we filed the first complete, machine-verified differential construction for 39 round SHA-256 applying a new technique to ePrint 2026/1120 allowing to take it further than the paper did. just 0.14 bits below current best generic search submission under the same hashsmash cost model. @cyberaxe join forces?