Struct Instance 

pub struct Instance {
    pub nf_signed: Nullifier,
    pub rk_x: Base,
    pub rk_y: Base,
    pub cmx_new: Base,
    pub van_comm: Base,
    pub vote_round_id: Base,
    pub nc_root: Base,
    pub nf_imt_root: Base,
    pub gov_null: [Base; 5],
    pub dom: Base,
}

Public inputs to the delegation circuit (14 field elements).

The voting client (prover) chooses these values when assembling the proof and posts them to the vote chain (§2.4); the verifier accepts them as the binding the proof must satisfy and checks the proof without seeing any private witnesses. The relationship is asymmetric: a malicious-custody client can choose any public-input vector it likes, so the verifier must source the correct values from authenticated chain state (see crate::delegation::prove::verify_delegation_proof for which fields require caller authentication versus which are proof-attested outputs).

Fields

nf_signed: Nullifier

The derived nullifier of the keystone note.

rk_x: Base

The x-coordinate of the randomized spend validating key.

rk_y: Base

The y-coordinate of the randomized spend validating key.

cmx_new: Base

The extracted commitment of the output note.

van_comm: Base

The governance commitment hash.

vote_round_id: Base

The voting round identifier.

nc_root: Base

Ledger-state anchor: the Orchard note commitment tree root at the verifier-pinned snapshot height. The verifier must obtain this from chain state, not from the prover’s bundle.

nf_imt_root: Base

Ledger-state anchor: the alternate-nullifier IMT root at the same snapshot height as nc_root. The verifier must obtain this from chain state, not from the prover’s bundle.

gov_null: [Base; 5]

Per-note governance nullifiers (5 slots).

dom: Base

The nullifier domain (ZIP §Nullifier Domains).

Implementations

impl Instance

pub const NUM_PUBLIC_INPUTS: usize = 14

Number of public inputs serialized by Self::to_halo2_instance.

pub fn from_parts( nf_signed: Nullifier, rk: VerificationKey<SpendAuth>, cmx_new: Base, van_comm: Base, vote_round_id: Base, nc_root: Base, nf_imt_root: Base, gov_null: [Base; 5], dom: Base, ) -> Result<Self, InstanceError>

Constructs an Instance from its constituent parts.

Callers should authenticate vote_round_id, nc_root, and nf_imt_root out-of-band before passing them here. nc_root and nf_imt_root must come from the same verifier-pinned ledger snapshot; this API does not carry the snapshot height. See crate::delegation::prove::verify_delegation_proof for the trust contract. The remaining fields, including van_comm and dom, are proof-attested outputs.

Rejects an identity rk because the public input stores affine coordinates, and the identity has no affine coordinate representation.

pub fn to_halo2_instance(&self) -> Vec<Scalar>

Serializes the public inputs into the flat field-element vector that halo2’s MockProver::run, create_proof, and verify_proof expect.

The order must match the instance column offsets defined at the top of this file (NF_SIGNED_PUBLIC_OFFSET, RK_X_PUBLIC_OFFSET, RK_Y_PUBLIC_OFFSET, CMX_NEW_PUBLIC_OFFSET, etc.).

Trait Implementations

impl Clone for Instance

fn clone(&self) -> Instance

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Instance

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.