut self, n: usize, q: u64) -> Vec<u64> {
    |        ^^^^^^^^^^^^^^

warning: field `n` is never read
   --> src/fhe/arena.rs:233:5
    |
231 | pub struct FheArena {
    |            -------- field in this struct
232 |     /// Polynomial degree
233 |     n: usize,
    |     ^

warning: fields `montgomery_r` and `montgomery_r_inv` are never read
  --> src/fhe/precompute.rs:21:5
   |
15 | pub struct NttTwiddleCache {
   |            --------------- fields in this struct
...
21 |     montgomery_r: u64,
   |     ^^^^^^^^^^^^
22 |     montgomery_r_inv: u64,
   |     ^^^^^^^^^^^^^^^^

warning: field `modulus` is never read
   --> src/zkp/plonk/biometric.rs:151:5
    |
149 | pub struct BiometricEncoder {
    |            ---------------- field in this struct
150 |     /// Field modulus for polynomial coefficients
151 |     modulus: [u8; 32],
    |     ^^^^^^^
    |
    = note: `BiometricEncoder` has derived impls for the traits `Debug` and `Clone`, but these are intentionally ignored during dead code analysis

warning: field `verifier_key` is never read
   --> src/zkp/plonk/biometric.rs:383:5
    |
382 | pub struct BiometricVerifier<S: CommitmentScheme> {
    |            ----------------- field in this struct
383 |     verifier_key: VerifierKey,
    |     ^^^^^^^^^^^^

warning: associated function `verify` is never used
   --> src/zkp/plonk/fri.rs:117:8
    |
 67 | impl MerkleTree {
    | --------------- associated function in this implementation
...
117 |     fn verify(root: &[u8; 32], index: usize, leaf: &[u8; 32], proof: &[[u8; 32]], n: usize) -> bool {
    |        ^^^^^^

warning: constant `N` is never used
 --> src/pqc/falcon/params.rs:9:15
  |
9 |     pub const N: usize = 512;
  |               ^

warning: constant `Q` is never used
  --> src/pqc/falcon/params.rs:12:15
   |
12 |     pub const Q: u32 = 12289;
   |               ^

warning: constant `PUBLIC_KEY_SIZE` is never used
  --> src/pqc/falcon/params.rs:15:15
   |
15 |     pub const PUBLIC_KEY_SIZE: usize = 897;
   |               ^^^^^^^^^^^^^^^

warning: constant `SECRET_KEY_SIZE` is never used
  --> src/pqc/falcon/params.rs:18:15
   |
18 |     pub const SECRET_KEY_SIZE: usize = 1281;
   |               ^^^^^^^^^^^^^^^

warning: constant `SIGNATURE_MAX_SIZE` is never used
  --> src/pqc/falcon/params.rs:21:15
   |
21 |     pub const SIGNATURE_MAX_SIZE: usize = 690;
   |               ^^^^^^^^^^^^^^^^^^

warning: constant `SIGNATURE_AVG_SIZE` is never used
  --> src/pqc/falcon/params.rs:24:15
   |
24 |     pub const SIGNATURE_AVG_SIZE: usize = 666;
   |               ^^^^^^^^^^^^^^^^^^

warning: constant `NIST_LEVEL` is never used
  --> src/pqc/falcon/params.rs:27:15
   |
27 |     pub const NIST_LEVEL: u8 = 1;
   |               ^^^^^^^^^^

warning: constant `CLASSICAL_SECURITY_BITS` is never used
  --> src/pqc/falcon/params.rs:30:15
   |
30 |     pub const CLASSICAL_SECURITY_BITS: u16 = 128;
   |               ^^^^^^^^^^^^^^^^^^^^^^^

warning: constant `SIGMA` is never used
  --> src/pqc/falcon/params.rs:33:15
   |
33 |     pub const SIGMA: f64 = 165.736617183;
   |               ^^^^^

warning: constant `BETA_SQUARED` is never used
  --> src/pqc/falcon/params.rs:36:15
   |
36 |     pub const BETA_SQUARED: u64 = 34034726;
   |               ^^^^^^^^^^^^

warning: constant `N` is never used
  --> src/pqc/falcon/params.rs:42:15
   |
42 |     pub const N: usize = 1024;
   |               ^

warning: constant `Q` is never used
  --> src/pqc/falcon/params.rs:45:15
   |
45 |     pub const Q: u32 = 12289;
   |               ^

warning: constant `PUBLIC_KEY_SIZE` is never used
  --> src/pqc/falcon/params.rs:48:15
   |
48 |     pub const PUBLIC_KEY_SIZE: usize = 1793;
   |               ^^^^^^^^^^^^^^^

warning: constant `SECRET_KEY_SIZE` is never used
  --> src/pqc/falcon/params.rs:51:15
   |
51 |     pub const SECRET_KEY_SIZE: usize = 2305;
   |               ^^^^^^^^^^^^^^^

warning: constant `SIGNATURE_MAX_SIZE` is never used
  --> src/pqc/falcon/params.rs:54:15
   |
54 |     pub const SIGNATURE_MAX_SIZE: usize = 1330;
   |               ^^^^^^^^^^^^^^^^^^

warning: constant `SIGNATURE_AVG_SIZE` is never used
  --> src/pqc/falcon/params.rs:57:15
   |
57 |     pub const SIGNATURE_AVG_SIZE: usize = 1280;
   |               ^^^^^^^^^^^^^^^^^^

warning: constant `NIST_LEVEL` is never used
  --> src/pqc/falcon/params.rs:60:15
   |
60 |     pub const NIST_LEVEL: u8 = 5;
   |               ^^^^^^^^^^

warning: constant `CLASSICAL_SECURITY_BITS` is never used
  --> src/pqc/falcon/params.rs:63:15
   |
63 |     pub const CLASSICAL_SECURITY_BITS: u16 = 256;
   |               ^^^^^^^^^^^^^^^^^^^^^^^

warning: constant `SIGMA` is never used
  --> src/pqc/falcon/params.rs:66:15
   |
66 |     pub const SIGMA: f64 = 168.388571447;
   |               ^^^^^

warning: constant `BETA_SQUARED` is never used
  --> src/pqc/falcon/params.rs:69:15
   |
69 |     pub const BETA_SQUARED: u64 = 70265242;
   |               ^^^^^^^^^^^^

warning: constant `FALCON512` is never used
  --> src/pqc/falcon/params.rs:75:15
   |
75 |     pub const FALCON512: &str = "1.3.6.1.4.1.311.89.2.1.1";
   |               ^^^^^^^^^

warning: constant `FALCON1024` is never used
  --> src/pqc/falcon/params.rs:78:15
   |
78 |     pub const FALCON1024: &str = "1.3.6.1.4.1.311.89.2.1.2";
   |               ^^^^^^^^^^

