[step:Verify the global group law and the identity $\varphi_0 = \mathrm{id}_M$]
$\varphi_0 = \mathrm{id}_M$ because $t = 0$ corresponds to $k = 0$, $r = 0$, yielding the empty composition followed by $\Phi_0 = \mathrm{id}_M$.
For the group law: fix $s, t \in \mathbb{R}$. We show $\varphi_{t + s} = \varphi_t \circ \varphi_s$. Write
\begin{align*}
s = k_1\, \varepsilon/2 + r_1, \qquad t = k_2\, \varepsilon/2 + r_2, \qquad s + t = k_3\, \varepsilon/2 + r_3,
\end{align*}
with $r_1, r_2, r_3 \in [0, \varepsilon/2)$. By construction, $\varphi_s = \Phi_{\varepsilon/2}^{k_1} \circ \Phi_{r_1}$ and $\varphi_t = \Phi_{\varepsilon/2}^{k_2} \circ \Phi_{r_2}$. Therefore
\begin{align*}
\varphi_t \circ \varphi_s = \Phi_{\varepsilon/2}^{k_2} \circ \Phi_{r_2} \circ \Phi_{\varepsilon/2}^{k_1} \circ \Phi_{r_1}.
\end{align*}
We now rearrange using the local group law, which states $\Phi_a \circ \Phi_b = \Phi_{a+b}$ whenever $|a|, |b|, |a+b| < \varepsilon$. Each $\Phi_{\varepsilon/2}$ and $\Phi_{r_j}$ has time in $(-\varepsilon, \varepsilon)$, and pairwise sums of such times that arise in the rearrangement all have magnitude less than $\varepsilon$ (e.g.\ $\Phi_{r_2} \circ \Phi_{\varepsilon/2} = \Phi_{r_2 + \varepsilon/2}$ with $0 \le r_2 + \varepsilon/2 < \varepsilon$). Applying this pairwise and inductively moves all the $\Phi_{\varepsilon/2}$ factors to the left and collects the remainders into a single short-time flow. The final result is
\begin{align*}
\varphi_t \circ \varphi_s = \Phi_{\varepsilon/2}^{k_1 + k_2 + m} \circ \Phi_{r_1 + r_2 - m\varepsilon/2}
\end{align*}
where $m \in \{0, 1\}$ accounts for any carry when $r_1 + r_2 \ge \varepsilon/2$. Writing $s + t = (k_1 + k_2 + m) \varepsilon/2 + (r_1 + r_2 - m\varepsilon/2)$ with $r_1 + r_2 - m\varepsilon/2 \in [0, \varepsilon/2)$, we recognise this as the canonical decomposition of $s + t$, so $k_3 = k_1 + k_2 + m$ and $r_3 = r_1 + r_2 - m\varepsilon/2$. Therefore $\varphi_t \circ \varphi_s = \Phi_{\varepsilon/2}^{k_3} \circ \Phi_{r_3} = \varphi_{t + s}$.
[/step]