openvm-cpu-backend 2.0.0-test.0

Row-major CPU prover backend for the SWIRL proof system
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
//! Stacked opening reduction for [CpuBackend].
//!
//! Delegates to the reference implementation since stacked reduction operates on
//! `StackedPcsData` which is shared between both backends.

use std::{collections::HashMap, iter::zip, mem::take};

use itertools::Itertools;
use openvm_stark_backend::{
    poly_common::{eval_eq_mle, eval_eq_uni, eval_eq_uni_at_one, eval_in_uni, UnivariatePoly},
    prover::{
        poly::evals_eq_hypercube,
        stacked_pcs::StackedSlice,
        stacked_reduction::StackedReductionProver,
        sumcheck::{batch_fold_mle_evals, sumcheck_round0_deg, sumcheck_round_poly_evals},
        ColMajorMatrix, ColMajorMatrixView, MatrixDimensions, ProverBackend,
    },
    StarkProtocolConfig,
};
use p3_field::{
    batch_multiplicative_inverse, ExtensionField, Field, PrimeCharacteristicRing, TwoAdicField,
};
use p3_matrix::dense::RowMajorMatrix;
use p3_maybe_rayon::prelude::*;

use crate::{
    backend::CpuBackend, device::CpuDevice, pcs_data::CpuStackedPcsData, two_adic::DftTwiddles,
};

/// Optimized PLE fold: precompute barycentric weights once, then evaluate each element
/// as an inline dot product. Eliminates the 5.5M per-element Vec allocations in the
/// reference `fold_ple_evals` which calls `interpolate_coset_with_precomputation` per element.
fn fold_ple_evals_cpu<F, EF>(l_skip: usize, mat: &ColMajorMatrix<F>, r: EF) -> ColMajorMatrix<EF>
where
    F: TwoAdicField,
    EF: ExtensionField<F> + TwoAdicField,
{
    let height = mat.height();
    let n = 1usize << l_skip;
    let lifted_height = height.max(n);
    let width = mat.width();
    let new_height = lifted_height >> l_skip;

    // Precompute barycentric interpolation weights (shared across all elements):
    // col_scale[i] = omega^i / (r - omega^i)
    let omega = F::two_adic_generator(l_skip);
    let omega_pows: Vec<F> = omega.powers().take(n).collect();
    let denoms: Vec<EF> = omega_pows.iter().map(|&w| r - EF::from(w)).collect();
    let inv_denoms = batch_multiplicative_inverse(&denoms);
    let col_scale: Vec<EF> = omega_pows
        .iter()
        .zip(&inv_denoms)
        .map(|(&w, &inv_d)| inv_d * w)
        .collect();

    // scaling_factor = (r^N - 1) / N  where N = 2^l_skip, shift = 1
    let r_pow_n = r.exp_power_of_2(l_skip);
    let vanishing = r_pow_n - EF::ONE;
    let mut n_ef = EF::ONE;
    for _ in 0..l_skip {
        n_ef += n_ef;
    }
    let scaling_factor = vanishing * n_ef.inverse();

    // For each (column j, hypercube point x): dot product of 16 base field evals with col_scale,
    // then multiply by scaling_factor. Zero allocations per element.
    let values: Vec<EF> = mat
        .values
        .par_chunks_exact(height)
        .flat_map(|col| {
            (0..new_height)
                .into_par_iter()
                .map(|x| {
                    let base = x << l_skip;
                    let mut sum = EF::ZERO;
                    for z in 0..n {
                        // col-major: col[base + z] is contiguous (cache-friendly)
                        let f_z = col[(base + z) % height];
                        sum += col_scale[z] * f_z;
                    }
                    sum * scaling_factor
                })
                .collect::<Vec<_>>()
        })
        .collect();
    ColMajorMatrix::new(values, width)
}

pub struct StackedReductionCpuNew<'a, SC: StarkProtocolConfig> {
    l_skip: usize,
    omega_skip: SC::F,

