Locally synced open issues (discussions stay on GitHub)
FORS-C grind bound (2^24) is profile-independent: ~37% stateless signing failure at 128s (a=24)