Review
Read what a proof
actually says.
Four public values and nothing else. This page shows each one for a real proof, what it tells a verifier, what it does not, and what can stay visible through other layers.
Make one on the Prove page, or paste one a member gave you. A bundle with a secret in it is refused.
Reviewing reads the bundle and, for a group in the book, the group's public list. It does not check the proof itself; the Verify page does that.
What the proof reveals
| Value | It tells a verifier | It does not tell |
|---|---|---|
| Root— | Which version of the group's list the proof is about. | Which leaf. Every member of that list would produce the same root. |
| Scope— | The one round, vote or gate this proof is for. | Anything about the member. |
| Nullifier— | This identity already used this scope, if the value appears twice. | The secret or the leaf. Values from two scopes cannot be matched by math alone. |
| Signal— | The message the proof is tied to. Change the message and the check fails. | Who wrote it. |
Check the verifier yourself
nargo --version # 1.0.0-beta.22 bb --version # 5.0.0-nightly.20260522 bash circuits/build.sh --check
Recompiles the circuit from source, regenerates the verifier and compares both with what this site serves and what runs on chain 4663.
Kept out of the proof
- Your secret and your salt
- Your leaf's position in the list
- The Merkle path you walked
Can stay visible anyway
- The wallet that sends a proof on chain, and its full history
- Your IP address and network metadata, to whoever serves or relays your request
- Transaction timing, gas and habits that can link actions over time
- The fact that you added a commitment, if you added it from your own wallet
A zero-knowledge proof proves only the statement designed into the circuit. If this list surprises you, read it again before you rely on a proof: no word on this site means anonymous, and nothing here can make your other activity disappear.