    r_0: SC::EF,
    lambda_pows: Vec<SC::EF>,
    eq_const: SC::EF,

    stacked_per_commit: Vec<&'a CpuStackedPcsData<SC::F, SC::Digest>>,
    trace_views: Vec<TraceViewMeta>,
    ht_diff_idxs: Vec<usize>,

    eq_r_per_lht: HashMap<usize, Vec<SC::EF>>,

    // After round 0:
    k_rot_r_per_lht: HashMap<usize, Vec<SC::EF>>,
    q_evals: Vec<ColMajorMatrix<SC::EF>>,
    eq_ub_per_trace: Vec<SC::EF>,
}

struct TraceViewMeta {
    com_idx: usize,
    slice: StackedSlice,
    lambda_eq_idx: usize,
    lambda_rot_idx: Option<usize>,
}

/// `x_int` is the integer representation of point on H_n.
fn rot_prev(x_int: usize, n: usize) -> usize {
    debug_assert!(x_int < (1 << n));
    if x_int == 0 {
        (1 << n) - 1
    } else {
        x_int - 1
    }
}

fn fold_eval_map<EF>(
    evals_per_lht: HashMap<usize, Vec<EF>>,
    one_minus_r: EF,
    r: EF,
) -> HashMap<usize, Vec<EF>>
where
    EF: Field + Send,
{
    evals_per_lht
        .into_par_iter()
        .map(|(lht, v)| {
            if v.len() <= 1 {
                return (lht, v);
            }
            let folded: Vec<EF> = v
                .chunks_exact(2)
                .map(|pair| pair[0] * one_minus_r + pair[1] * r)
                .collect();
            (lht, folded)
        })
        .collect()
}

impl<'a, SC: StarkProtocolConfig> StackedReductionProver<'a, CpuBackend<SC>, CpuDevice<SC>>
    for StackedReductionCpuNew<'a, SC>
where
    SC::F: TwoAdicField,
    SC::EF: TwoAdicField + ExtensionField<SC::F>,
    CpuBackend<SC>: ProverBackend<
        Val = SC::F,
        Challenge = SC::EF,
        PcsData = CpuStackedPcsData<SC::F, SC::Digest>,
    >,
{
    fn new(
        device: &CpuDevice<SC>,
        stacked_per_commit: Vec<&'a CpuStackedPcsData<SC::F, SC::Digest>>,
        need_rot_per_commit: Vec<Vec<bool>>,
        r: &[SC::EF],
        lambda: SC::EF,
    ) -> Self {
        let l_skip = device.params().l_skip;
        let omega_skip = SC::F::two_adic_generator(l_skip);

        let mut trace_views = Vec::new();
        let mut lambda_idx = 0usize;
        for (com_idx, d) in stacked_per_commit.iter().enumerate() {
            let need_rot_for_commit = &need_rot_per_commit[com_idx];
            debug_assert_eq!(need_rot_for_commit.len(), d.layout.mat_starts.len());
            for &(mat_idx, _col_idx, slice) in &d.layout.sorted_cols {
                let lambda_eq_idx = lambda_idx;
                lambda_idx += 1;
                let lambda_rot_idx = if need_rot_for_commit[mat_idx] {
                    Some(lambda_idx)
                } else {
                    None
                };
                lambda_idx += 1;
                trace_views.push(TraceViewMeta {
                    com_idx,
                    slice,
                    lambda_eq_idx,
                    lambda_rot_idx,
                });
            }
        }
        let lambda_pows = lambda.powers().take(lambda_idx).collect_vec();

        let mut ht_diff_idxs = Vec::new();
        let mut eq_r_per_lht: HashMap<usize, Vec<SC::EF>> = HashMap::new();
        let mut last_height = 0;
        for (i, tv) in trace_views.iter().enumerate() {
            let n_lift = tv.slice.log_height().saturating_sub(l_skip);
            if i == 0 || tv.slice.log_height() != last_height {
                ht_diff_idxs.push(i);
                last_height = tv.slice.log_height();
            }
            eq_r_per_lht
                .entry(tv.slice.log_height())
                .or_insert_with(|| evals_eq_hypercube(&r[1..1 + n_lift]));
        }
        ht_diff_idxs.push(trace_views.len());

        let eq_const = eval_eq_uni_at_one(l_skip, r[0] * omega_skip);
        let eq_ub_per_trace = vec![SC::EF::ONE; trace_views.len()];

