Skip to content

ZisK-style proof-format levers: Merkle caps, DP FRI folding, WHIR first fold #1007

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MauroToscano merged 89 commits into from
Sep 25, 2026
Merged

ZisK-style proof-format levers: Merkle caps, DP FRI folding, WHIR first fold #1007

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
89 commits
Select commit Hold shift + click to select a range
ab7208f
feat(crypto): Merkle cap primitive and the cap-height policy
MauroToscano Sep 24, 2026
f82e42b
fix(stark): require exact authentication-path lengths in the verifier
MauroToscano Sep 24, 2026
77ea1ab
feat(prover): ZfFormat, the one proof-format config, and its option f…
MauroToscano Sep 24, 2026
72304a5
feat(stark/fri): the verifier-side FRI fold-schedule DP and a schedul…
MauroToscano Sep 24, 2026
db7c054
feat(multilinear): the WHIR first-fold schedule (W2), its Q rule and …
MauroToscano Sep 24, 2026
dc2d872
fix(crypto): the cap review fixes on the primitive (REVIEW-CAP S5, M1)
MauroToscano Sep 24, 2026
177ec2c
feat(prover): the statement binds the WHIR fold schedule; reused comm…
MauroToscano Sep 24, 2026
92ba48e
feat(prover): LAMBDA_VM_ZF_WHIR_FOLDS reaches the WHIR base config
MauroToscano Sep 24, 2026
50ec501
feat(stark/fri): cost-law schedule objective, options-driven FRI layo…
MauroToscano Sep 24, 2026
321e486
test(math-cuda): device commit and fold parity at k = 6
MauroToscano Sep 24, 2026
299f379
feat(multilinear): the Merkle cap on WHIR chains, host prover and ver…
MauroToscano Sep 24, 2026
93447d9
test(lfm): the in-guest WHIR verifier at first folds of 5 and 6
MauroToscano Sep 24, 2026
4d67789
feat(stark): Merkle caps on the host path (C3, design/CAP.md section 4)
MauroToscano Sep 24, 2026
f7dee29
test(math-cuda,multilinear): device parity for the WHIR Merkle cap (W…
MauroToscano Sep 24, 2026
2d1c562
feat(multilinear): WHIR_FOLDS_IMPLEMENTED = true
MauroToscano Sep 24, 2026
88db27b
test(stark,prover): default-format golden proofs (H0)
MauroToscano Sep 24, 2026
ac73346
test(prover): the fold lever's selectability as a const assertion (cl…
MauroToscano Sep 24, 2026
1293f5a
feat(stark,math-cuda): Merkle caps off device-resident trees (C4)
MauroToscano Sep 24, 2026
e6ea359
test(prover): a real VM proof under the process cap policy
MauroToscano Sep 24, 2026
713e18b
feat(lfm): the WHIR Merkle cap in the in-guest chain verifier and its…
MauroToscano Sep 24, 2026
d281c3b
feat(multilinear): W1 is implemented; LAMBDA_VM_ZF_WHIR_CAP is select…
MauroToscano Sep 24, 2026
5a61661
feat(stark/fri): S3 group-leaf FRI layers on the CPU prover and host …
MauroToscano Sep 24, 2026
1696bbb
test(stark,prover): the S3 test vectors, and a VM proof at fri = dp (H3)
MauroToscano Sep 24, 2026
b04e895
feat(stark): FRI_MODE_IMPLEMENTED = true (S3 on the host CPU path)
MauroToscano Sep 24, 2026
6092c77
test(prover): the production format sites prove at the process format
MauroToscano Sep 24, 2026
59cd50a
Merge zf/cap-stark wave A @ 77ea1ab89: the Merkle cap primitive, exac…
MauroToscano Sep 24, 2026
c08491e
Merge I-CAP-S wave B @ e6ea35953 into the candidate (R1, C3, C4, T)
MauroToscano Sep 24, 2026
