@trynullsec/s1-zk 1.0.0 → 1.0.2

package/LIMITATIONS.md

@@ -7,6 +7,8 @@ Nullsec S1-ZK v1 is deterministic static analysis for ZK circuit auditing. It is
 - The Halo2 frontend is best-effort Rust source scanning. It is not a full Rust AST, MIR, or Halo2 synthesis analyzer.
 - The Halo2 constraint graph is approximate. It links obvious gates, regions, advice assignments, selector enables, equality/copy edges, lookups, and instance bindings, but it does not execute synthesis code.
 - It is not full formal verification and does not prove circuit soundness.
+- The `--deep` proof obligation layer infers likely obligations from naming, graph relationships, and source structure. These inferred obligations may be wrong, incomplete, or project-specific.
+- Exploit hypotheses are deterministic audit aids, not generated counterexamples and not proof of exploitability.
 - It may miss semantic bugs that require protocol context, cross-circuit reasoning, or full compilation.
 - It does not generate witnesses or counterexamples yet.
 - It does not compile Circom circuits, inspect generated R1CS, or run Halo2 circuit synthesis yet.

package/README.md

@@ -44,6 +44,18 @@ The Halo2 frontend builds a best-effort constraint graph from Rust source. It li
 
 This graph lets Nullsec S1-ZK distinguish advice values that are connected through gates, equality edges, lookups, or public instance exposure from values that are merely assigned in a region. It improves high-signal findings for Orchard-style EC gadgets and other Halo2 circuits, but it is still static source analysis, not formal verification or complete Halo2 synthesis.
 
+## Deep Relationship Analysis
+
+Use `--deep` to enable proof obligation extraction, relation checking, taint/dataflow analysis, and deterministic exploit hypotheses.
+
+```bash
+nullsec-zk scan ./circuits --deep
+```
+
+Deep analysis infers likely obligations such as commitment binding, nullifier binding, Merkle path binding, selector booleanity, EC multiplication consistency, public input binding, and range constraints. It then checks whether parsed constraints, Halo2 graph edges, equality/copy edges, lookups, and public instance bindings appear to support those obligations.
+
+This is relationship-aware static analysis. It helps auditors find gaps faster, but inferred obligations may be wrong or incomplete and are not formal proof obligations in the mathematical verification sense.
+
 ## Installation
 
 ```bash
@@ -57,6 +69,7 @@ npm link
 ```bash
 nullsec-zk scan ./examples
 nullsec-zk scan ./examples/halo2
+nullsec-zk scan ./benchmarks/historical/orchard-inspired --deep
 nullsec-zk scan ./examples --format json
 nullsec-zk scan ./examples --format sarif
 nullsec-zk scan ./examples --report markdown
@@ -138,7 +151,7 @@ Example:
 
 ## Limitations
 
-Static analysis is approximate. The Circom and Halo2 frontends are best-effort source analyzers, do not compile circuits, do not generate witnesses, and do not perform formal verification. See `LIMITATIONS.md`.
+Static analysis is approximate. The Circom and Halo2 frontends are best-effort source analyzers, and `--deep` infers likely proof obligations from naming and graph relationships. Nullsec S1-ZK does not compile circuits, generate witnesses, or perform formal verification. See `LIMITATIONS.md`.
 
 ## Roadmap
 

package/ROADMAP.md

@@ -10,6 +10,7 @@ Nullsec S1-ZK is designed as a modular security product foundation.
 - Plonky2 frontend.
 - R1CS extraction and analysis.
 - Constraint graph visualization.
+- Proof obligation visualization and reviewer workflow.
 - Witness counterexample generation.
 - Spec-to-circuit comparison.
 - LLM-assisted exploit reasoning.

package/RULES.md

@@ -2,6 +2,12 @@
 
 Each rule reports a deterministic static-analysis finding. Severity can be overridden in `.nullsec-zk.json`.
 
