CogSec

Polymarket failed to respond to
1. the Zohran bass drop video from Nowadays
2. the video about making Halal carts cheaper

i guess aztec is just using it to optimize the client side proofs

the folding indeed requires the witness. so folding schemes cannot be used to aggregate transactions for blockchain privacy apps. What does Aztec use it for?

Maybe you have users compute client side proofs, and fold the recursive verifiers of those?

but here, it looks like the witness (and blind) is needed to perform folding

here (in protogalaxy), we see Phi (the commitment) is computed with r_w, a random "blind".

Can this resulting committed instance be a substitute for client side proofs in a shielded payments system?