warning: constant `DILITHIUM3_SIG_SIZE` is never used
  --> src/pqc/falcon/params.rs:84:15
   |
84 |     pub const DILITHIUM3_SIG_SIZE: usize = 3309;
   |               ^^^^^^^^^^^^^^^^^^^

warning: constant `SPHINCS_128S_SIG_SIZE` is never used
  --> src/pqc/falcon/params.rs:87:15
   |
87 |     pub const SPHINCS_128S_SIG_SIZE: usize = 7856;
   |               ^^^^^^^^^^^^^^^^^^^^^

warning: constant `FALCON512_VS_DILITHIUM_RATIO` is never used
  --> src/pqc/falcon/params.rs:90:15
   |
90 |     pub const FALCON512_VS_DILITHIUM_RATIO: f64 = 666.0 / 3309.0; // ~20% of Dilithium size
   |               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: constant `FALCON512_VS_SPHINCS_RATIO` is never used
  --> src/pqc/falcon/params.rs:93:15
   |
93 |     pub const FALCON512_VS_SPHINCS_RATIO: f64 = 666.0 / 7856.0; // ~8% of SPHINCS+ size
   |               ^^^^^^^^^^^^^^^^^^^^^^^^^^

warning: field `created_at` is never read
   --> src/pqc/keystore.rs:182:5
    |
177 | struct VersionedKyberKey {
    |        ----------------- field in this struct
...
182 |     created_at: Instant,
    |     ^^^^^^^^^^

warning: fields `created_at` and `expires_at` are never read
   --> src/pqc/keystore.rs:200:5
    |
196 | struct VersionedDilithiumKey {
    |        --------------------- fields in this struct
...
200 |     created_at: Instant,
    |     ^^^^^^^^^^
201 |     expires_at: Option<Instant>,
    |     ^^^^^^^^^^

warning: fields `party_id` and `established_at` are never read
   --> src/pqc/mpc_channel.rs:158:5
    |
157 | struct PartySession {
    |        ------------ fields in this struct
158 |     party_id: String,
    |     ^^^^^^^^
...
162 |     established_at: std::time::Instant,
    |     ^^^^^^^^^^^^^^

warning: fields `party_id` and `message_one` are never read
   --> src/pqc/mpc_channel.rs:167:5
    |
166 | struct PendingSession {
    |        -------------- fields in this struct
167 |     party_id: String,
    |     ^^^^^^^^
168 |     message_one: Vec<u8>,
    |     ^^^^^^^^^^^

warning: field `pending_sessions` is never read
   --> src/pqc/mpc_channel.rs:182:5
    |
172 | pub struct MpcDealerChannel {
    |            ---------------- field in this struct
...
182 |     pending_sessions: RwLock<HashMap<String, PendingSession>>,
    |     ^^^^^^^^^^^^^^^^

warning: fields `parent_fingerprint` and `child_index` are never read
   --> src/pqc/hd_keys.rs:248:5
    |
244 | struct ExtendedKey {
    |        ----------- fields in this struct
...
248 |     parent_fingerprint: [u8; 4],
    |     ^^^^^^^^^^^^^^^^^^
249 |     child_index: u32,
    |     ^^^^^^^^^^^
    |
    = note: `ExtendedKey` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: method `retire` is never used
   --> src/pqc/rotation.rs:265:8
    |
242 | impl VersionedKyberKey {
    | ---------------------- method in this implementation
...
265 |     fn retire(&mut self) {
    |        ^^^^^^

warning: fields `identity` and `encryption_public` are never read
   --> src/pqc/messaging.rs:239:5
    |
238 | pub struct MessageSender {
    |            ------------- fields in this struct
239 |     identity: String,
    |     ^^^^^^^^
240 |     signing_keypair: DilithiumKeyPair,
241 |     encryption_public: KyberPublicKey,
    |     ^^^^^^^^^^^^^^^^^

warning: field `identity` is never read
   --> src/pqc/messaging.rs:388:5
    |
387 | pub struct MessageReceiver {
    |            --------------- field in this struct
388 |     identity: String,
    |     ^^^^^^^^

warning: field `created_at` is never read
   --> src/pqc/messaging.rs:497:5
    |
494 | struct GroupKey {
    |        -------- field in this struct
...
497 |     created_at: u64,
    |     ^^^^^^^^^^
    |
    = note: `GroupKey` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: field `message` is never read
   --> src/pqc/blind.rs:140:5
    |
139 | pub struct BlindRequester {
    |            -------------- field in this struct
140 |     message: Vec<u8>,
    |     ^^^^^^^

warning: field `id` is never read
   --> src/pqc/blind.rs:570:5
    |
569 | pub struct CredentialSecret {
    |            ---------------- field in this struct
570 |     id: [u8; 16],
    |     ^^
    |
    = note: `CredentialSecret` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: field `issuer_key` is never read
   --> src/pqc/blind.rs:680:5
    |
679 | pub struct CredentialVerifier {
    |            ------------------ field in this struct
680 |     issuer_key: DilithiumPublicKey,
    |     ^^^^^^^^^^

warning: function `kdf_rk` is never used
  --> src/pqc/ratchet.rs:68:4
   |
68 | fn kdf_rk(root_key: &[u8; 32], shared_secret: &[u8]) -> ([u8; 32], [u8; 32]) {
   |    ^^^^^^

warning: method `ratchet_step` is never used
   --> src/pqc/ratchet.rs:279:8
    |
252 | impl RatchetState {
    | ----------------- method in this implementation
...
279 |     fn ratchet_step(&mut self, received_public_key: &KyberPublicKey) -> Result<Vec<u8>> {
    |        ^^^^^^^^^^^^

warning: fields `identity_key` and `remote_identity` are never read
   --> src/pqc/ratchet.rs:383:5
    |
381 | pub struct DoubleRatchet {
    |            ------------- fields in this struct
382 |     state: RatchetState,
383 |     identity_key: Option<DilithiumKeyPair>,
    |     ^^^^^^^^^^^^
384 |     remote_identity: Option<DilithiumPublicKey>,
    |     ^^^^^^^^^^^^^^^

warning: field `ephemeral_private` is never read
   --> src/pqc/ratchet.rs:656:5
    |
654 | pub struct X3DHInitiator {
    |            ------------- field in this struct
655 |     identity_key: DilithiumKeyPair,
656 |     ephemeral_private: KyberPrivateKey,
    |     ^^^^^^^^^^^^^^^^^

warning: function `bytes_to_u512` is never used
   --> src/pqc/threshold.rs:120:4
    |
120 | fn bytes_to_u512(a: &[u8; 32]) -> [u64; 8] {
    |    ^^^^^^^^^^^^^

