Further Reading
These docs are written from the project’s design notes and code. The design notes live next
to this site, as docs/*.md in the repository; they hold the measurements, arguments and
history in full.
Design notes, by topic
Section titled “Design notes, by topic”| topic | notes in docs/ |
|---|---|
| the protocol on a t-shirt | tshirt.md |
| notes, nullifiers, trees | tree-depth-48.md |
| the pool coin and settlement | gsr-pool.md, pool-covenant-design.md, heartbeat-settlement.md, block-capacity.md |
| records and the DA binding | da-binding.md, seed-recovery.md |
| the proof | aggregation.md, portable-proofs.md, grind.md, streamed-prover.md, circuit-id-pinning.md, repin.md |
| zero knowledge | zk-proof.md, zk-masking-design.md, provable-zk.md, witness-hiding.md |
| the verifier’s size | verifier-shrink-plan.md, verifier-shrink-round2.md, verifier-shrink-round3.md, verifier-shrink-lane-packing.md, gsr-native-size.md |
| deposits | gsr-deposits.md, handoff-cancel-isolation.md |
| withdrawals and exits | withdrawals-at-scale.md, multi-payout-vault-design.md, coordinator-protocol.md (§3.1), solo-exit.md |
| the share chain | share-chain.md, share-chain-confirmation.md, batch-without-chooser.md |
| paying provers | prover-notes-design.md |
| fees | fee-rules.md, cost-economics-and-opcode-paths.md |
| wallets, light client, Tor | mobile-light-client.md, seed-recovery.md, pq-payment-codes.md |
| privacy | privacy-review.md, boundary-and-metadata-privacy.md |
| security | soundness.md, circuit-assurance.md, carry-bound-hardening.md |
| upgrades | upgrade-path.md, m3-import-fee.md |
| GSR and gsr-net | gsr-net.md, gsr-net-hosting.md |
The repository’s AGENTS.md has a one-line summary of every note, and wallet-core/README.md
and wallet/ios/README.md cover the wallet’s code.
Outside the project
Section titled “Outside the project”- BIP-440 and BIP-441: Great Script Restoration.
- The Zcash protocol specification (Orchard), for the notes and nullifiers this follows.
- StarkWare’s
stwoand the Circle STARK paper (Haböck, Levit, Papini), for the proof system. recursive-stwo-bitcoin, from which the on-chain verifier is forked.- Arbitrum’s delayed inbox and Optimism’s deposit portal, for forced inclusion.
- P2Pool, for the share chain.
- BIP-47, for the idea behind payment codes.
- BIP157 and BIP158, for the compact block filters the light client uses.
- cheshire.taprootwizards.com, the project’s home page.