circuits-v2.0.0-phase2 — round-2 ceremony (4 machines, 2 drand beacons)

Phase-2 ceremony round 2 (2026-10-08): each circuit chained beelink1 + beelink2 machine-independent contributions + a fresh drand League-of-Entropy beacon on top of the circuits-v1.0.0-phase2 finals. All 5 zkeys re-verified against the original r1cs + ppot_0080_18 ('ZKey Ok!').

Chain per circuit: 5 contributions across 4 machines (MacBook-Pro, Hetzner fsn1, beelink1, beelink2) + 2 drand beacons. Honest trust reading: 1-of-2 (operator + drand); one external contribution adds operator independence — procedure in CEREMONY.md.

Round-2 keys change the Groth16 verification keys. Testnet deployments (Base Sepolia, Tempo) keep round-1 verifiers; mainnet launch deploys verifiers from this release.

Per circuit: final.zkey, verification_key.json, verifier.sol, wasm, r1cs, round-2 beacon proof. Plus CEREMONY.md, ceremony-round2-attestation.jsonl, SHA256SUMS.txt.

circuits-v1.0.0-phase2 — phase-2 trusted setup artifacts (5 circuits)

Groth16 phase-2 ceremony artifacts for the shielded payments stack, ceremony executed 2026-10-02/03 UTC.

Circuits: poseidon_vanchor_2_2, poseidon_vanchor_2_8, poseidon_vanchor_16_2, poseidon_vanchor_16_8, rln_payment_2_8

Ceremony: 3 real-entropy contributions per circuit (contribution #2 executed on a second machine — router-origin-fsn1, Hetzner fsn1 — over SSH) + drand (League of Entropy) public-randomness beacon per circuit (rounds 6518808/6518820/6518829/6518842/6518854; sha256(signature)==randomness verified). Phase 1: public ppot_0080_18.ptau, sha256 9693220206afab749e3d88d4ab5fdf5d36120ea102e7e587ccea0e7a5208e711, transcript verified.

Trust statement (honest): 1-of-N with N=4 per chain, but a single operator ran all 3 contributions across 2 machines — strongest reading is 1-of-2 (operator + drand beacon). External contributions strengthen the keys immediately; see CEREMONY.md for instructions.

Verification: 5/5 'ZKey Ok!' (zkey vs r1cs+ptau), ptau 'Powers of Tau Ok!', forge 103/103, full e2e-local.sh green — SDK vitest 73/73 with real on-chain Groth16 proofs on Anvil, plus fresh 16-input proofs verified on-chain via Verifier2_16/Verifier8_16 verifyProof.

Contents: per-circuit final zkey + witness wasm + verification key + Solidity verifier; SHA256SUMS.txt; ceremony-attestation.jsonl; beacon-proofs; CEREMONY.md; circuits-v1.0.0-phase2.tar.gz (everything above in one archive, sha256 a43a80e5b70b2e34dda2ef42b8eeee7037c00a80874cc723403528c37a22bea7). PR #12.