warning: function `u256_to_bytes` is never used
   --> src/pqc/threshold.rs:132:4
    |
132 | fn u256_to_bytes(a: &[u64; 4]) -> [u8; 32] {
    |    ^^^^^^^^^^^^^

warning: field `public_params` is never read
   --> src/pqc/threshold.rs:726:5
    |
722 | pub struct ThresholdSigner {
    |            --------------- field in this struct
...
726 |     public_params: ThresholdPublicKey,
    |     ^^^^^^^^^^^^^

warning: field `nonce_commitment` is never read
   --> src/pqc/threshold.rs:734:5
    |
731 | struct SigningSession {
    |        -------------- field in this struct
...
734 |     nonce_commitment: [u8; 32],
    |     ^^^^^^^^^^^^^^^^

warning: field `encryption_sk` is never read
   --> src/pqc/vrf.rs:469:5
    |
464 | pub struct BeaconParticipant {
    |            ----------------- field in this struct
...
469 |     encryption_sk: KyberPrivateKey,
    |     ^^^^^^^^^^^^^

warning: fields `public_key`, `joined_at`, and `credential` are never read
   --> src/pqc/ring_sig.rs:446:5
    |
445 | struct GroupMemberInfo {
    |        --------------- fields in this struct
446 |     public_key: DilithiumPublicKey,
    |     ^^^^^^^^^^
447 |     joined_at: u64,
    |     ^^^^^^^^^
448 |     credential: GroupCredential,
    |     ^^^^^^^^^^
    |
    = note: `GroupMemberInfo` has derived impls for the traits `Clone` and `Debug`, but these are intentionally ignored during dead code analysis

warning: field `manager_pk` is never read
   --> src/pqc/ring_sig.rs:649:5
    |
643 | pub struct GroupMember {
    |            ----------- field in this struct
...
649 |     manager_pk: DilithiumPublicKey,
    |     ^^^^^^^^^^

warning: field `manager_pk` is never read
   --> src/pqc/ring_sig.rs:750:5
    |
748 | pub struct GroupVerifier {
    |            ------------- field in this struct
749 |     /// Manager's public key
750 |     manager_pk: DilithiumPublicKey,
    |     ^^^^^^^^^^

warning: field `sensitivity` is never read
   --> src/pqc/differential_privacy.rs:267:5
    |
265 | pub struct GaussianMechanism {
    |            ----------------- field in this struct
266 |     /// Sensitivity of the query
267 |     sensitivity: f64,
    |     ^^^^^^^^^^^

warning: field `bell_threshold` is never read
   --> src/pqc/qkd.rs:452:5
    |
448 | pub struct E91Protocol {
    |            ----------- field in this struct
...
452 |     bell_threshold: f64,
    |     ^^^^^^^^^^^^^^

warning: field `error_rate` is never read
   --> src/pqc/qkd.rs:740:5
    |
736 | pub struct InformationReconciliation {
    |            ------------------------- field in this struct
...
740 |     error_rate: f64,
    |     ^^^^^^^^^^

warning: field `enc_keypair` is never read
   --> src/pqc/bridge.rs:370:5
    |
366 | pub struct AtomicSwap {
    |            ---------- field in this struct
...
370 |     enc_keypair: (KyberPublicKey, KyberPrivateKey),
    |     ^^^^^^^^^^^

warning: field `enc_keypair` is never read
   --> src/pqc/bridge.rs:804:5
    |
798 | pub struct MultiChainKeyManager {
    |            -------------------- field in this struct
...
804 |     enc_keypair: (KyberPublicKey, KyberPrivateKey),
    |     ^^^^^^^^^^^

warning: field `owner` is never read
   --> src/pqc/tee.rs:491:5
    |
483 | pub struct TzSharedMemory {
    |            -------------- field in this struct
...
491 |     owner: TzWorld,
    |     ^^^^^
    |
    = note: `TzSharedMemory` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: field `ta_uuid` is never read
   --> src/pqc/tee.rs:567:5
    |
563 | pub struct TaSession {
    |            --------- field in this struct
...
567 |     ta_uuid: TaUuid,
    |     ^^^^^^^

warning: field `master_key` is never read
   --> src/pqc/hsm.rs:288:5
    |
276 | pub struct HsmToken {
    |            -------- field in this struct
...
288 |     master_key: [u8; 32],
    |     ^^^^^^^^^^

warning: fields `description` and `hardware_slot` are never read
   --> src/pqc/hsm.rs:442:5
    |
438 | pub struct HsmSlot {
    |            ------- fields in this struct
...
442 |     description: String,
    |     ^^^^^^^^^^^
...
446 |     hardware_slot: bool,
    |     ^^^^^^^^^^^^^

warning: fields `operation_state` and `created` are never read
   --> src/pqc/hsm.rs:506:5
    |
496 | pub struct HsmSession {
    |            ---------- fields in this struct
...
506 |     operation_state: Option<OperationState>,
    |     ^^^^^^^^^^^^^^^
507 |     /// Created timestamp
508 |     created: u64,
    |     ^^^^^^^

warning: variants `Sign`, `Verify`, `Encrypt`, and `Decrypt` are never constructed
   --> src/pqc/hsm.rs:515:5
    |
513 | enum OperationState {
    |      -------------- variants in this enum
514 |     /// Sign operation in progress
515 |     Sign {
    |     ^^^^
...
520 |     Verify {
    |     ^^^^^^
...
525 |     Encrypt {
    |     ^^^^^^^
...
530 |     Decrypt {
    |     ^^^^^^^
    |
    = note: `OperationState` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: field `jwks` is never read
    --> src/pqc/oauth.rs:1272:5
     |
1268 | pub struct ResourceServer {
     |            -------------- field in this struct
...
1272 |     jwks: PqJwks,
     |     ^^^^

warning: fields `threshold` and `public_key_shares` are never read
   --> src/pqc/dkg_v2.rs:509:5
    |
501 | pub struct DkgV2Participant {
    |            ---------------- fields in this struct
...
509 |     threshold: usize,
    |     ^^^^^^^^^
...
537 |     public_key_shares: HashMap<ParticipantId, Vec<u8>>,
    |     ^^^^^^^^^^^^^^^^^

warning: field `threshold` is never read
   --> src/pqc/dkg_v2.rs:887:5
    |
883 | pub struct DkgCoordinator {
    |            -------------- field in this struct
...
887 |     threshold: usize,
    |     ^^^^^^^^^

warning: field `participant_id` is never read
    --> src/pqc/dkg_v2.rs:1137:5
     |
1135 | pub struct ProactiveRefresh {
     |            ---------------- field in this struct
1136 |     /// Participant ID
1137 |     participant_id: ParticipantId,
     |     ^^^^^^^^^^^^^^

