ZT-EAP: A Zero-Trust EAP Authentication Method for IoT-WLAN Access with Ratcheted Fast Reconnect

Manuscript-free ZT-EAP reproducibility artifact: corrected full-authentication, reconnect and session-epoch code; phase-scoped Tamarin models and saved proofs; matched PC/Raspberry Pi 5 timing samples; native EAP-TLS captures and negative controls; and corrected-code FNB-C2 board-input energy traces. The curated archive includes standalone protocol/evidence and scoped random-oracle guides, a checksum manifest and an offline verifier that recomputes reported results from raw observations. Manuscript and supplement sources/PDFs, publisher templates, submission correspondence, reviewer reports, internal tracking, credentials and build debris are excluded. Scientific code, measurements and saved proof results are preserved; the guide corrects the interpretation of the isolated Yadav witness and Wang reconnect-key ownership. Native hostapd/eapoltest 2:2.10-24 resumption used a shortened flow without the RFC 9190 protected-success exchange. Complete RFC-compliant resumed runtime was not measured. Python local-role timings are not directly comparable to native EAP/RADIUS runtime. Energy measurements describe whole-board DC input, with consumer-meter calibration and sampling limitations.