Struct VerifierMultipointEvaled 

pub struct VerifierMultipointEvaled<'a, Zt: ZincTypes<D, FD>, C: BaseFieldConfig, IdealOverF, const D: usize, const FD: usize> { /* private fields */ }

After step 5 (multi-point eval).

Implementations

impl<'a, Zt, C, IdealOverF, const D: usize, const FD: usize> VerifierMultipointEvaled<'a, Zt, C, IdealOverF, D, FD>

where Zt: ZincTypes<D, FD>, Zt::Int: ProjectableToField<C>, <Zt::ArbitraryZt as ZipTypes>::Eval: ProjectableToField<C>, C: BaseFieldConfig<Integer = Zt::Fmod> + ProjectPrimitiveIntegersWithConfig + ProjectElementWithConfig<Zt::Int> + ProjectElementWithConfig<Zt::Chal> + Clone + Send + Sync + 'static, IdealOverF: Ideal,

pub fn step6_lifted_evals<U: Uair>( self, ) -> Result<VerifierLiftedEvalsChecked<'a, Zt, C, IdealOverF, D, FD>, ProtocolError<C::Element>>

Step 6: Per-family lifted-eval consistency check.

When $F_q[X]$ constraints are present:

1. Sample $q’’$ (mirror of prover step 7 start).
2. For each family $i \in {0, …, n}$ (Q + declared primes):
   • Recompute the public-column lifted evals under family $i$’s cfg, interleave with the sent witness-only lifted evals to get the full all-column lifted-eval list all_lifted_evals[i].
   • Project each lifted eval at projecting_elements[i] to get open_evals_i.
   • For Q-family (i = 0) when booleanity ran: append $\alpha’$ projections of witness-bin lifts.
   • For F_q families (i >= 1): append zero entries (matching the zero-padded MP up_evals on F_q families).
   • Call MultipointEval::verify_subclaim against the matching MP subclaim, family by family.
3. Also recompute the $q’’$-family lifted evals and absorb every family’s coefficients into the FS transcript in the same order as the prover.

When only $Q[X]$ constraints are present:

We alias $q’’ := q_0$ and $r^* := r_0$ instead of sampling $q’’$ randomly. The rest proceeds as described above, but we use proof_witness_lifted_evals[0] instead of proof_witness_lifted_evals_pp.

Soundness: per-family arithmetic in single prime fields. With the shared $r_0$ integer endpoint, the $n + 1$ constraint-family verify_subclaim calls each bind their family’s lifted eval to that family’s residue of the committed trace; the $q’’$-family lifted eval is bound independently by the PCS open in step 7.

Trait Implementations

impl<'a, Zt: Clone + ZincTypes<D, FD>, C: Clone + BaseFieldConfig, IdealOverF: Clone, const D: usize, const FD: usize> Clone for VerifierMultipointEvaled<'a, Zt, C, IdealOverF, D, FD>

where C::Element: Clone, Zt::Fmod: Clone,

fn clone(&self) -> VerifierMultipointEvaled<'a, Zt, C, IdealOverF, D, FD>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a, Zt: Debug + ZincTypes<D, FD>, C: Debug + BaseFieldConfig, IdealOverF: Debug, const D: usize, const FD: usize> Debug for VerifierMultipointEvaled<'a, Zt, C, IdealOverF, D, FD>

where C::Element: Debug, Zt::Fmod: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.