warning: fields `user_id`, `oprf`, `ephemeral_kyber`, and `created_at` are never read
   --> src/pqc/opaque.rs:697:5
    |
696 | struct AuthSession {
    |        ----------- fields in this struct
697 |     user_id: UserId,
    |     ^^^^^^^
698 |     oprf: OprfServer,
    |     ^^^^
699 |     ephemeral_kyber: (KyberPublicKey, KyberPrivateKey),
    |     ^^^^^^^^^^^^^^^
...
704 |     created_at: u64,
    |     ^^^^^^^^^^

warning: field `num_parameters` is never read
   --> src/pqc/secure_agg.rs:714:5
    |
711 | pub struct FederatedAggregator {
    |            ------------------- field in this struct
...
714 |     num_parameters: usize,
    |     ^^^^^^^^^^^^^^

warning: field `public_key` is never read
   --> src/pqc/aml.rs:969:5
    |
963 | pub struct AmlEngine {
    |            --------- field in this struct
...
969 |     public_key: DilithiumPublicKey,
    |     ^^^^^^^^^^

warning: field `hsm_session` is never read
    --> src/pqc/ceremony.rs:1006:5
     |
 982 | pub struct KeyCeremony {
     |            ----------- field in this struct
...
1006 |     hsm_session: Option<SessionHandle>,
     |     ^^^^^^^^^^^

warning: method `available` is never used
   --> src/pqc/rate_limit.rs:487:8
    |
466 | impl TokenBucket {
    | ---------------- method in this implementation
...
487 |     fn available(&mut self) -> f64 {
    |        ^^^^^^^^^

warning: fields `extractable` and `attributes` are never read
    --> src/pqc/grpc.rs:1149:5
     |
1136 | struct StoredKey {
     |        --------- fields in this struct
...
1149 |     extractable: bool,
     |     ^^^^^^^^^^^
1150 |     attributes: HashMap<String, String>,
     |     ^^^^^^^^^^
     |
     = note: `StoredKey` has a derived impl for the trait `Clone`, but this is intentionally ignored during dead code analysis

warning: field `description` is never read
    --> src/pqc/telemetry.rs:1023:5
     |
1021 | pub struct Histogram {
     |            --------- field in this struct
1022 |     name: String,
1023 |     description: String,
     |     ^^^^^^^^^^^

warning: field `signing_keypair` is never read
   --> src/pqc/multi_tenant.rs:441:5
    |
429 | pub struct MultiTenantManager {
    |            ------------------ field in this struct
...
441 |     signing_keypair: DilithiumKeyPair,
    |     ^^^^^^^^^^^^^^^

warning: field `pending_requests` is never read
   --> src/pqc/hw_wallet.rs:907:5
    |
899 | pub struct SimulatedWallet {
    |            --------------- field in this struct
...
907 |     pending_requests: RwLock<Vec<SigningRequest>>,
    |     ^^^^^^^^^^^^^^^^

warning: field `listeners` is never read
    --> src/pqc/hw_wallet.rs:1122:5
     |
1116 | pub struct HwWalletManager {
     |            --------------- field in this struct
...
1122 |     listeners: RwLock<Vec<Box<dyn Fn(&WalletEvent) + Send + Sync>>>,
     |     ^^^^^^^^^

warning: fields `previous_keys`, `remote_endpoint`, `local_identity`, and `remote_identity` are never read
   --> src/pqc/pq_vpn.rs:530:5
    |
518 | pub struct TunnelSession {
    |            ------------- fields in this struct
...
530 |     previous_keys: Option<SessionKeys>,
    |     ^^^^^^^^^^^^^
531 |     /// Remote endpoint
532 |     remote_endpoint: Option<SocketAddr>,
    |     ^^^^^^^^^^^^^^^
533 |     /// Local identity
534 |     local_identity: IdentityPayload,
    |     ^^^^^^^^^^^^^^
535 |     /// Remote identity
536 |     remote_identity: Option<IdentityPayload>,
    |     ^^^^^^^^^^^^^^^

warning: fields `stun_servers` and `keepalive_interval` are never read
   --> src/pqc/pq_vpn.rs:682:5
    |
680 | pub struct NatTraversal {
    |            ------------ fields in this struct
681 |     /// STUN servers
682 |     stun_servers: Vec<SocketAddr>,
    |     ^^^^^^^^^^^^
683 |     /// Keepalive interval for NAT binding refresh
684 |     keepalive_interval: Duration,
    |     ^^^^^^^^^^^^^^^^^^

warning: fields `nat_traversal` and `obfuscator` are never read
    --> src/pqc/pq_vpn.rs:1041:5
     |
1029 | pub struct VpnPeer {
     |            ------- fields in this struct
...
1041 |     nat_traversal: NatTraversal,
     |     ^^^^^^^^^^^^^
1042 |     /// Traffic obfuscator
1043 |     obfuscator: Option<TrafficObfuscator>,
     |     ^^^^^^^^^^

warning: field `holder_id` is never read
   --> src/pqc/zk_identity.rs:913:5
    |
911 | pub struct CredentialHolder {
    |            ---------------- field in this struct
912 |     /// Holder ID
913 |     holder_id: String,
    |     ^^^^^^^^^

warning: field `owner_keypair` is never read
   --> src/pqc/decentralized_recovery.rs:394:5
    |
390 | pub struct SocialRecoveryManager {
    |            --------------------- field in this struct
...
394 |     owner_keypair: DilithiumKeyPair,
    |     ^^^^^^^^^^^^^

warning: fields `our_identity` and `their_identity` are never read
   --> src/pqc/signal_protocol.rs:550:5
    |
546 | pub struct SignalSession {
    |            ------------- fields in this struct
...
550 |     our_identity: PublicIdentity,
    |     ^^^^^^^^^^^^
551 |     /// Their identity
552 |     their_identity: PublicIdentity,
    |     ^^^^^^^^^^^^^^

warning: field `kyber_private` is never read
   --> src/pqc/federated_learning.rs:337:5
    |
330 | pub struct FederatedClient {
    |            --------------- field in this struct
...
337 |     kyber_private: KyberPrivateKey,
    |     ^^^^^^^^^^^^^

warning: field `byzantine_tolerance` is never read
   --> src/pqc/federated_learning.rs:519:5
    |
515 | pub struct ModelAggregator {
    |            --------------- field in this struct
...
519 |     byzantine_tolerance: usize,
    |     ^^^^^^^^^^^^^^^^^^^

warning: field `signing_key` is never read
   --> src/pqc/federated_learning.rs:761:5
    |
757 | pub struct FederatedServer {
    |            --------------- field in this struct
...
761 |     signing_key: DilithiumKeyPair,
    |     ^^^^^^^^^^^