+## Deep Analysis Layer
+
+`nullsec-zk scan --deep` adds relationship-aware analysis on top of rule findings. It infers likely proof obligations, checks them against parsed Circom constraints and the Halo2 constraint graph, tracks taint/dataflow paths, and generates deterministic exploit hypotheses for high-impact findings.
+
+This layer is not a formal proof system. Obligations are inferred from circuit structure, names, public bindings, and graph relationships, so they may be incomplete or incorrect. The goal is to help auditors find likely semantic gaps faster.
+
 ## NS-ZK-001 Dangerous Hint Assignment
 
 Severity: CRITICAL when unconstrained, MEDIUM when later constrained.

package/dist/analysis/circuit-intent.d.ts

@@ -0,0 +1,9 @@
+import type { AuditContext, SourceLocation } from "../types.js";
+export interface CircuitIntentHint {
+    kind: "commitment" | "nullifier" | "merkle" | "selector" | "range" | "ec" | "public";
+    subject: string;
+    related: string[];
+    confidence: "HIGH" | "MEDIUM" | "LOW";
+    location: SourceLocation;
+}
+export declare function inferCircuitIntent(context: AuditContext): CircuitIntentHint[];

package/dist/analysis/circuit-intent.js

@@ -0,0 +1,58 @@
+import { isBooleanLikeName } from "../frontends/circom/circom-utils.js";
+import { isEcLikeName } from "../frontends/halo2/halo2-patterns.js";
+function locationOf(file, line = 1, snippet = "") {
+    return { file, line, column: 1, snippet };
+}
+export function inferCircuitIntent(context) {
+    const hints = [];
+    for (const signal of context.ir.signals) {
+        const lower = signal.baseName.toLowerCase();
+        const refs = context.graph.signalReferences(signal.name);
+        if (/commitment|commit/.test(lower)) {
+            hints.push({ kind: "commitment", subject: signal.name, related: refs.flatMap((ref) => ref.snippet?.match(/[A-Za-z_][A-Za-z0-9_]*/g) ?? []), confidence: "MEDIUM", location: signal });
+        }
+        if (/nullifier/.test(lower)) {
+            hints.push({ kind: "nullifier", subject: signal.name, related: refs.flatMap((ref) => ref.snippet?.match(/[A-Za-z_][A-Za-z0-9_]*/g) ?? []), confidence: "MEDIUM", location: signal });
+        }
+        if (/root|path|leaf/.test(lower)) {
+            hints.push({ kind: "merkle", subject: signal.name, related: refs.flatMap((ref) => ref.snippet?.match(/[A-Za-z_][A-Za-z0-9_]*/g) ?? []), confidence: "MEDIUM", location: signal });
+        }
+        if (isBooleanLikeName(signal.baseName)) {
+            hints.push({ kind: "selector", subject: signal.name, related: refs.map((ref) => ref.snippet ?? "").filter(Boolean), confidence: "HIGH", location: signal });
+        }
+        if (/amount|balance|fee|nonce|index|timestamp|quantity|count|size|limb/i.test(signal.baseName)) {
+            hints.push({ kind: "range", subject: signal.name, related: refs.map((ref) => ref.snippet ?? "").filter(Boolean), confidence: "HIGH", location: signal });
+        }
+        if (signal.kind === "input") {
+            hints.push({ kind: "public", subject: signal.name, related: refs.map((ref) => ref.snippet ?? "").filter(Boolean), confidence: "MEDIUM", location: signal });
+        }
+    }
+    for (const assignment of context.halo2?.assignments ?? []) {
+        const text = `${assignment.label ?? ""} ${assignment.columnName ?? ""} ${assignment.assignedVariable ?? ""} ${assignment.expression}`;
+        if (isEcLikeName(text)) {
+            hints.push({
+                kind: "ec",
+                subject: assignment.label ?? assignment.columnName ?? "ec assignment",
+                related: assignment.referencedSymbols,
+                confidence: "MEDIUM",
+                location: assignment
+            });
+        }
+    }
+    for (const query of context.halo2?.queries.filter((candidate) => candidate.queryType === "instance") ?? []) {
+        hints.push({
+            kind: "public",
+            subject: query.columnName,
+            related: [query.snippet ?? ""],
+            confidence: "MEDIUM",
+            location: query
+        });
+    }
+    for (const file of context.halo2?.files ?? []) {
+        if (/ec|ecc|curve|point|scalar|orchard/i.test(file.rawSource)) {
+            hints.push({ kind: "ec", subject: file.filePath.split("/").pop() ?? file.filePath, related: ["base", "scalar", "point", "output"], confidence: "LOW", location: locationOf(file.filePath, 1, "EC-related Halo2 source") });
+        }
+    }
+    return hints;
+}
+//# sourceMappingURL=circuit-intent.js.map