49546d6
Merge I-CAP-W @ d281c3b86 into the candidate (C6, C7, C8, W1 flag)
MauroToscano Sep 24, 2026
6d0dade
Merge I-WHIR-F @ ac73346b4 into the candidate (W2: first5 / first6)
MauroToscano Sep 24, 2026
f985944
Merge I-FRI-H @ 6092c77dd into the candidate (H1, H1b, H0, H2, H3)
MauroToscano Sep 24, 2026
1a93632
feat(stark): Merkle caps on group-leaf FRI layers (cap x fri=dp)
MauroToscano Sep 24, 2026
3a9512c
test(stark,prover): S3 proof vectors with a Merkle cap at Q = 20 (F9)
MauroToscano Sep 24, 2026
dc64ae3
fix(stark): drop the group-path verifier's now-unused proof parameter
MauroToscano Sep 24, 2026
942201d
feat(math-cuda): S3 group-leaf FRI layers on the device
MauroToscano Sep 24, 2026
67890ae
feat(stark): the device FRI arms run the S3 group encoding
MauroToscano Sep 24, 2026
d9d6769
test(prover): S3 device parity under RPX and a VM dp proof on the device
MauroToscano Sep 24, 2026
f004a5a
feat(stark): S2 one-row openings with a committed FRI input on the CP…
MauroToscano Sep 24, 2026
c8ffb4b
refactor(prover): one in-guest Merkle cap gadget for the WHIR and STA…
MauroToscano Sep 24, 2026
87176ab
feat(prover): Merkle caps in the in-guest STARK verifier (C5)
MauroToscano Sep 24, 2026
4510844
feat(prover): S3 group-leaf FRI layers in the in-guest verifier (G1, G2)
MauroToscano Sep 24, 2026
59639d3
docs(stark): the Merkle cap and fri=dp are in the in-guest verifier
MauroToscano Sep 24, 2026
bbe1f3c
test(prover): a parseable census line from the knob-on assembled veri…
MauroToscano Sep 24, 2026
c63780e
test(stark): key the M3 query-bound mutation by the LDE size
MauroToscano Sep 24, 2026
1adbebe
feat(prover): the preprocessed roots of one-row tables (H5)
MauroToscano Sep 24, 2026
dfc498b
test(stark,prover): the S2 test vectors (H6)
MauroToscano Sep 24, 2026
525bf05
feat(stark): ONE_ROW_IMPLEMENTED = true (S2 on the host CPU paths)
MauroToscano Sep 24, 2026
9f5b8f7
style(stark): clippy manual_is_multiple_of in one_row_tests
MauroToscano Sep 24, 2026
f7a8c59
test(stark): M1 at the input tree — the input-slot check is load-bearing
MauroToscano Sep 24, 2026
25ec130
style(stark): clippy clone_on_copy in the input-slot M1 test
MauroToscano Sep 24, 2026
3992f28
Merge I-GUEST @ bbe1f3caf into the candidate (C5, G1, G2, host cap x …
MauroToscano Sep 24, 2026
45bbfd1
Merge I-FRI-D @ d9d676983 into the candidate (D1: S3 group-leaf FRI o…
MauroToscano Sep 24, 2026
3da7bee
Merge I-S2-H @ 25ec130e2 into the candidate (S2 on the host: H4, H5, H6)
MauroToscano Sep 24, 2026
730257a
style: rustfmt the candidate-c merge resolutions
MauroToscano Sep 24, 2026
23ee332
test(stark,prover): the device (d) vector tests count I-GUEST's cappe…
MauroToscano Sep 24, 2026
8d74043
fix(prover): key the AIR prototype cache on the proof format
MauroToscano Sep 24, 2026
f4d57bd
test(prover): merkle_cap_vm asserts the cap policy engaged
MauroToscano Sep 24, 2026
c9b6b1d
test(stark,prover): device-sized ZF tests prove an AirWithBuses table
MauroToscano Sep 24, 2026
eb6fe2b
test(math-cuda): evict before every cap height in the WHIR eviction test
MauroToscano Sep 24, 2026
737415e
style: rustfmt the I-FIX-B test edits
MauroToscano Sep 24, 2026
