KZG recursive verifier - #563

Draft

gabriel-barrett wants to merge 26 commits into

mainfrom

kzg

Commits on Aug 20, 2026

multi-stark bump: PCS abstraction (crate-owned traits + KZG backend)
gabriel-barrett
committed
facf004
ixvm/multi-stark: drop cross-module imports from Aiur DSL files
gabriel-barrett
committed
ae02c40
multi-stark: GoldilocksNative — the inner field as a swappable interface
gabriel-barrett
committed
f748789
multi-stark: Pcs — route inner-field arithmetic through the g_* interface
gabriel-barrett
committed
87d8602
multi-stark: Verifier — route inner-field arithmetic through the g_* interface
gabriel-barrett
committed
2b23356
multi-stark: GoldilocksForeign — the byte-limb implementation of the interface
gabriel-barrett
committed
208e32e
docs: the KZG stage plan (phases A-E)
gabriel-barrett
committed
6556381
aiur: generic over the field (Phase A of docs/kzg-stage.md)
gabriel-barrett
committed
7401740
docs: kzg-stage — the Lean source layer's Goldilocks dependence, precisely
gabriel-barrett
committed
3d7e601
docs: kzg-stage — Phase A': constants over Q, field-parametric interpreter
gabriel-barrett
committed
cc5e311
aiur: exact-Nat constants with checked field specialization (Phase A')
gabriel-barrett
committed
7dec1a1
aiur: prove over BLS12-381 (kzg feature)
gabriel-barrett
committed
9606ae1
aiur: read protocol parameters off the PCS, not AiurSystem copies
gabriel-barrett
committed
a9350b1
aiur: verifying-key codec at System level
gabriel-barrett
committed
e29b246
multi-stark bump: StarkGenericConfig renamed to ProofConfig (d536a22)
gabriel-barrett
committed
0ccd3b2
ixvm-codegen: re-emit the verifier runner under the hint-promotion emitter
gabriel-barrett
committed
91dd9ef
multi-stark: the foreign verifier toplevel, gated over Goldilocks (Phase B)
gabriel-barrett
committed
53710e0
aiur/ffi: stage-3 wrap end-to-end at toy scale (Phase D gate)
gabriel-barrett
committed
bc65500

Navigation Menu

Uh oh!

KZG recursive verifier - #563

KZG recursive verifier#563
gabriel-barrett wants to merge 26 commits into
mainfrom
kzg

Commits on Aug 20, 2026

multi-stark bump: PCS abstraction (crate-owned traits + KZG backend)

ixvm/multi-stark: drop cross-module imports from Aiur DSL files

multi-stark: GoldilocksNative — the inner field as a swappable interface

multi-stark: Pcs — route inner-field arithmetic through the g_* interface

multi-stark: Verifier — route inner-field arithmetic through the g_* interface

multi-stark: GoldilocksForeign — the byte-limb implementation of the interface

docs: the KZG stage plan (phases A-E)

aiur: generic over the field (Phase A of docs/kzg-stage.md)

docs: kzg-stage — the Lean source layer's Goldilocks dependence, precisely

docs: kzg-stage — Phase A': constants over Q, field-parametric interpreter

aiur: exact-Nat constants with checked field specialization (Phase A')

aiur: prove over BLS12-381 (kzg feature)

aiur: read protocol parameters off the PCS, not AiurSystem copies

aiur: verifying-key codec at System level

multi-stark bump: StarkGenericConfig renamed to ProofConfig (d536a22)

ixvm-codegen: re-emit the verifier runner under the hint-promotion emitter

multi-stark: the foreign verifier toplevel, gated over Goldilocks (Phase B)

aiur/ffi: stage-3 wrap end-to-end at toy scale (Phase D gate)

Commits on Aug 21, 2026

multi-stark: memoize the foreign Goldilocks ops via inline wrappers

multi-stark: thin the foreign byte primitives into their own circuits

multi-stark: thread foreign Goldilocks values by pointer

bench-typecheck: --kzg, the stage-3 wrap of the stage-2 proof

Commits on Aug 22, 2026

aiur: Goldilocks-emulation hints (gl_divmod, gl_inverse); multi-stark bump

multi-stark: foreign Goldilocks as one large-field element, reduced by check

multi-stark bump: parallel dev SRS setup (4ffbd47)

bench: stage 3 joins the aiur pipeline benchmark