B7 canonical keysets (devnet) b7-keys-b7a-mimc-binding-v1_b7b-bundle-binding-v1

Canonical B7 keysets — devnet/testnet.

Single-party gnark Groth16/BN254 trusted setup. See a1-blockchain
docs/B7-PROVER-BUILD-AND-RELEASE.md.

These keys verify a commitment BINDING, not execution. A b7 proof shows that
a commitment binds to its attestations — MiMC(coreCommitment, attestationsRoot).
It does not prove any computation ran correctly. Recompute does that.

Scope: devnet/testnet only. This is a single-party setup, so it must be
re-minted through a multi-party ceremony before it secures anything of value.
Re-minting under this tag voids all prior pins.

Proving keys are public Groth16 parameters; no setup randomness is retained in
these artifacts.

Pins to commit

B7_EXPECTED_VK_HASH=0x689fcb647b8b28f330312a73bc1522e0dd524485cc22062e6f92482f325974ba
B7_COMPOSE_VK_PINS=1=0x9c67b8e64fc2f89bf43f0f8911a71188d9bfae5ae5a0bfc2c89ee1ed9aa38387,2=0xab19b5f3fc0c80696067d9e2337199b3e685230b8f79c9ffd285e70926843989,3=0x9e626366ecdd36008f8fffa8d2c82e3a0fa5d793580d59bc2b5db05730d6803a,4=0x88b7a90305b9181c16acc98ff418b04c9d255660b7aeb349e669ab12f9bf428e,5=0x3b5c709518433e939bbe3413ee01274879d4d52d5605ae8c4154286854e5dee9,6=0x94cb2f560676de9115523cb8052cd4a0d829a6773df5b066851c4617359f6adc,7=0x7def238dce57c4bb7a8e4484f62a72a984829487bf59db043f1c2a2a5404b208,8=0x50e0033f96b7c1e423463ad7a35b5e5b4e123e2a742a9b87f5b9058cb8f9389c

Circuit ids: b7a-mimc-binding-v1 / b7b-bundle-binding-v1
Composite fan-in minted for n=1..8; larger n falls back to Model 1 until minted+pinned.

Verified at mint

• B7-A prove → verify round trip: valid
• Tamper (wrong public input): rejected, pairing doesn't match
• VK-hash pin enforcement: correct pin accepted, wrong pin refused (exit 2)