warning: field `config` is never read
   --> src/pqc/qkd_extended.rs:314:5
    |
312 | pub struct DecoyBB84Bob {
    |            ------------ field in this struct
313 |     /// Configuration
314 |     config: DecoyBB84Config,
    |     ^^^^^^

warning: field `config` is never read
   --> src/pqc/qkd_extended.rs:399:5
    |
397 | pub struct E91Alice {
    |            -------- field in this struct
398 |     /// Configuration
399 |     config: E91Config,
    |     ^^^^^^

warning: field `config` is never read
   --> src/pqc/qkd_extended.rs:464:5
    |
462 | pub struct E91Bob {
    |            ------ field in this struct
463 |     /// Configuration
464 |     config: E91Config,
    |     ^^^^^^

warning: field `signing_key` is never read
   --> src/pqc/qkd_extended.rs:799:5
    |
794 | pub struct HybridQkdPqc {
    |            ------------ field in this struct
...
799 |     signing_key: DilithiumKeyPair,
    |     ^^^^^^^^^^^

warning: field `router` is never read
    --> src/pqc/payment_channel.rs:1045:5
     |
1035 | pub struct ChannelManager {
     |            -------------- field in this struct
...
1045 |     router: PaymentRouter,
     |     ^^^^^^

warning: field `embedding_dim` is never read
   --> src/biometric_auth/encrypted_biometric.rs:256:5
    |
253 | pub struct BiometricDecryptor {
    |            ------------------ field in this struct
...
256 |     embedding_dim: usize,
    |     ^^^^^^^^^^^^^

warning: field `ctx` is never read
   --> src/biometric_auth/encrypted_biometric.rs:349:5
    |
348 | pub struct EncryptedBiometricOps {
    |            --------------------- field in this struct
349 |     ctx: Arc<BfvContext>,
    |     ^^^

warning: field `max_degree` is never read
  --> src/biometric_auth/fhe_plonk_bridge.rs:27:5
   |
19 | pub struct FhePlonkBridge<C: CommitmentScheme> {
   |            -------------- field in this struct
...
27 |     max_degree: usize,
   |     ^^^^^^^^^^

warning: fields `user_id` and `enrolled_at` are never read
   --> src/biometric_auth/unified_api.rs:161:5
    |
160 | struct UserRecord {
    |        ---------- fields in this struct
161 |     user_id: String,
    |     ^^^^^^^
...
166 |     enrolled_at: u64,
    |     ^^^^^^^^^^^

warning: constant `MAX_CIPHERTEXT_SIZE` is never used
   --> src/api/handlers.rs:179:7
    |
179 | const MAX_CIPHERTEXT_SIZE: usize = 10 * 1024 * 1024;
    |       ^^^^^^^^^^^^^^^^^^^

warning: constant `MAX_ASSOCIATED_DATA_SIZE` is never used
   --> src/api/handlers.rs:183:7
    |
183 | const MAX_ASSOCIATED_DATA_SIZE: usize = 1024;
    |       ^^^^^^^^^^^^^^^^^^^^^^^^

warning: struct `EncryptRequest` is never constructed
   --> src/api/handlers.rs:482:12
    |
482 | pub struct EncryptRequest {
    |            ^^^^^^^^^^^^^^

warning: struct `EncryptResponse` is never constructed
   --> src/api/handlers.rs:493:12
    |
493 | pub struct EncryptResponse {
    |            ^^^^^^^^^^^^^^^

warning: struct `RateLimiter` is never constructed
   --> src/api/connection.rs:210:12
    |
210 | pub struct RateLimiter {
    |            ^^^^^^^^^^^

warning: associated items `new`, `now_secs`, `try_acquire`, `refill`, and `available` are never used
   --> src/api/connection.rs:222:12
    |
221 | impl RateLimiter {
    | ---------------- associated items in this implementation
222 |     pub fn new(max_tokens: u64, refill_rate: u64) -> Self {
    |            ^^^
...
231 |     fn now_secs() -> u64 {
    |        ^^^^^^^^
...
239 |     pub fn try_acquire(&self, count: u64) -> bool {
    |            ^^^^^^^^^^^
...
260 |     fn refill(&self) {
    |        ^^^^^^
...
283 |     pub fn available(&self) -> u64 {
    |            ^^^^^^^^^

warning: field `pending_challenge` is never read
   --> src/api/ddos.rs:220:5
    |
210 | struct AdaptiveEntry {
    |        ------------- field in this struct
...
220 |     pending_challenge: Option<String>,
    |     ^^^^^^^^^^^^^^^^^

warning: fields `name` and `metric_type` are never read
   --> src/api/prometheus.rs:224:5
    |
223 | struct MetricDesc {
    |        ---------- fields in this struct
224 |     name: String,
    |     ^^^^
225 |     help: String,
226 |     metric_type: MetricType,
    |     ^^^^^^^^^^^
    |
    = note: `MetricDesc` has derived impls for the traits `Debug` and `Clone`, but these are intentionally ignored during dead code analysis

warning: method `collector` is never used
   --> src/api/ml_telemetry_middleware.rs:124:8
    |
122 | impl<S> MlTelemetryMiddleware<S> {
    | -------------------------------- method in this implementation
123 |     /// Get the collector (custom or global)
124 |     fn collector(&self) -> &MlTelemetryCollector {
    |        ^^^^^^^^^

warning: field `config` is never read
   --> src/api/telemetry_storage.rs:550:5
    |
549 | pub struct TelemetryTimescaleStorage {
    |            ------------------------- field in this struct
550 |     config: TimescaleConfig,
    |     ^^^^^^

warning: field `coalescer` is never read
   --> src/api/ai_detection.rs:248:5
    |
237 | pub struct AiDetectionClient {
    |            ----------------- field in this struct
...
248 |     coalescer: Option<Arc<RequestCoalescer>>,
    |     ^^^^^^^^^

warning: field `window_ms` is never read
   --> src/api/ai_detection.rs:759:5
    |
758 | pub struct RequestCoalescer {
    |            ---------------- field in this struct
759 |     window_ms: u64,
    |     ^^^^^^^^^

warning: field `created_at` is never read
   --> src/api/ai_detection.rs:773:5
    |
770 | struct PendingRequest {
    |        -------------- field in this struct
...
773 |     created_at: Instant,
    |     ^^^^^^^^^^

warning: field `requests` is never read
   --> src/api/ai_detection.rs:778:5
    |
777 | struct BatchRequest {
    |        ------------ field in this struct
778 |     requests: Vec<(String, ThreatAnalysisRequest, oneshot::Sender<ThreatAssessment>)>,
    |     ^^^^^^^^

warning: field `ddos_protection` is never read
    --> src/api/defense_response.rs:1401:5
     |
1400 | pub struct BlockClientHandler {
     |            ------------------ field in this struct
1401 |     ddos_protection: Option<Arc<crate::api::ddos::DdosProtection>>,
     |     ^^^^^^^^^^^^^^^

