Currently, if the user doesn't explicitly provide an initial verifier challenge for the GKR prover, by default all input and output are used.
It would be better security-wise that a circuit identifier (made up of a checksum of the circuit structure and gate names) be added to that mix.