Pipeline Overview#
A multi-AIR computation produces \(A\) independent STARK proofs, one per AIR instance. The aggregation pipeline transforms these into a single proof through five stages:
Stage |
Name |
Input |
Output |
|---|---|---|---|
1 |
Basic |
AIR witness |
Per-AIR STARK proof |
2 |
Compressor |
Basic STARK proof |
Compressed STARK proof |
3 |
Recursive1 |
Basic/Compressor |
Normalized SNARK proof |
4 |
Recursive2 |
\(\leq 3\) Recursive1/2 |
Aggregated SNARK proof |
5 |
VadcopFinal |
One R2 per airgroup |
Cross-AIR verified STARK proof |
All stages operate over the Goldilocks field \(\F\) with Poseidon2 hashing. The VadcopFinal STARK proof is submitted directly to the ethproofs aggregation service.
graph TD
subgraph airgroup ["Airgroup «ZisK» (21 AIRs)"]
direction TB
subgraph stage1 ["Stage 1: Basic"]
B1[Main] ; B2[Rom] ; B3[Mem] ; B4[Binary] ; B5[Keccakf] ; Bdots["..."]
end
subgraph stage2 ["Stage 2: Compressor (optional)"]
C5[Compr.]
end
subgraph stage3 ["Stage 3: Recursive1"]
R1a[R1] ; R1b[R1] ; R1c[R1] ; R1d[R1] ; R1e[R1] ; R1dots["..."]
end
subgraph stage4 ["Stage 4: Recursive2"]
R2a[Recursive2] ; R2b[Recursive2]
R2final[Recursive2]
end
B1 --> R1a
B2 --> R1b
B3 --> R1c
B4 --> R1d
B5 --> C5 --> R1e
Bdots -.-> R1dots
R1a --> R2a ; R1b --> R2a ; R1c --> R2a
R1d --> R2b ; R1e --> R2b ; R1dots -.-> R2b
R2a --> R2final ; R2b --> R2final
end
R2final --> VF["<b>VadcopFinal</b><br/>global challenge + constraints"]
classDef basic fill:#e8f0fe,stroke:#666
classDef comp fill:#fce8d0,stroke:#666
classDef r1 fill:#e0f0e0,stroke:#666
classDef r2 fill:#ece0f0,stroke:#666
classDef final fill:#ffe0e0,stroke:#666,font-weight:bold
class B1,B2,B3,B4,B5,Bdots basic
class C5 comp
class R1a,R1b,R1c,R1d,R1e,R1dots r1
class R2a,R2b,R2final r2
class VF final
Fig. 1 VADCOP recursive aggregation pipeline. Each per-AIR Basic proof is optionally compressed, normalized by Recursive1, then aggregated via a Recursive2 tree within each airgroup. VadcopFinal verifies the global challenge and cross-AIR constraints.#
Proof Type Table#
Type |
System |
Description |
|---|---|---|
Basic |
STARK |
Per-AIR STARK proof (see the STARK Protocol) |
Compressor |
STARK |
Optional compression for large Basic proofs |
Recursive1 |
Circom + STARK |
Verifies one Basic/Compressor STARK inside a Circom (R1CS) circuit, proved with a STARK |
Recursive2 |
Circom + STARK |
Aggregates \(\leq 3\) proofs of the same airgroup into 1 (tree reduction) |
VadcopFinal |
STARK |
Combines one Recursive2 per airgroup; verifies global challenge and global constraints |
Field#
All five stages operate over the Goldilocks field \(\F = \mathbb{F}_{2^{64} - 2^{32} + 1}\) with Poseidon2 hashing and cubic extension \(\Fext\).