diff --git a/.github/workflows/all.yml b/.github/workflows/all.yml
index 458e4c8aa2..1410937967 100644
--- a/.github/workflows/all.yml
+++ b/.github/workflows/all.yml
@@ -20,93 +20,93 @@ jobs:
       id-token: 'write'
     uses: ./.github/workflows/base.yml
     secrets: inherit
-  lint-markdown:
-    name: Lint Markdown
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    uses: ./.github/workflows/lint_markdown.yml
-  nix:
-    name: Nix
-    permissions:
-      actions: 'write'
-      contents: 'read'
-      id-token: 'write'
-    uses: ./.github/workflows/nix.yml
-    secrets: inherit
-  ci:
-    name: Extended
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base, nix ]
-    uses: ./.github/workflows/ci.yml
-    secrets: inherit
+  # lint-markdown:
+  #   name: Lint Markdown
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   uses: ./.github/workflows/lint_markdown.yml
+  # nix:
+  #   name: Nix
+  #   permissions:
+  #     actions: 'write'
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   uses: ./.github/workflows/nix.yml
+  #   secrets: inherit
+  # ci:
+  #   name: Extended
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base, nix ]
+  #   uses: ./.github/workflows/ci.yml
+  #   secrets: inherit
   cbmc:
     name: CBMC
     permissions:
       contents: 'read'
       id-token: 'write'
-    needs: [ base, nix ]
+    # needs: [ base, nix ]
     uses: ./.github/workflows/cbmc.yml
     secrets: inherit
-  oqs_integration:
-    name: libOQS
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base ]
-    uses: ./.github/workflows/integration-liboqs.yml
-    secrets: inherit
-  opentitan_integration:
-    name: OpenTitan
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base ]
-    uses: ./.github/workflows/integration-opentitan.yml
-    secrets: inherit
-  awslc_integration_fixed:
-    name: AWS-LC (v1.64.0)
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base ]
-    uses: ./.github/workflows/integration-awslc.yml
-    with:
-      commit: 7187ab572ddcdae4fa408e932d3e878c9941137b # v1.64.0
-    secrets: inherit
-  awslc_integration_head:
-    name: AWS-LC (HEAD)
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base ]
-    uses: ./.github/workflows/integration-awslc.yml
-    with:
-      commit: main
-    secrets: inherit
-  ct-test:
-    name: Constant-time
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base, nix ]
-    uses: ./.github/workflows/ct-tests.yml
-    secrets: inherit
-  slothy:
-    name: SLOTHY
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base, nix ]
-    uses: ./.github/workflows/slothy.yml
-    secrets: inherit
-  baremetal:
-    name: Baremetal
-    permissions:
-      contents: 'read'
-      id-token: 'write'
-    needs: [ base ]
-    uses: ./.github/workflows/baremetal.yml
-    secrets: inherit
+  # oqs_integration:
+  #   name: libOQS
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base ]
+  #   uses: ./.github/workflows/integration-liboqs.yml
+  #   secrets: inherit
+  # opentitan_integration:
+  #   name: OpenTitan
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base ]
+  #   uses: ./.github/workflows/integration-opentitan.yml
+  #   secrets: inherit
+  # awslc_integration_fixed:
+  #   name: AWS-LC (v1.64.0)
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base ]
+  #   uses: ./.github/workflows/integration-awslc.yml
+  #   with:
+  #     commit: 7187ab572ddcdae4fa408e932d3e878c9941137b # v1.64.0
+  #   secrets: inherit
+  # awslc_integration_head:
+  #   name: AWS-LC (HEAD)
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base ]
+  #   uses: ./.github/workflows/integration-awslc.yml
+  #   with:
+  #     commit: main
+  #   secrets: inherit
+  # ct-test:
+  #   name: Constant-time
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base, nix ]
+  #   uses: ./.github/workflows/ct-tests.yml
+  #   secrets: inherit
+  # slothy:
+  #   name: SLOTHY
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base, nix ]
+  #   uses: ./.github/workflows/slothy.yml
+  #   secrets: inherit
+  # baremetal:
+  #   name: Baremetal
+  #   permissions:
+  #     contents: 'read'
+  #     id-token: 'write'
+  #   needs: [ base ]
+  #   uses: ./.github/workflows/baremetal.yml
+  #   secrets: inherit
diff --git a/mlkem/src/sys.h b/mlkem/src/sys.h
index 7df396a8b8..763a6375ab 100644
--- a/mlkem/src/sys.h
+++ b/mlkem/src/sys.h
@@ -226,6 +226,7 @@ typedef enum
 #if !defined(MLK_CONFIG_CUSTOM_CAPABILITY_FUNC)
 #include "cbmc.h"
 
+
 static MLK_INLINE int mlk_sys_check_capability(mlk_sys_cap cap)
 __contract__(
   ensures(return_value == 0 || return_value == 1)