A zero-knowledge virtual machine for RISC-V programs using Circle STARKs over Mersenne31.

⚠️ Experimental: Not audited. Do not use in production.

# Install
git clone https://github.com/this-vishalsingh/zp1
cd zp1
cargo build --release

# Run tests
cargo test --workspace

# Run demo
cargo run --release --example demo_benchmark -p zp1-prover

ELF Binary → Executor → Trace → Prover → Proof
               ↓          ↓        ↓
            RV32IM    77 cols   STARK/FRI

Stack: Mersenne31 → Circle STARKs → FRI → DEEP-ALI

• ✅ RV32IM ISA: All 47 base + multiply/divide instructions
• ✅ Circle STARKs: Mersenne31 field with QM31 extension
• ✅ FRI: Fast Reed-Solomon IOP with DEEP-ALI
• ✅ Memory: LogUp permutation argument
• ✅ Parallel: Rayon-based constraint evaluation
• ✅ Range Checks: 16-bit witness validation

• Architecture - System design
• User Guide - How to use ZP1
• Examples - Sample programs
• Contributing - Development guide

Test Coverage: 162 prover tests + 16 integration tests passing

Recent Fixes:

• ✅ DEEP quotient domain points (security fix)
• ✅ OOD evaluation with full QM31 (31→128 bit security)
• ✅ Trace commitment (all 77 columns)
• ✅ Memory consistency integration
• ✅ Range constraints (16-bit validation)
• ✅ FRI folding (y-coordinate division)
• ✅ Cryptographic precompiles (Keccak, SHA2, etc.)
• ✅ Bitwise lookup tables (8-10x speedup)

Known Limitations:

• Circle FFT is O(n²) - needs butterfly optimization
• GPU: Metal implemented (--features gpu-metal), CUDA scaffolded
• No recursion/aggregation

MIT OR Apache-2.0