package/dist/analysis/circuit-intent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-intent.js","sourceRoot":"","sources":["../../src/analysis/circuit-intent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAUpE,SAAS,UAAU,CAAC,IAAY,EAAE,IAAI,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE;IACtD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,MAAM,KAAK,GAAwB,EAAE,CAAC;IAEtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxL,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvL,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACpL,CAAC;QACD,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9J,CAAC;QACD,IAAI,oEAAoE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/F,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3J,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9J,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,IAAI,UAAU,CAAC,gBAAgB,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QACtI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,UAAU,IAAI,eAAe;gBACrE,OAAO,EAAE,UAAU,CAAC,iBAAiB;gBACrC,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3G,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,KAAK,CAAC,UAAU;YACzB,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;YAC9B,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAC7N,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/analysis/deep-analysis.d.ts

@@ -0,0 +1,2 @@
+import type { AuditContext, DeepAnalysisResult, Issue } from "../types.js";
+export declare function runDeepAnalysis(context: AuditContext, issues: Issue[]): DeepAnalysisResult;

package/dist/analysis/deep-analysis.js

@@ -0,0 +1,18 @@
+import { generateExploitHypotheses } from "./exploit-hypothesis.js";
+import { extractProofObligations } from "./proof-obligation-extractor.js";
+import { checkProofObligations, summarizeRelationChecks } from "./relation-checker.js";
+import { analyzeTaintFlow } from "./taint-flow.js";
+export function runDeepAnalysis(context, issues) {
+    const taintFlows = analyzeTaintFlow(context);
+    const proofObligations = extractProofObligations(context);
+    const relationChecks = checkProofObligations(context, proofObligations, taintFlows);
+    return {
+        enabled: true,
+        proofObligations,
+        relationChecks,
+        proofObligationSummary: summarizeRelationChecks(relationChecks),
+        taintFlows,
+        exploitHypotheses: generateExploitHypotheses(issues, relationChecks)
+    };
+}
+//# sourceMappingURL=deep-analysis.js.map

package/dist/analysis/deep-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-analysis.js","sourceRoot":"","sources":["../../src/analysis/deep-analysis.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,UAAU,eAAe,CAAC,OAAqB,EAAE,MAAe;IACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;IACpF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,gBAAgB;QAChB,cAAc;QACd,sBAAsB,EAAE,uBAAuB,CAAC,cAAc,CAAC;QAC/D,UAAU;QACV,iBAAiB,EAAE,yBAAyB,CAAC,MAAM,EAAE,cAAc,CAAC;KACrE,CAAC;AACJ,CAAC"}

package/dist/analysis/exploit-hypothesis.d.ts

@@ -0,0 +1,2 @@
+import type { ExploitHypothesis, Issue, RelationCheckResult } from "../types.js";
+export declare function generateExploitHypotheses(issues: Issue[], relationChecks: RelationCheckResult[]): ExploitHypothesis[];

