[evagelia]

Adds the Orbit5DiIrisEmbeddingShares protobuf payload and optional manifest hash fields for orbit5_di_iris_embeddings_shares_0.pb through _4.pb.

The shared PCP builder accepts an optional owned array of five recipient bundles through Di::embeddings(embeddings).orbit5_di_embedding_shares(bundles).shares(shares). Each bundle carries left, left mirrored, right, and right mirrored share vectors. Both share families belong to the DI payload; all five ORBIT5 files are included with signed hashes alongside the existing three-party DI files. Biometric redaction omits the files and their hashes. ORBIT5 share payloads and encoded buffers are zeroized on drop.

PCP version remains 2.8. Callers own share generation, dimension/value/metadata validation, and enabling ORBIT5 only for compatible consumers.

Validation: 88 tests passed across orb-pcp and orb-pcp-defs with all features and targets, including synthetic encrypted round trips, redaction, schema/manifest coverage, and zeroization. Two existing fixture tests remain ignored. Focused Clippy with warnings denied, workspace Rust formatting, documentation generation, protobuf lint/format, and protobuf breaking-change checks passed. Linux/Android builds and end-to-end consumer acceptance were not run locally.

AI-assisted-by: Codex

[ShevchenkoRostyslav]

Need to agree on naming convention and address the EncodedDi extension.
Additionally, we should probably go through and wherever we can (meaning it is not exposed externally) we should also rename current shares into something meaningful. E.g.

pub(crate) struct EncodedDi {
    pub embeddings: Option<Vec<u8>>,
    pub shares: [Option<Vec<u8>>; 3],
    pub orbit5_shares: Option<[Vec<u8>; 5]>,
}

should be something like

pub(crate) struct EncodedDi {
    pub embeddings: Option<Vec<u8>>,
    pub <smart_name>_shares: [Option<Vec<u8>>; 3],
    pub orbit5_shares: Option<[Vec<u8>; 5]>,
}

We have to be careful tho and make suer we are not breaking publicly exposed APIs. if we do - not a big deal, of course, but one would have to go and fix them downstream in TEE and priv-orb-core, probably...

[ShevchenkoRostyslav]

Please keep the DI embedding and both share families together in EncodedDi. The concrete edits now use GitHub suggestion blocks:

• Remove the separate prepared field
• DI encoding and filename constants
• Coordinated naming, wiring, example, and test suggestions

For the existing internal EncodedDi::shares field, three_party_shares would make the distinction explicit. Rename its encoder parameter/initializer, builder hash iteration, archive access, and unit-test references together. EncodedDi and its encoder are crate-private, so this internal rename does not require downstream changes; keep the existing public three-party input di_embedding_shares unchanged.

[ShevchenkoRostyslav]

Use the DI-qualified naming consistently through schema, archive filenames, builder inputs, and tests. The suggestions are coordinated edits and should be applied together. AI-assisted review.

[ShevchenkoRostyslav]

Follow-up naming pass: these suggestions propagate Orbit5DiIrisEmbeddingShares / Orbit5DiIrisEmbeddingShareV1, orbit5_di_embedding_shares, and orbit5_di_iris_embeddings_shares_* through the schema, manifest, encoder, archive, decoder example, builder example, and tests. They also wire the ORBIT5 bytes through EncodedDi.

Apply these together with the existing message-name, build-script, public-input, and README suggestions. Rename the protobuf source file to orbit5_di_iris_embedding_shares.proto. Declarations outside the commentable diff still need the new EncodedDi field, the third encode_di argument, None in the existing encoder test calls, and the new optional field in both archive-test EncodedDi literals. Run formatting and the targeted tests afterward.

Keep protobuf tags unchanged. The filename and JSON-key rename must be consistent because the signed manifest binds those names. The internal grouping change does not add a downstream API change; the explicit public-input and protobuf renames require callers to use the agreed names when adopting this PR.

AI-assisted review.