Nullark uses Groth16 to show that a private witness satisfies a circuit relation for an ordered public statement. Verification is concise, but you still have to trust the circuit semantics, setup provenance, proving files, verifier identity, and deployment state.

​
What acceptance means

Given a fixed circuit, verification key, proof, and set of public inputs, acceptance means that a witness exists for the encoded relation under Groth16 security assumptions. For a withdrawal, that relation is intended to fix bundle membership, selected-child authority, nullifier, destination, amount, fee, chain, verifying contract, proof context, and encrypted payload hash.

​
Trust chain

Each edge needs its own evidence. Artifact identity comes from independent pins and reviewed bindings around the proof.

​
Trusted setup

Groth16 uses relation-specific setup material. Compromised toxic-waste handling or a setup for another circuit can invalidate soundness assumptions even when local verification passes. Nullark checks browser proving files against an independently bundled SHA-256 pin, the setup record, verifier identity, public-input order, and byte limits. The independent pin anchors manifest trust.

​
Evidence beyond proof acceptance

The surrounding system still needs evidence for:
  • Circuit source and product intent
  • Source-to-constraint compilation
  • Trusted setup ceremony
  • Authorized proving-artifact release
  • Deployed verifier identity and pool routing
  • Browser, dependency, wallet, RPC, relayer, and operator integrity
  • Transaction privacy properties
  • Pool availability and relayer funding

​
Public-input discipline

Public inputs are positional. Correct values in the wrong order define a different verifier statement. Integrations must freeze count, names, order hash, and field encoding with the exact verifier and artifacts. See Withdrawal public inputs and Authenticate proving artifacts.

​
How to read the evidence

Tests cover reviewed mutations. Hashes identify exact bytes. Formal theorems establish modeled properties under stated assumptions. Production status combines those records through the full evidence chain. Read Formal verification and Published status.