package/dist/analysis/exploit-hypothesis.js

@@ -0,0 +1,65 @@
+function matchObligation(issue, checks) {
+    const issueText = `${issue.signalName ?? ""} ${issue.explanation} ${issue.snippet ?? ""}`.toLowerCase();
+    return checks.find((check) => check.status === "missing" || check.status === "partially_satisfied") ??
+        checks.find((check) => issueText.includes(check.obligationId.toLowerCase().split("-").at(-1) ?? ""));
+}
+function issueText(issue) {
+    return `${issue.ruleId} ${issue.title} ${issue.signalName ?? ""} ${issue.explanation} ${issue.impact} ${issue.suggestedFix} ${issue.snippet ?? ""} ${issue.tags.join(" ")} ${JSON.stringify(issue.metadata ?? {})}`;
+}
+function isEcIssue(issue) {
+    return issue.ruleId.startsWith("NS-H2") && /ec|ecc|curve|point|scalar|base|accumulator|coordinate|output point|output|fixed_base|variable_base/i.test(issueText(issue));
+}
+function isOutputBindingIssue(issue) {
+    return /commitment|nullifier|root|unconstrained output|output value/i.test(issueText(issue));
+}
+function isRangeIssue(issue) {
+    return issue.ruleId === "NS-ZK-006" || /range|bounded integer|overflow|alias/i.test(issueText(issue));
+}
+function isSelectorIssue(issue) {
+    return issue.ruleId === "NS-ZK-005" || issue.ruleId === "NS-ZK-012" || issue.ruleId === "NS-H2-003" || /selector|booleanity|boolean domain|pathindex|flag/i.test(issueText(issue));
+}
+function brokenAssumptionForIssue(issue) {
+    if (isEcIssue(issue))
+        return "EC coordinates and intermediates are fully bound to the claimed group operation.";
+    if (isOutputBindingIssue(issue))
+        return "Output value is fully bound to the private witness relation the protocol assumes.";
+    if (isRangeIssue(issue))
+        return "Arithmetic value has the required bounded integer constraints.";
+    if (isSelectorIssue(issue))
+        return "Selector-like values are constrained to the expected boolean domain.";
+    return "The circuit constrains the semantic relation that the protocol assumes.";
+}
+export function generateExploitHypotheses(issues, relationChecks) {
+    return issues
+        .filter((issue) => issue.severity === "CRITICAL" || issue.severity === "HIGH")
+        .map((issue) => {
+        const related = matchObligation(issue, relationChecks);
+        const isEc = isEcIssue(issue);
+        const isPublic = /public|instance/i.test(`${issue.title} ${issue.explanation}`);
+        const isCommitment = isOutputBindingIssue(issue);
+        return {
+            issueId: issue.id,
+            relatedObligationId: related?.obligationId,
+            hypothesis: isEc
+                ? `A malicious prover may choose ${issue.signalName ?? "an EC-related advice value"} independently of the claimed scalar multiplication relation. If the verifier accepts this value as part of the EC output, the circuit may verify an invalid group operation.`
+                : isPublic
+                    ? "A malicious prover may satisfy local witness assignments while failing to bind the claimed public instance value to the private witness relation."
+                    : isCommitment
+                        ? "A malicious prover may choose a commitment, nullifier, or root value that is not fully bound to the private witness data the protocol assumes it represents."
+                        : `A malicious prover may exploit ${issue.title.toLowerCase()} by choosing witness values that satisfy parsed constraints while violating the intended statement.`,
+            attackerControl: issue.signalName
+                ? `The prover controls witness/advice data influencing \`${issue.signalName}\`.`
+                : "The prover controls witness/advice assignments involved in this finding.",
+            brokenAssumption: brokenAssumptionForIssue(issue),
+            possibleImpact: issue.impact,
+            validationSteps: [
+                "Inspect the cited assignment and all constraints that should bind it.",
+                "Check whether the value appears in a gate expression, equality/copy edge, lookup, or public binding.",
+                "Attempt to construct two witnesses that differ in the suspect value while preserving parsed constraints."
+            ],
+            patchDirection: issue.suggestedFix,
+            confidence: isEc ? "HIGH" : issue.confidence
+        };
+    });
+}
+//# sourceMappingURL=exploit-hypothesis.js.map

