use ctx.op compare (and muxid) in shiftrot proof