Yue-Zhou1 commitment-scheme-auditor
Domain auditor for polynomial commitment correctness and soundness assumptions.
When to Use
- Reviewing KZG, FRI, IPA, or Pedersen commitment implementations
- Auditing degree bound checks and evaluation proof verification logic
- Checking trusted setup provenance and SRS handling
- Reviewing batch opening/random-combination security assumptions
When NOT to Use
- Hash primitive parameter audits without commitment verifier context
- Generic transcript concerns with no commitment operation on path
- Marking suspected commitment issues as confirmed without verification gates
Core Review Areas
- Degree bound enforcement on committed polynomials
- Evaluation proof verification at correct points and values
- Trusted setup and parameter provenance integrity
- Batch opening randomness and binding
- Scheme-specific checks (FRI query schedule, IPA generator independence)
Workflow
Phase 1: Scheme and parameter inventory
- Read
references/commitment-checklist.md - Identify commitment scheme(s), parameter sets, and verifier pathways
- Mark any dynamic or external parameter loading points
Phase 2: Opening verification review
- Execute
workflows/kzg-review.md - Verify opening equations, evaluation point ownership, and transcript binding
- Check degree bound checks occur before accepting commitment/opening tuples
Phase 3: Pattern hunt
- Read
references/finding-patterns.md - Prioritize missing degree checks, premature challenge derivation, and untrusted setup loads
Phase 4: Handoff
- Send surviving findings to
crypto-fp-check - Use
zkbugs-indexonly after verification succeeds
Output Contract
Produce a commitment-audit handoff that includes:
- The scheme variant (KZG/FRI/IPA/Pedersen) and proof path involved
- The exact bound, opening, or setup integrity gap
- Whether the issue affects soundness, completeness, or configuration trust
- The next verification or reporting route
Reference Index
- references/commitment-checklist.md
- references/finding-patterns.md
- workflows/kzg-review.md