package/dist/analysis/exploit-hypothesis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exploit-hypothesis.js","sourceRoot":"","sources":["../../src/analysis/exploit-hypothesis.ts"],"names":[],"mappings":"AAEA,SAAS,eAAe,CAAC,KAAY,EAAE,MAA6B;IAClE,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACxG,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,qBAAqB,CAAC;QACjG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,SAAS,CAAC,KAAY;IAC7B,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;AACtN,CAAC;AAED,SAAS,SAAS,CAAC,KAAY;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,qGAAqG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1K,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAY;IACxC,OAAO,8DAA8D,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,KAAY;IAChC,OAAO,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,uCAAuC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,eAAe,CAAC,KAAY;IACnC,OAAO,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,oDAAoD,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACrL,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAY;IAC5C,IAAI,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,kFAAkF,CAAC;IAChH,IAAI,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,mFAAmF,CAAC;IAC5H,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,gEAAgE,CAAC;IACjG,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,sEAAsE,CAAC;IAC1G,OAAO,yEAAyE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAe,EAAE,cAAqC;IAC9F,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;SAC7E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAChF,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,mBAAmB,EAAE,OAAO,EAAE,YAAY;YAC1C,UAAU,EAAE,IAAI;gBACd,CAAC,CAAC,iCAAiC,KAAK,CAAC,UAAU,IAAI,4BAA4B,+KAA+K;gBAClQ,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,mJAAmJ;oBACrJ,CAAC,CAAC,YAAY;wBACZ,CAAC,CAAC,8JAA8J;wBAChK,CAAC,CAAC,kCAAkC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,qGAAqG;YACxK,eAAe,EAAE,KAAK,CAAC,UAAU;gBAC/B,CAAC,CAAC,yDAAyD,KAAK,CAAC,UAAU,KAAK;gBAChF,CAAC,CAAC,0EAA0E;YAC9E,gBAAgB,EAAE,wBAAwB,CAAC,KAAK,CAAC;YACjD,cAAc,EAAE,KAAK,CAAC,MAAM;YAC5B,eAAe,EAAE;gBACf,uEAAuE;gBACvE,sGAAsG;gBACtG,0GAA0G;aAC3G;YACD,cAAc,EAAE,KAAK,CAAC,YAAY;YAClC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/analysis/proof-obligation-extractor.d.ts

@@ -0,0 +1,2 @@
+import type { AuditContext, ProofObligation } from "../types.js";
+export declare function extractProofObligations(context: AuditContext): ProofObligation[];