        Self {
            l_skip,
            omega_skip,
            r_0: r[0],
            lambda_pows,
            eq_const,
            stacked_per_commit,
            trace_views,
            ht_diff_idxs,
            eq_r_per_lht,
            q_evals: vec![],
            k_rot_r_per_lht: HashMap::new(),
            eq_ub_per_trace,
        }
    }

    fn batch_sumcheck_uni_round0_poly(&mut self) -> UnivariatePoly<SC::EF> {
        let _span = tracing::info_span!("stacked_round0").entered();
        let l_skip = self.l_skip;
        let omega_skip = self.omega_skip;
        let r_0 = self.r_0;
        let eq_const = self.eq_const;
        let n_skip = 1usize << l_skip;
        let d = 2usize;
        let d_n = d << l_skip;
        let s_0_deg = sumcheck_round0_deg(l_skip, d);
        let g = SC::F::GENERATOR;
        let coset_shifts: Vec<SC::F> = g.powers().skip(1).take(d).collect_vec();
        let twiddles = DftTwiddles::new(l_skip);

        // Extract all self-field references before parallel iteration to satisfy borrow checker
        let ht_diff_idxs = &self.ht_diff_idxs;
        let trace_views = &self.trace_views;
        let stacked_per_commit = &self.stacked_per_commit;
        let eq_r_per_lht = &self.eq_r_per_lht;
        let lambda_pows = &self.lambda_pows;

        let s_0_polys: Vec<[UnivariatePoly<SC::EF>; 2]> = ht_diff_idxs
            .par_windows(2)
            .map(|window| {
                let t_window = &trace_views[window[0]..window[1]];
                let log_height = t_window[0].slice.log_height();
                let n = log_height as isize - l_skip as isize;
                let n_lift = n.max(0) as usize;
                let eq_rs = eq_r_per_lht.get(&log_height).unwrap().as_slice();
                debug_assert_eq!(eq_rs.len(), 1 << n_lift);

                // Collect column data references (each trace view is a single column)
                let q_cols: Vec<&[SC::F]> = t_window
                    .iter()
                    .map(|tv| {
                        debug_assert_eq!(tv.slice.log_height(), log_height);
                        let q = &stacked_per_commit[tv.com_idx].matrix;
                        let s = tv.slice;
                        &q.column(s.col_idx)[s.row_idx..s.row_idx + s.len(l_skip)]
                    })
                    .collect();

                // Precompute z-dependent scalars (d_n values, independent of x)
                let omega_pows: Vec<SC::F> = omega_skip.powers().take(n_skip).collect();
                let (l, omega_l, r_uni) = if n.is_negative() {
                    (
                        l_skip.wrapping_add_signed(n),
                        omega_skip.exp_power_of_2(-n as usize),
                        r_0.exp_power_of_2(-n as usize),
                    )
                } else {
                    (l_skip, omega_skip, r_0)
                };
                // pre_z[rm_idx] = (pre_eq, pre_rot, pre_1) where rm_idx = z_idx * d + c_idx
                let mut pre_z = Vec::with_capacity(d_n);
                for z_idx in 0..n_skip {
                    for &shift in &coset_shifts {
                        let z_val: SC::F = shift * omega_pows[z_idx];
                        let ind = eval_in_uni(l_skip, n, z_val);
                        let eq_r0: SC::EF = eval_eq_uni(l, z_val.into(), r_uni);
                        let eq_r0_rot: SC::EF = eval_eq_uni(l, z_val.into(), r_uni * omega_l);
                        let eq_1: SC::F = eval_eq_uni_at_one(l_skip, z_val);
                        pre_z.push((eq_r0 * ind, eq_r0_rot * ind, eq_const * eq_1 * ind));
                    }
                }