warning: field `applied` is never read
  --> src/api/ai_ddos_integration.rs:89:5
   |
86 | struct CachedAssessment {
   |        ---------------- field in this struct
...
89 |     applied: bool,
   |     ^^^^^^^
   |
   = note: `CachedAssessment` has derived impls for the traits `Clone` and `Debug`, but these are intentionally ignored during dead code analysis

warning: field `client_stability` is never read
   --> src/api/ai_harvest.rs:195:5
    |
186 | struct IsolationForestThresholds {
    |        ------------------------- field in this struct
...
195 |     client_stability: f32,
    |     ^^^^^^^^^^^^^^^^
    |
    = note: `IsolationForestThresholds` has derived impls for the traits `Clone` and `Debug`, but these are intentionally ignored during dead code analysis

warning: field `urgency_thresholds` is never read
   --> src/api/ai_crypto_health.rs:393:5
    |
387 | pub struct CryptoHealthMonitor {
    |            ------------------- field in this struct
...
393 |     urgency_thresholds: [(UrgencyLevel, u32); 4],
    |     ^^^^^^^^^^^^^^^^^^

warning: field `registry` is never read
   --> src/infra/discovery.rs:279:5
    |
278 | pub struct ServiceMesh {
    |            ----------- field in this struct
279 |     registry: Arc<ServiceRegistry>,
    |     ^^^^^^^^

warning: fields `max_waiting` and `waiting` are never read
   --> src/infra/reliability.rs:223:5
    |
219 | pub struct Bulkhead {
    |            -------- fields in this struct
...
223 |     max_waiting: usize,
    |     ^^^^^^^^^^^
224 |     waiting: AtomicUsize,
    |     ^^^^^^^

warning: field `cleanup_interval` is never read
   --> src/infra/reliability.rs:503:5
    |
501 | pub struct UserRateLimitManager {
    |            -------------------- field in this struct
502 |     limiters: RwLock<HashMap<String, (Arc<RateLimiter>, PricingTier)>>,
503 |     cleanup_interval: Duration,
    |     ^^^^^^^^^^^^^^^^

warning: field `preferred_node` is never read
   --> src/infra/cpu.rs:282:5
    |
281 | pub struct NumaAllocation {
    |            -------------- field in this struct
282 |     preferred_node: usize,
    |     ^^^^^^^^^^^^^^

warning: field `region` is never read
   --> src/infra/backup.rs:846:5
    |
844 | pub struct S3Storage {
    |            --------- field in this struct
845 |     bucket: String,
846 |     region: String,
    |     ^^^^^^

warning: field `ollama_url` is never read
   --> src/ai/router.rs:216:5
    |
205 | pub struct AiRouter {
    |            -------- field in this struct
...
216 |     ollama_url: String,
    |     ^^^^^^^^^^

warning: field `rate_limiter` is never read
   --> src/solana/rpc_client.rs:138:5
    |
128 | pub struct SolanaRpcClient {
    |            --------------- field in this struct
...
138 |     rate_limiter: Option<Arc<Semaphore>>,
    |     ^^^^^^^^^^^^

warning: comparison is useless due to type limits
   --> src/pqc/shamir.rs:162:12
    |
162 |         if total_shares > 255 {
    |            ^^^^^^^^^^^^^^^^^^
    |
    = note: `#[warn(unused_comparisons)]` on by default

warning: hiding a lifetime that's elided elsewhere is confusing
  --> src/api/connection.rs:63:26
   |
63 |     pub async fn acquire(&self) -> Option<ConnectionGuard> {
   |                          ^^^^^            ^^^^^^^^^^^^^^^ the same lifetime is hidden here
   |                          |
   |                          the lifetime is elided here
   |
   = help: the same lifetime is referred to in inconsistent ways, making the signature confusing
   = note: `#[warn(mismatched_lifetime_syntaxes)]` on by default
help: use `'_` for type paths
   |
63 |     pub async fn acquire(&self) -> Option<ConnectionGuard<'_>> {
   |                                                          ++++

warning: hiding a lifetime that's elided elsewhere is confusing
  --> src/api/connection.rs:81:24
   |
81 |     pub fn try_acquire(&self) -> Option<ConnectionGuard> {
   |                        ^^^^^            ^^^^^^^^^^^^^^^ the same lifetime is hidden here
   |                        |
   |                        the lifetime is elided here
   |
   = help: the same lifetime is referred to in inconsistent ways, making the signature confusing
help: use `'_` for type paths
   |
81 |     pub fn try_acquire(&self) -> Option<ConnectionGuard<'_>> {
   |                                                        ++++

warning: hiding a lifetime that's elided elsewhere is confusing
   --> src/api/connection.rs:104:34
    |
104 |     pub async fn acquire_timeout(&self, timeout: std::time::Duration) -> Option<ConnectionGuard> {
    |                                  ^^^^^ the lifetime is elided here              ^^^^^^^^^^^^^^^ the same lifetime is hidden here
    |
    = help: the same lifetime is referred to in inconsistent ways, making the signature confusing
help: use `'_` for type paths
    |
104 |     pub async fn acquire_timeout(&self, timeout: std::time::Duration) -> Option<ConnectionGuard<'_>> {
    |                                                                                                ++++

warning: hiding a lifetime that's elided elsewhere is confusing
   --> src/api/connection.rs:128:47
    |
128 |     pub async fn acquire_with_default_timeout(&self) -> Option<ConnectionGuard> {
    |                                               ^^^^^            ^^^^^^^^^^^^^^^ the same lifetime is hidden here
    |                                               |
    |                                               the lifetime is elided here
    |
    = help: the same lifetime is referred to in inconsistent ways, making the signature confusing
help: use `'_` for type paths
    |
128 |     pub async fn acquire_with_default_timeout(&self) -> Option<ConnectionGuard<'_>> {
    |                                                                               ++++

warning: hiding a lifetime that's elided elsewhere is confusing
   --> src/infra/reliability.rs:244:24
    |
244 |     pub fn try_acquire(&self) -> Option<BulkheadPermit> {
    |                        ^^^^^            ^^^^^^^^^^^^^^ the same lifetime is hidden here
    |                        |
    |                        the lifetime is elided here
    |
    = help: the same lifetime is referred to in inconsistent ways, making the signature confusing
help: use `'_` for type paths
    |
244 |     pub fn try_acquire(&self) -> Option<BulkheadPermit<'_>> {
    |                                                       ++++