package/dist/analysis/proof-obligation-extractor.js

@@ -0,0 +1,119 @@
+import { inferCircuitIntent } from "./circuit-intent.js";
+function makeId(type, subject, index) {
+    return `PO-${type.toUpperCase().replace(/_/g, "-")}-${subject.replace(/[^A-Za-z0-9]+/g, "-")}-${index}`;
+}
+function relatedInputsForCircom(context, subject) {
+    const refs = context.graph.signalReferences(subject);
+    const names = new Set();
+    for (const ref of refs) {
+        for (const token of ref.snippet?.match(/\b[A-Za-z_][A-Za-z0-9_]*\b/g) ?? []) {
+            if (!["signal", "input", "output", "component", "template"].includes(token) && token !== subject)
+                names.add(token);
+        }
+    }
+    for (const input of context.ir.signals.filter((signal) => signal.kind === "input")) {
+        if (/secret|amount|asset|nullifier|note|leaf|path|base|scalar|balance/i.test(input.baseName))
+            names.add(input.name);
+    }
+    return [...names].slice(0, 8);
+}
+function locationFallback(subject) {
+    return { file: "unknown", line: 1, column: 1, snippet: subject };
+}
+export function extractProofObligations(context) {
+    const obligations = [];
+    const hints = inferCircuitIntent(context);
+    hints.forEach((hint, index) => {
+        if (hint.kind === "commitment") {
+            obligations.push({
+                id: makeId("commitment_binding", hint.subject, index),
+                type: "commitment_binding",
+                subject: hint.subject,
+                requiredInputs: relatedInputsForCircom(context, hint.subject).filter((name) => /secret|amount|asset|nullifier|note/i.test(name)),
+                expectedRelation: "Commitment output should bind the secret, amount, asset, nullifier, or note data it claims to commit to.",
+                relatedSignals: hint.related,
+                confidence: hint.confidence,
+                sourceLocation: hint.location
+            });
+        }
+        if (hint.kind === "nullifier") {
+            obligations.push({
+                id: makeId("nullifier_binding", hint.subject, index),
+                type: "nullifier_binding",
+                subject: hint.subject,
+                requiredInputs: relatedInputsForCircom(context, hint.subject).filter((name) => /secret|note|nullifier/i.test(name)),
+                expectedRelation: "Nullifier should bind secret or note data so it cannot be chosen independently.",
+                relatedSignals: hint.related,
+                confidence: hint.confidence,
+                sourceLocation: hint.location
+            });
+        }
+        if (hint.kind === "merkle") {
+            obligations.push({
+                id: makeId("merkle_root_binding", hint.subject, index),
+                type: "merkle_root_binding",
+                subject: hint.subject,
+                requiredInputs: relatedInputsForCircom(context, hint.subject).filter((name) => /path|leaf|root|index/i.test(name)),
+                expectedRelation: "Merkle root should bind path elements, path selector/index values, and the leaf.",
+                relatedSignals: hint.related,
+                confidence: hint.confidence,
+                sourceLocation: hint.location
+            });
+        }
+        if (hint.kind === "selector") {
+            obligations.push({
+                id: makeId("selector_booleanity", hint.subject, index),
+                type: "selector_booleanity",
+                subject: hint.subject,
+                requiredInputs: [hint.subject],
+                expectedRelation: "Selector or path index should be constrained to boolean values.",
+                relatedSignals: hint.related,
+                confidence: "HIGH",
+                sourceLocation: hint.location
+            });
+        }
+        if (hint.kind === "range") {
+            obligations.push({
+                id: makeId("range_constraint", hint.subject, index),
+                type: "range_constraint",
+                subject: hint.subject,
+                requiredInputs: [hint.subject],
+                expectedRelation: "Arithmetic value should be range constrained to its intended integer domain.",
+                relatedSignals: hint.related,
+                confidence: hint.confidence,
+                sourceLocation: hint.location
+            });
+        }
+        if (hint.kind === "public") {
+            obligations.push({
+                id: makeId("public_input_binding", hint.subject, index),
+                type: "public_input_binding",
+                subject: hint.subject,
+                requiredInputs: [hint.subject],
+                expectedRelation: "Public input or instance value should be connected to private witness data or a constrained relation.",
+                relatedSignals: hint.related,
+                confidence: hint.confidence,
+                sourceLocation: hint.location
+            });
+        }
+    });
+    const halo2 = context.halo2;
+    if (halo2 && halo2.assignments.some((assignment) => /ec|curve|point|scalar|base|accumulator|output/i.test(`${assignment.label ?? ""} ${assignment.columnName ?? ""}`))) {
+        const first = halo2.assignments.find((assignment) => /ec|curve|point|scalar|base|accumulator|output/i.test(`${assignment.label ?? ""} ${assignment.columnName ?? ""}`));
+        const related = halo2.assignments
+            .filter((assignment) => assignment.file === first?.file && /base|scalar|point|accumulator|output|x|y/i.test(`${assignment.label ?? ""} ${assignment.columnName ?? ""}`))
+            .map((assignment) => assignment.label ?? assignment.columnName ?? "unknown");
+        obligations.push({
+            id: makeId("ec_multiplication", first?.file.split("/").pop() ?? "halo2-ec", obligations.length),
+            type: "ec_multiplication",
+            subject: first?.file.split("/").pop() ?? "Halo2 EC operation",
+            requiredInputs: related,
+            expectedRelation: "Output point should bind base point and scalar through complete elliptic-curve multiplication constraints.",
+            relatedSignals: related,
+            confidence: "MEDIUM",
+            sourceLocation: first ?? locationFallback("Halo2 EC operation")
+        });
+    }
+    return obligations;
+}
+//# sourceMappingURL=proof-obligation-extractor.js.map