                // Pre-extract lambda weights per trace
                let lambda_eqs: Vec<SC::EF> = t_window
                    .iter()
                    .map(|tv| lambda_pows[tv.lambda_eq_idx])
                    .collect();
                let lambda_rots: Vec<Option<SC::EF>> = t_window
                    .iter()
                    .map(|tv| tv.lambda_rot_idx.map(|idx| lambda_pows[idx]))
                    .collect();
                let num_traces = q_cols.len();

                // Parallel fold-reduce over x-points in H_{n_lift}.
                // Each thread reuses its own DFT and weighted-sum buffers.
                type Acc<F, EF> = (Vec<[EF; 2]>, Vec<F>, Vec<F>, Vec<EF>, Vec<EF>);
                let (evals, _, _, _, _): Acc<SC::F, SC::EF> =
                    (0..1usize << n_lift).into_par_iter().par_fold_reduce(
                        || -> Acc<SC::F, SC::EF> {
                            (
                                vec![[SC::EF::ZERO; 2]; d_n],
                                vec![SC::F::ZERO; n_skip],
                                vec![SC::F::ZERO; n_skip],
                                vec![SC::EF::ZERO; d_n],
                                vec![SC::EF::ZERO; d_n],
                            )
                        },
                        |(mut result, mut coeffs, mut coset, mut w_eq, mut w_rot), x| {
                            // Zero out per-x weighted sums
                            for v in w_eq.iter_mut() {
                                *v = SC::EF::ZERO;
                            }
                            for v in w_rot.iter_mut() {
                                *v = SC::EF::ZERO;
                            }

                            // Phase 1: For each trace, iDFT + coset DFTs, accumulate weighted sums
                            for t in 0..num_traces {
                                let col = q_cols[t];
                                let height = col.len();

                                // Read n_skip evaluations from column at block x
                                for z in 0..n_skip {
                                    coeffs[z] = col[((x << l_skip) + z) % height];
                                }
                                twiddles.idft_inplace(&mut coeffs);

                                let le = lambda_eqs[t];
                                let lr = lambda_rots[t];
                                for (c_idx, &shift) in coset_shifts.iter().enumerate() {
                                    coset.copy_from_slice(&coeffs);
                                    twiddles.coset_dft_inplace(&mut coset, shift);

                                    for z_idx in 0..n_skip {
                                        let rm_idx = z_idx * d + c_idx;
                                        let q = coset[z_idx];
                                        w_eq[rm_idx] += le * q;
                                        if let Some(lr) = lr {
                                            w_rot[rm_idx] += lr * q;
                                        }
                                    }
                                }
                            }

                            // Phase 2: Multiply weighted sums by precomputed z-scalars and
                            // x-dependent eq evaluations
                            let eq_cube = eq_rs[x];
                            let k_rot_cube = eq_rs[rot_prev(x, n_lift)];
                            let delta = k_rot_cube - eq_cube;

                            for rm_idx in 0..d_n {
                                let (pe, pr, p1) = pre_z[rm_idx];
                                result[rm_idx][0] += (pe * eq_cube) * w_eq[rm_idx];
                                result[rm_idx][1] += (pr * eq_cube + p1 * delta) * w_rot[rm_idx];
                            }
                            (result, coeffs, coset, w_eq, w_rot)
                        },
                        |(mut a_result, a1, a2, a3, a4), (b_result, _, _, _, _)| {
                            for (ai, bi) in a_result.iter_mut().zip(b_result.iter()) {
                                ai[0] += bi[0];
                                ai[1] += bi[1];
                            }
                            (a_result, a1, a2, a3, a4)
                        },
                    );

