A branch ref makes a fresh opam install resolve whatever main points
at that day; every other pin in the tree names a commit. This is
main's current head, the revision the switch already has installed.

The end-to-end pairing test exercised the Bluetooth orchestrator against a
bare Bluetooth_smp responder, but its test_pairing file mapped to no
top-level library module. Move it under a Pairing sub-module of
test_bluetooth and fold its case into the bluetooth suite.

Both are unsigned 32-bit quantities a 31-bit int (js_of_ocaml, wasm_of_ocaml)
cannot hold. U32 of int -> U32 of int32 (of_uuid32 : int32 -> t; every int32 is
a valid u32, so the unrepresentable range check is gone); the UUID octet paths
drop their Int32.of_int/to_int conversions. g2 reads its four hash bytes with
String.get_int32_be and returns int32; the caller narrows to the six-digit
value with Int32.unsigned_rem, exact across the full u32 range on both targets.
Wire/octet format and the numeric-comparison value are unchanged on 64-bit.

Pick up the wire.3d change that builds and installs the standalone c/ verified
parser per target (wire pinned at f13082a3). Every packages c/dune.inc is
regenerated: the archive now builds in all contexts through the context
toolchain (%{ocaml-config:c_compiler}, the ocaml-config partial linker,
-print-prog-name binutils) instead of host-only, and installs unconditionally
-- no empty placeholder. Each c/EverParseEndianness.h gains a freestanding
__BYTE_ORDER__/__builtin_bswap* branch so it compiles for an OS-less target (a
unikernel defines neither __linux__ nor __APPLE__).

Verified: dune build -x unikraft ocaml-clcw/c/libclcw.a produces an aarch64
archive exporting only ClcwCheckClcw (the safe wrapper), with ClcwValidateClcw
localized.

One wire pin, one hash: every package pinning
parsimoni-labs/ocaml-wire moves from 77116df9 to f13082a3 together, so
no two packages resolve different generators for the same codecs. The
new revision emits context-guarded, toolchain-portable 3d rules (see
the ocaml-virtio regeneration).

The two test helpers that pick out ATT and SMP frames matched the frame
CID with the polymorphic (=). Cid.t is an abstract 16-bit identifier
whose module already publishes equal; going through it keeps the tests
honest if the representation ever stops being a bare int.

The new ocaml-wire main generates archive rules that localize each package's raw
<Name>Validate* symbols (macOS ld -r -exported_symbol; Linux ld -r plus objcopy
--keep-global-symbol, allowlisting the wrapper), so a C consumer linking the
installed archive reaches only the checked <Name>Check* wrapper. The raw
validators subtract StartPosition before proving it is within InputLength
(unsigned underflow) and are an external-linkage footgun; the wrapper always
passes zero. Bumps the pin in every .opam and .opam.template and regenerates each
package's c/dune.inc; the generated C is unchanged, the fix is entirely in the
archive rule. nm now shows Validate* local and Check* global, and the agree
differential tests still link.

ocaml-wire d77c63a stops installing the raw <Base>.h validator header, whose
EverParse entrypoints bound a read as N <= InputLength - StartPosition with no
prior StartPosition <= InputLength check, so a direct C caller passing a start
past the buffer underflows the unsigned span and reads out of bounds. The
standalone install now exposes only the checked <Base>Wrapper.h (always entered
at offset 0) and the compiled archive. Bump the pin across every package and
regenerate each c/dune.inc; the OCaml-vs-C agreement tests are unchanged.