package/dist/analysis/proof-obligation-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-obligation-extractor.js","sourceRoot":"","sources":["../../src/analysis/proof-obligation-extractor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,SAAS,MAAM,CAAC,IAAyB,EAAE,OAAe,EAAE,KAAa;IACvE,OAAO,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAqB,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5E,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QACnF,IAAI,mEAAmE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAqB;IAC3D,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE1C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACrD,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,cAAc,EAAE,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChI,gBAAgB,EAAE,0GAA0G;gBAC5H,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,cAAc,EAAE,IAAI,CAAC,QAAQ;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9B,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACpD,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,cAAc,EAAE,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnH,gBAAgB,EAAE,iFAAiF;gBACnG,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,cAAc,EAAE,IAAI,CAAC,QAAQ;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACtD,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,cAAc,EAAE,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClH,gBAAgB,EAAE,kFAAkF;gBACpG,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,cAAc,EAAE,IAAI,CAAC,QAAQ;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACtD,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,cAAc,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC9B,gBAAgB,EAAE,iEAAiE;gBACnF,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,UAAU,EAAE,MAAM;gBAClB,cAAc,EAAE,IAAI,CAAC,QAAQ;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACnD,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,cAAc,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC9B,gBAAgB,EAAE,8EAA8E;gBAChG,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,cAAc,EAAE,IAAI,CAAC,QAAQ;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACvD,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,cAAc,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC9B,gBAAgB,EAAE,uGAAuG;gBACzH,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,cAAc,EAAE,IAAI,CAAC,QAAQ;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,gDAAgD,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QACvK,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,gDAAgD,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACxK,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW;aAC9B,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,KAAK,EAAE,IAAI,IAAI,2CAA2C,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;aACvK,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;QAC/E,WAAW,CAAC,IAAI,CAAC;YACf,EAAE,EAAE,MAAM,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC;YAC/F,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,oBAAoB;YAC7D,cAAc,EAAE,OAAO;YACvB,gBAAgB,EAAE,4GAA4G;YAC9H,cAAc,EAAE,OAAO;YACvB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,KAAK,IAAI,gBAAgB,CAAC,oBAAoB,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/analysis/relation-checker.d.ts

@@ -0,0 +1,9 @@
+import type { AuditContext, ProofObligation, RelationCheckResult, TaintFlowPath } from "../types.js";
+export declare function checkProofObligations(context: AuditContext, obligations: ProofObligation[], taintFlows?: TaintFlowPath[]): RelationCheckResult[];
+export declare function summarizeRelationChecks(checks: RelationCheckResult[]): {
+    total: number;
+    satisfied: number;
+    partially_satisfied: number;
+    missing: number;
+    unknown: number;
+};