                // Convert accumulated coset evaluations to polynomial coefficients
                std::array::from_fn(|wd| {
                    let values: Vec<SC::EF> = evals.iter().map(|v| v[wd]).collect();
                    UnivariatePoly::from_geometric_cosets_evals_idft(
                        RowMajorMatrix::new(values, d),
                        g,
                        g,
                    )
                })
            })
            .collect();

        let s_0_coeffs = (0..=s_0_deg)
            .map(|i| {
                s_0_polys
                    .iter()
                    .flat_map(|ps| ps.iter())
                    .map(|p| p.coeffs().get(i).copied().unwrap_or(SC::EF::ZERO))
                    .sum::<SC::EF>()
            })
            .collect_vec();
        UnivariatePoly::new(s_0_coeffs)
    }

    fn fold_ple_evals(&mut self, u_0: SC::EF) {
        let _span = tracing::info_span!("stacked_fold_ple").entered();
        let l_skip = self.l_skip;
        let r_0 = self.r_0;
        let omega_skip = self.omega_skip;
        self.q_evals = self
            .stacked_per_commit
            .iter()
            .map(|d| fold_ple_evals_cpu(l_skip, &d.matrix, u_0))
            .collect_vec();
        let eq_uni_u0r0 = eval_eq_uni(l_skip, u_0, r_0);
        let eq_uni_u0r0_rot = eval_eq_uni(l_skip, u_0, r_0 * omega_skip);
        let eq_uni_u01 = eval_eq_uni_at_one(l_skip, u_0);
        self.k_rot_r_per_lht = self
            .eq_r_per_lht
            .par_iter_mut()
            .map(|(&log_height, eq_vec)| {
                let n = log_height as isize - l_skip as isize;
                let n_lift = n.max(0) as usize;
                debug_assert_eq!(eq_vec.len(), 1 << n_lift);
                let ind = eval_in_uni(l_skip, n, u_0);
                let (eq_uni, eq_uni_rot) = if n.is_negative() {
                    let omega = omega_skip.exp_power_of_2(-n as usize);
                    let r = r_0.exp_power_of_2(-n as usize);
                    let l = l_skip.wrapping_add_signed(n);
                    (eval_eq_uni(l, u_0, r), eval_eq_uni(l, u_0, r * omega))
                } else {
                    (eq_uni_u0r0, eq_uni_u0r0_rot)
                };
                let k_rot_evals: Vec<_> = (0..1 << n_lift)
                    .into_par_iter()
                    .map(|x| {
                        let eq_cube = eq_vec[x];
                        let k_rot_cube = eq_vec[rot_prev(x, n_lift)];
                        ind * (eq_uni_rot * eq_cube
                            + self.eq_const * eq_uni_u01 * (k_rot_cube - eq_cube))
                    })
                    .collect();
                eq_vec.par_iter_mut().for_each(|v| {
                    *v *= ind * eq_uni;
                });
                (log_height, k_rot_evals)
            })
            .collect();
    }

