Soundness of the explicit hidden-parity construction
Prove that, for circuits generated by the specified three-qubit construction with linear depth, block factors W and W CZ, affine permutations, Haar-random local frames, public measurement basis M unequal to U_L, uniformly random inputs, and secret weights, no polynomial-time classical algorithm given the public data can pass both verification tests at the prescribed round counts except with negligible probability.
References
For circuits generated by the recipe of Appendix~\ref{app:construction}, with $\ell=3$, $L=\Theta(n)$, block factors $W$ and $W\mathrm{CZ}$, affine permutations, Haar frames, $M\neq U_L$, uniform inputs and secret weights, no classical algorithm running in time polynomial in $n$, given the public data, passes both tests at the round counts of Eq.~eq:rounds except with probability $\varepsilon(n)$ negligible in $n$.
For instances of the construction, no classical algorithm running within time $T_{\max}$, given the public data and an input $x$, outputs a list of $J\le2\eta$ labels with $\frac1J\sum_iD\,p(y_i|x)\ge1+\delta$, except with negligible probability.
At the sizes studied here it is reproduced by truncated simulations of large bond dimension, which is why the collision test is used; whether it remains sound on its own against efficient simulation as $n$ grows, so that the collision test could be dropped, is the most direct question.
Independently, shallower circuits raise the fidelity and so lower the number of rounds; the depth used here was chosen conservatively, and the smallest depth that keeps the properties of Sec.~\ref{sec:soundness} is an open question about the construction.
And the effect of hardware noise, in particular coherent errors in the local frames, on both statistics has not been analyzed; testing the instances on hardware is the next step.