8aa8f47
Merge I-FIX-B @ 737415ee7 into candidate-d (candidate-c + the candida…
MauroToscano Sep 24, 2026
21b1b77
style: rustfmt the merged test module list (zf_air_cache_tests before…
MauroToscano Sep 24, 2026
130ddb1
feat(prover): one-row openings (S2) in the in-guest STARK verifier (G3)
MauroToscano Sep 24, 2026
a08a0bc
test(prover): S2 in the in-guest verifier against the host's (e) vect…
MauroToscano Sep 24, 2026
e72d3e6
test(prover): the leaf node prints how many of each wrap's sub-proofs…
MauroToscano Sep 25, 2026
7f4e3d9
feat(math-cuda): one-row (rows_per_leaf = 1) device leaves for S2 trees
MauroToscano Sep 25, 2026
1564fda
feat(stark): S2 on the device (D2) — one-row trees, openings and the …
MauroToscano Sep 25, 2026
381a8d3
test(stark,prover): S2 device parity (D2) — trees, openings, input tr…
MauroToscano Sep 25, 2026
699f087
feat(stark,prover): price every emitted FRI row and the S2 DEEP term …
MauroToscano Sep 25, 2026
3e867c4
test(prover): the one-row VM bytes test creates ZF_S2_PROOF_DIR
MauroToscano Sep 25, 2026
6991df5
Merge I-PRICE @ 699f0876b into candidate-e (RULINGS 22: every emitted…
MauroToscano Sep 25, 2026
963e1e7
Merge I-S2-G @ e72d3e64d into candidate-e (S2 in the in-guest STARK v…
MauroToscano Sep 25, 2026
7765d4d
Merge I-S2-D @ 3e867c463 into candidate-e (S2 on the device, D2)
MauroToscano Sep 25, 2026
5afc759
Merge zf/fix-b @ 737415ee7: wave B (STARK cap host+device, WHIR cap, …
MauroToscano Sep 25, 2026
ff78f04
feat(prover): the measured ZF configuration is the default format (RU…
MauroToscano Sep 25, 2026
cfbff6a
test(prover): the recursion-guest legacy test holds under any process…
MauroToscano Sep 25, 2026
0dd6341
feat(prover): one_row=auto joins the default format, provisionally (R…
MauroToscano Sep 25, 2026
5ed2f15
test(prover): the sh1 recount states the default's rounds without rea…
MauroToscano Sep 25, 2026
6a4a244
fix(prover): the Phase-A replay absorbs each preprocessed root at its…
MauroToscano Sep 25, 2026
91764db
test(prover): one-row Phase-A replay regressions (LFM wrap options at…
MauroToscano Sep 25, 2026
7c9b577
feat(stark): LogReadOnlyRAP carries a constraint program
MauroToscano Sep 25, 2026
c5b91a0
test(prover): a valid device-comparison oracle: LFM proof bytes, prov…
MauroToscano Sep 25, 2026
03fe727
style(stark): make fmt on the LogReadOnlyRAP program and its tests
MauroToscano Sep 25, 2026
39dea55
test(prover): the LFM bytes oracle asserts a device FRI commit in eve…
MauroToscano Sep 25, 2026
a4ce890
Merge I-FIX-S2 @ 91764db5d into candidate-f (the Phase-A replay absor…
MauroToscano Sep 25, 2026
d6cdfd3
Merge I-FIX-D2 @ 39dea5552 into candidate-f (device-parity fix: LogRe…
MauroToscano Sep 25, 2026
cdf0238
Revert "feat(prover): one_row=auto joins the default format, provisio…
MauroToscano Sep 25, 2026
65df270
test(prover): the LFM bytes oracle proves the default format and all …
MauroToscano Sep 25, 2026
d8ffc07
docs: make the proof-format comments self-contained
MauroToscano Sep 25, 2026
258ef0d
Merge zf/candidate-f-nob @ d8ffc0702: ZisK-style proof-format levers
MauroToscano Sep 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading