Security context

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

src/circuit/ops/chip.rs: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: The core verification function returned a boolean value representing validation success or failure. Downstream callers could easily ignore or unsafely handle this return value, allowing invalid proofs to be accepted. This was corrected by hard-failing with a strict error type.

Auth Bypass: The WebAssembly wrapper for proof verification mapped verification failures to standard boolean returns instead of throwing JavaScript errors. This allowed calling environments to interpret verification failures as successful evaluations.

Arithmetic Over/Underflow: Synthetic selectors generated during range-check and static lookup configurations could overflow columns without triggering constraint failures, compromising circuit soundness. This required enforcing explicit selector range-check constraints.