  Reed-Muller codes were introduced in 1954, with a simple explicit
construction based on polynomial evaluations, and have long been conjectured to
achieve Shannon capacity on symmetric channels. Major progress was made towards
a proof over the last decades; using combinatorial weight enumerator bounds, a
breakthrough on the erasure channel from sharp thresholds, hypercontractivity
arguments, and polarization theory. Another major progress recently established
that the bit error probability vanishes slowly below capacity. However, when
channels allow for errors, the results of Bourgain-Kalai do not apply for
converting a vanishing bit to a vanishing block error probability, neither do
the known weight enumerator bounds. The conjecture that RM codes achieve
Shannon capacity on symmetric channels, with high probability of recovering the
codewords, has thus remained open.
  This paper closes the conjecture's proof. It uses a new recursive boosting
framework, which aggregates the decoding of codeword restrictions on
`subspace-sunflowers', handling their dependencies via an $L_p$ Boolean Fourier
analysis, and using a list-decoding argument with a weight enumerator bound
from Sberlo-Shpilka. The proof does not require a vanishing bit error
probability for the base case, but only a non-trivial probability, obtained
here for general symmetric codes. This gives in particular a shortened and
tightened argument for the vanishing bit error probability result of
Reeves-Pfister, and with prior works, it implies the strong wire-tap secrecy of
RM codes on pure-state classical-quantum channels.