warning: hiding a lifetime that's elided elsewhere is confusing
   --> src/infra/reliability.rs:812:24
    |
812 |     pub fn acquire_gpu(&self, tier: PricingTier) -> Option<GpuSlot> {
    |                        ^^^^^ the lifetime is elided here   ^^^^^^^ the same lifetime is hidden here
    |
    = help: the same lifetime is referred to in inconsistent ways, making the signature confusing
help: use `'_` for type paths
    |
812 |     pub fn acquire_gpu(&self, tier: PricingTier) -> Option<GpuSlot<'_>> {
    |                                                                   ++++

warning: `h33-xeon-api` (lib) generated 530 warnings (run `cargo fix --lib -p h33-xeon-api` to apply 263 suggestions)
warning: `h33-xeon-api` (lib) generated 530 warnings (530 duplicates)
    Finished `bench` profile [optimized] target(s) in 0.18s
warning: the following packages contain code that will be rejected by a future version of Rust: redis v0.24.0
note: to see what the problems were, use the option `--future-incompat-report`, or run `cargo report future-incompatibilities --id 1`
     Running benches/fhe_bench.rs (target/release/deps/fhe_bench-bd874ad5843a347d)
Gnuplot not found, using plotters backend
Benchmarking Context Init/init/Turbo
Benchmarking Context Init/init/Turbo: Warming up for 3.0000 s
Benchmarking Context Init/init/Turbo: Collecting 10 samples in estimated 5.0622 s (3630 iterations)
Benchmarking Context Init/init/Turbo: Analyzing
Context Init/init/Turbo time:   [1.3867 ms 1.4040 ms 1.4184 ms]
                        change: [-1.9463% -0.9539% +0.0097%] (p = 0.39 > 0.05)
                        No change in performance detected.
Found 1 outliers among 10 measurements (10.00%)
  1 (10.00%) low mild
Benchmarking Context Init/init/Standard
Benchmarking Context Init/init/Standard: Warming up for 3.0000 s
Benchmarking Context Init/init/Standard: Collecting 10 samples in estimated 5.7134 s (165 iterations)
Benchmarking Context Init/init/Standard: Analyzing
Context Init/init/Standard
                        time:   [34.395 ms 34.765 ms 35.225 ms]
                        change: [-2.0284% -0.9706% +0.1620%] (p = 0.12 > 0.05)
                        No change in performance detected.
Found 1 outliers among 10 measurements (10.00%)
  1 (10.00%) high mild
Benchmarking Context Init/init/Precision
Benchmarking Context Init/init/Precision: Warming up for 3.0000 s

Warning: Unable to complete 10 samples in 5.0s. You may wish to increase target time to 23.7s.
Benchmarking Context Init/init/Precision: Collecting 10 samples in estimated 23.734 s (10 iterations)
Benchmarking Context Init/init/Precision: Analyzing
Context Init/init/Precision
                        time:   [2.3491 s 2.3745 s 2.3967 s]
                        change: [-4.4311% -3.0319% -1.6783%] (p = 0.07 > 0.05)
                        No change in performance detected.
Found 2 outliers among 10 measurements (20.00%)
  1 (10.00%) low severe
  1 (10.00%) high mild

Benchmarking Key Generation/secret_key/Turbo
Benchmarking Key Generation/secret_key/Turbo: Warming up for 3.0000 s
Benchmarking Key Generation/secret_key/Turbo: Collecting 10 samples in estimated 5.0005 s (66k iterations)
Benchmarking Key Generation/secret_key/Turbo: Analyzing
Key Generation/secret_key/Turbo
                        time:   [73.605 µs 74.249 µs 75.110 µs]
                        change: [-1.9426% -1.1880% -0.4997%] (p = 0.12 > 0.05)
                        No change in performance detected.
Benchmarking Key Generation/public_key/Turbo
Benchmarking Key Generation/public_key/Turbo: Warming up for 3.0000 s
Benchmarking Key Generation/public_key/Turbo: Collecting 10 samples in estimated 5.0057 s (24k iterations)
Benchmarking Key Generation/public_key/Turbo: Analyzing
Key Generation/public_key/Turbo
                        time:   [203.03 µs 204.77 µs 207.12 µs]
                        change: [-1.0512% -0.3043% +0.4176%] (p = 0.68 > 0.05)
                        No change in performance detected.
Found 1 outliers among 10 measurements (10.00%)
  1 (10.00%) low mild
Benchmarking Key Generation/relin_keys/Turbo
Benchmarking Key Generation/relin_keys/Turbo: Warming up for 3.0000 s
Benchmarking Key Generation/relin_keys/Turbo: Collecting 10 samples in estimated 5.0040 s (46k iterations)
Benchmarking Key Generation/relin_keys/Turbo: Analyzing
Key Generation/relin_keys/Turbo
                        time:   [108.11 µs 108.74 µs 109.43 µs]
                        change: [+15.223% +16.089% +17.035%] (p = 0.01 < 0.05)
                        Performance has regressed.
Benchmarking Key Generation/secret_key/Standard
Benchmarking Key Generation/secret_key/Standard: Warming up for 3.0000 s
Benchmarking Key Generation/secret_key/Standard: Collecting 10 samples in estimated 5.0043 s (23k iterations)
Benchmarking Key Generation/secret_key/Standard: Analyzing
Key Generation/secret_key/Standard
                        time:   [218.89 µs 219.91 µs 220.77 µs]
                        change: [-1.0856% +0.3320% +1.4871%] (p = 0.66 > 0.05)
                        No change in performance detected.
Benchmarking Key Generation/public_key/Standard
Benchmarking Key Generation/public_key/Standard: Warming up for 3.0000 s
Benchmarking Key Generation/public_key/Standard: Collecting 10 samples in estimated 5.0018 s (7315 iterations)
Benchmarking Key Generation/public_key/Standard: Analyzing
Key Generation/public_key/Standard
                        time:   [686.86 µs 693.78 µs 697.54 µs]
                        change: [-1.7039% -0.7608% +0.1250%] (p = 0.16 > 0.05)
                        No change in performance detected.
Benchmarking Key Generation/relin_keys/Standard
Benchmarking Key Generation/relin_keys/Standard: Warming up for 3.0000 s
Benchmarking Key Generation/relin_keys/Standard: Collecting 10 samples in estimated 5.0147 s (10k iterations)
Benchmarking Key Generation/relin_keys/Standard: Analyzing
Key Generation/relin_keys/Standard
                        time:   [488.44 µs 491.49 µs 493.13 µs]
                        change: [-2.8743% -2.2156% -1.6107%] (p = 0.00 < 0.05)
                        Performance has improved.
Found 1 outliers among 10 measurements (10.00%)
  1 (10.00%) low severe
Benchmarking Key Generation/secret_key/Precision
Benchmarking Key Generation/secret_key/Precision: Warming up for 3.0000 s
Benchmarking Key Generation/secret_key/Precision: Collecting 10 samples in estimated 5.0322 s (6655 iterations)
Benchmarking Key Generation/secret_key/Precision: Analyzing
Key Generation/secret_key/Precision
                        time:   [754.67 µs 759.33 µs 762.92 µs]
                        change: [-2.6776% -2.0098% -1.2754%] (p = 0.02 < 0.05)
                        Performance has improved.
Found 1 outliers among 10 measurements (10.00%)
  1 (10.00%) low mild
Benchmarking Key Generation/public_key/Precision
Benchmarking Key Generation/public_key/Precision: Warming up for 3.0000 s
Benchmarking Key Generation/public_key/Precision: Collecting 10 samples in estimated 5.0116 s (1980 iterations)
Benchmarking Key Generation/public_key/Precision: Analyzing
Key Generation/public_key/Precision
                        time:   [2.5384 ms 2.5515 ms 2.5617 ms]
                        change: [-0.0866% +0.6441% +1.3466%] (p = 0.23 > 0.05)
                        No change in performance detected.
Benchmarking Key Generation/relin_keys/Precision
Benchmarking Key Generation/relin_keys/Precision: Warming up for 3.0000 s
Benchmarking Key Generation/relin_keys/Precision: Collecting 10 samples in estimated 5.0821 s (1760 iterations)
Benchmarking Key Generation/relin_keys/Precision: Analyzing
Key Generation/relin_keys/Precision
                        time:   [2.8833 ms 2.9080 ms 2.9398 ms]
                        change: [+15.284% +15.978% +16.667%] (p = 0.01 < 0.05)
                        Performance has regressed.
Found 1 outliers among 10 measurements (10.00%)
  1 (10.00%) low mild