    fn batch_sumcheck_poly_eval(&mut self, round: usize, _u_prev: SC::EF) -> [SC::EF; 2] {
        let _span = tracing::info_span!("stacked_round_eval").entered();
        let l_skip = self.l_skip;
        let s_deg = 2;
        let s_evals: Vec<_> = self
            .ht_diff_idxs
            .par_windows(2)
            .flat_map(|window| {
                let t_views = &self.trace_views[window[0]..window[1]];
                let log_height = t_views[0].slice.log_height();
                let n_lift = log_height.saturating_sub(l_skip);
                let hypercube_dim = n_lift.saturating_sub(round);
                let eq_rs = self.eq_r_per_lht.get(&log_height).unwrap().as_slice();
                let k_rot_rs = self.k_rot_r_per_lht.get(&log_height).unwrap().as_slice();
                debug_assert_eq!(eq_rs.len(), 1 << n_lift.saturating_sub(round - 1));
                debug_assert_eq!(k_rot_rs.len(), 1 << n_lift.saturating_sub(round - 1));
                let t_cols = t_views
                    .iter()
                    .map(|tv| {
                        debug_assert_eq!(tv.slice.log_height(), log_height);
                        let q = &self.q_evals[tv.com_idx];
                        let s = tv.slice;
                        let row_start = if round <= n_lift {
                            (s.row_idx >> log_height) << (hypercube_dim + 1)
                        } else {
                            (s.row_idx >> (l_skip + round)) << 1
                        };
                        let t_col =
                            &q.column(s.col_idx)[row_start..row_start + (2 << hypercube_dim)];
                        ColMajorMatrixView::new(t_col, 1)
                    })
                    .collect_vec();
                sumcheck_round_poly_evals(hypercube_dim + 1, s_deg, &t_cols, |x, y, evals| {
                    evals
                        .iter()
                        .enumerate()
                        .fold([SC::EF::ZERO; 2], |mut acc, (i, eval)| {
                            let t_idx = window[0] + i;
                            let tv = &self.trace_views[t_idx];
                            let q = eval[0];
                            let mut eq_ub = self.eq_ub_per_trace[t_idx];
                            let (eq, k_rot) = if round > n_lift {
                                let b = (tv.slice.row_idx >> (l_skip + round - 1)) & 1;
                                eq_ub *= eval_eq_mle(&[x], &[SC::F::from_bool(b == 1)]);
                                debug_assert_eq!(y, 0);
                                (eq_rs[0] * eq_ub, k_rot_rs[0] * eq_ub)
                            } else {
                                let eq_r =
                                    eq_rs[y << 1] * (SC::EF::ONE - x) + eq_rs[(y << 1) + 1] * x;
                                let k_rot_r = k_rot_rs[y << 1] * (SC::EF::ONE - x)
                                    + k_rot_rs[(y << 1) + 1] * x;
                                (eq_r * eq_ub, k_rot_r * eq_ub)
                            };
                            acc[0] += self.lambda_pows[tv.lambda_eq_idx] * q * eq;
                            if let Some(rot_idx) = tv.lambda_rot_idx {
                                acc[1] += self.lambda_pows[rot_idx] * q * k_rot;
                            }
                            acc
                        })
                })
            })
            .collect();
        std::array::from_fn(|i| s_evals.iter().map(|evals| evals[i]).sum::<SC::EF>())
    }

    fn fold_mle_evals(&mut self, round: usize, u_round: SC::EF) {
        let _span = tracing::info_span!("stacked_fold_mle").entered();
        let l_skip = self.l_skip;
        self.q_evals = batch_fold_mle_evals(take(&mut self.q_evals), u_round);
        let one_minus_r = SC::EF::ONE - u_round;
        self.eq_r_per_lht = fold_eval_map(take(&mut self.eq_r_per_lht), one_minus_r, u_round);
        self.k_rot_r_per_lht = fold_eval_map(take(&mut self.k_rot_r_per_lht), one_minus_r, u_round);
        for (tv, eq_ub) in zip(&self.trace_views, &mut self.eq_ub_per_trace) {
            let s = tv.slice;
            let n_lift = s.log_height().saturating_sub(l_skip);
            if round > n_lift {
                let b = (s.row_idx >> (l_skip + round - 1)) & 1;
                *eq_ub *= eval_eq_mle(&[u_round], &[SC::F::from_bool(b == 1)]);
            }
        }
    }

    fn into_stacked_openings(self) -> Vec<Vec<SC::EF>> {
        self.q_evals
            .into_iter()
            .map(|q| {
                debug_assert_eq!(q.height(), 1);
                q.values
            })
            .collect()
    }
}