ZT-EAP: A Zero-Trust EAP Authentication Method for IoT-WLAN Access with Ratcheted Fast Reconnect

Revised ZT-EAP reproducibility artifact: corrected full-authentication, reconnect and session-epoch code; phase-scoped Tamarin models and saved proofs; matched PC/Raspberry Pi 5 timing samples; native EAP-TLS captures and negative controls; corrected-code FNB-C2 board-input energy traces; and the revised manuscript and supplement. The curated archive includes a checksum manifest and an offline verifier that recomputes reported results from raw observations. Submission correspondence, reviewer reports, internal tracking, credentials and build debris are excluded. Native hostapd/eapoltest 2:2.10-24 resumption used a shortened flow without the RFC 9190 protected-success exchange. Complete RFC-compliant resumed runtime was not measured. Python local-role timings are not directly comparable to native EAP/RADIUS runtime. Energy measurements describe whole-board DC input, with consumer-meter calibration and sampling limitations.