Benchmarking NTT/forward/1024
Benchmarking NTT/forward/1024: Warming up for 3.0000 s
Benchmarking NTT/forward/1024: Collecting 100 samples in estimated 5.0025 s (409k iterations)
Benchmarking NTT/forward/1024: Analyzing
NTT/forward/1024        time:   [12.374 µs 12.400 µs 12.423 µs]
                        change: [+1.8789% +2.5633% +3.2453%] (p = 0.10 > 0.05)
                        No change in performance detected.
Benchmarking NTT/inverse/1024
Benchmarking NTT/inverse/1024: Warming up for 3.0000 s
Benchmarking NTT/inverse/1024: Collecting 100 samples in estimated 5.0597 s (404k iterations)
Benchmarking NTT/inverse/1024: Analyzing
NTT/inverse/1024        time:   [12.472 µs 12.511 µs 12.546 µs]
                        change: [+7.0225% +7.3631% +7.6643%] (p = 0.00 < 0.05)
                        Performance has regressed.
Benchmarking NTT/forward/2048
Benchmarking NTT/forward/2048: Warming up for 3.0000 s
Benchmarking NTT/forward/2048: Collecting 100 samples in estimated 5.1115 s (182k iterations)
Benchmarking NTT/forward/2048: Analyzing
NTT/forward/2048        time:   [27.987 µs 28.108 µs 28.215 µs]
                        change: [+1.4633% +3.1837% +4.9487%] (p = 0.33 > 0.05)
                        No change in performance detected.
Benchmarking NTT/inverse/2048
Benchmarking NTT/inverse/2048: Warming up for 3.0000 s
Benchmarking NTT/inverse/2048: Collecting 100 samples in estimated 5.0438 s (182k iterations)
Benchmarking NTT/inverse/2048: Analyzing
NTT/inverse/2048        time:   [27.729 µs 27.830 µs 27.939 µs]
                        change: [+5.4160% +5.6657% +5.9075%] (p = 0.00 < 0.05)
                        Performance has regressed.
Found 4 outliers among 100 measurements (4.00%)
  3 (3.00%) high mild
  1 (1.00%) high severe
Benchmarking NTT/forward/4096
Benchmarking NTT/forward/4096: Warming up for 3.0000 s
Benchmarking NTT/forward/4096: Collecting 100 samples in estimated 5.1635 s (66k iterations)
Benchmarking NTT/forward/4096: Analyzing
NTT/forward/4096        time:   [72.798 µs 74.801 µs 76.923 µs]
                        change: [-24.775% -23.140% -21.379%] (p = 0.00 < 0.05)
                        Performance has improved.
Benchmarking NTT/inverse/4096
Benchmarking NTT/inverse/4096: Warming up for 3.0000 s
Benchmarking NTT/inverse/4096: Collecting 100 samples in estimated 5.2958 s (86k iterations)
Benchmarking NTT/inverse/4096: Analyzing
NTT/inverse/4096        time:   [60.707 µs 60.972 µs 61.266 µs]
                        change: [+0.5906% +1.8935% +3.2441%] (p = 0.32 > 0.05)
                        No change in performance detected.
Found 1 outliers among 100 measurements (1.00%)
  1 (1.00%) high mild
Benchmarking NTT/forward/8192
Benchmarking NTT/forward/8192: Warming up for 3.0000 s
Benchmarking NTT/forward/8192: Collecting 100 samples in estimated 5.8691 s (25k iterations)
Benchmarking NTT/forward/8192: Analyzing
NTT/forward/8192        time:   [219.71 µs 221.41 µs 223.24 µs]
                        change: [-15.118% -14.543% -13.928%] (p = 0.00 < 0.05)
                        Performance has improved.
Found 4 outliers among 100 measurements (4.00%)
  4 (4.00%) high mild
Benchmarking NTT/inverse/8192
Benchmarking NTT/inverse/8192: Warming up for 3.0000 s
Benchmarking NTT/inverse/8192: Collecting 100 samples in estimated 5.7902 s (35k iterations)
Benchmarking NTT/inverse/8192: Analyzing
NTT/inverse/8192        time:   [160.14 µs 161.28 µs 162.43 µs]
                        change: [-4.8937% -4.2800% -3.6331%] (p = 0.01 < 0.05)
                        Performance has improved.
Found 1 outliers among 100 measurements (1.00%)
  1 (1.00%) high mild
Benchmarking NTT/forward/16384
Benchmarking NTT/forward/16384: Warming up for 3.0000 s
Benchmarking NTT/forward/16384: Collecting 100 samples in estimated 6.1320 s (10k iterations)
Benchmarking NTT/forward/16384: Analyzing
NTT/forward/16384       time:   [597.01 µs 601.19 µs 604.97 µs]
                        change: [-6.6107% -5.1720% -3.7213%] (p = 0.11 > 0.05)
                        No change in performance detected.
Found 2 outliers among 100 measurements (2.00%)
  2 (2.00%) high mild
Benchmarking NTT/inverse/16384
Benchmarking NTT/inverse/16384: Warming up for 3.0000 s
Benchmarking NTT/inverse/16384: Collecting 100 samples in estimated 6.4505 s (15k iterations)
