Function bytes_from_digits 

pub fn bytes_from_digits(d: &[b17; 15]) -> [u8; 32]

Host helper: digits back to 32 little-endian bytes. Fifteen digits cover bits 0..255, so the bit < 256 guard never drops a set bit.