package/dist/analysis/relation-checker.js

@@ -0,0 +1,64 @@
+import { Halo2ConstraintGraph } from "../frontends/halo2/halo2-constraint-graph.js";
+function statusCounts(connections) {
+    if (connections.length === 0)
+        return "unknown";
+    if (connections.every(Boolean))
+        return "satisfied";
+    if (connections.some(Boolean))
+        return "partially_satisfied";
+    return "missing";
+}
+function result(obligation, status, evidence, missing, explanation) {
+    return { obligationId: obligation.id, status, evidence, missing, explanation };
+}
+export function checkProofObligations(context, obligations, taintFlows = []) {
+    const halo2Graph = context.halo2 ? new Halo2ConstraintGraph(context.halo2) : undefined;
+    return obligations.map((obligation) => {
+        if (obligation.type === "selector_booleanity") {
+            const ok = context.graph.hasBooleanityConstraint(obligation.subject);
+            return result(obligation, ok ? "satisfied" : "missing", ok ? [`Booleanity constraint found for ${obligation.subject}`] : [], ok ? [] : [obligation.subject], ok ? "Selector-like value has a recognized booleanity constraint." : "Selector-like value does not have a recognized booleanity constraint.");
+        }
+        if (obligation.type === "range_constraint") {
+            const ok = context.graph.hasRangeCheck(obligation.subject);
+            return result(obligation, ok ? "satisfied" : "missing", ok ? [`Range-check pattern found for ${obligation.subject}`] : [], ok ? [] : [obligation.subject], ok ? "Arithmetic value has a recognized range-check pattern." : "Arithmetic value does not have a recognized range-check pattern.");
+        }
+        if (obligation.type === "public_input_binding") {
+            const circomBound = context.graph.appearsInAnyConstraint(obligation.subject);
+            const halo2Bound = halo2Graph?.instanceQueryIsBound(obligation.subject, obligation.sourceLocation.file) ?? false;
+            const ok = circomBound || halo2Bound;
+            return result(obligation, ok ? "satisfied" : "missing", ok ? [`Public value ${obligation.subject} appears connected to constraints or instance binding`] : [], ok ? [] : [obligation.subject], ok ? "Public value is connected to a parsed relation." : "Public value is not connected to a parsed relation.");
+        }
+        if (obligation.type === "commitment_binding" || obligation.type === "nullifier_binding" || obligation.type === "merkle_root_binding") {
+            const subjectConnected = context.graph.appearsInAnyConstraint(obligation.subject);
+            const inputChecks = obligation.requiredInputs.map((input) => context.graph.appearsInAnyConstraint(input));
+            const status = subjectConnected ? statusCounts(inputChecks.length > 0 ? inputChecks : [subjectConnected]) : "missing";
+            return result(obligation, status, subjectConnected ? [`${obligation.subject} appears in parsed constraints`] : [], obligation.requiredInputs.filter((input, index) => !inputChecks[index]), status === "satisfied"
+                ? "The inferred binding obligation is supported by parsed constraints."
+                : status === "partially_satisfied"
+                    ? "Some inferred inputs are connected, but the full binding relation was not established."
+                    : "The inferred binding relation is missing or not visible to static analysis.");
+        }
+        if (obligation.type === "ec_multiplication") {
+            const relevantFlows = taintFlows.filter((flow) => flow.risk === "ec_unconnected_coordinate" && flow.sourceLocation?.file === obligation.sourceLocation.file);
+            const required = obligation.requiredInputs.length > 0 ? obligation.requiredInputs : relevantFlows.map((flow) => flow.sink);
+            const connected = required.map((name) => {
+                const flow = relevantFlows.find((candidate) => candidate.sink === name || candidate.sink.includes(name) || name.includes(candidate.sink));
+                return flow ? flow.constrained : true;
+            });
+            const status = statusCounts(connected);
+            return result(obligation, status, relevantFlows.filter((flow) => flow.constrained).map((flow) => `${flow.sink}: ${flow.support.join(", ")}`), relevantFlows.filter((flow) => !flow.constrained).map((flow) => flow.sink), status === "satisfied"
+                ? "EC multiplication-related assignments appear connected to parsed constraints."
+                : status === "partially_satisfied"
+                    ? "The EC multiplication relation is partially supported, but some coordinates or inputs are unconnected."
+                    : "The EC multiplication relation is missing critical connections between assigned values and constraints.");
+        }
+        return result(obligation, "unknown", [], obligation.requiredInputs, "No relation checker is available for this obligation type.");
+    });
+}
+export function summarizeRelationChecks(checks) {
+    return checks.reduce((summary, check) => {
+        summary[check.status] += 1;
+        return summary;
+    }, { total: checks.length, satisfied: 0, partially_satisfied: 0, missing: 0, unknown: 0 });
+}
+//# sourceMappingURL=relation-checker.js.map

package/dist/analysis/relation-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relation-checker.js","sourceRoot":"","sources":["../../src/analysis/relation-checker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAGpF,SAAS,YAAY,CAAC,WAAsB;IAC1C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACnD,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC5D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,UAA2B,EAAE,MAAsB,EAAE,QAAkB,EAAE,OAAiB,EAAE,WAAmB;IAC7H,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAqB,EAAE,WAA8B,EAAE,aAA8B,EAAE;IAC3H,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvF,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACpC,IAAI,UAAU,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACrE,OAAO,MAAM,CACX,UAAU,EACV,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAC5B,EAAE,CAAC,CAAC,CAAC,CAAC,mCAAmC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EACnE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAC9B,EAAE,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,uEAAuE,CAC7I,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO,MAAM,CACX,UAAU,EACV,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAC5B,EAAE,CAAC,CAAC,CAAC,CAAC,iCAAiC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EACjE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAC9B,EAAE,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,kEAAkE,CACnI,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,UAAU,GAAG,UAAU,EAAE,oBAAoB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YACjH,MAAM,EAAE,GAAG,WAAW,IAAI,UAAU,CAAC;YACrC,OAAO,MAAM,CACX,UAAU,EACV,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAC5B,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,UAAU,CAAC,OAAO,uDAAuD,CAAC,CAAC,CAAC,CAAC,EAAE,EACrG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAC9B,EAAE,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC,CAAC,qDAAqD,CAC/G,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,oBAAoB,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAmB,IAAI,UAAU,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACrI,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClF,MAAM,WAAW,GAAG,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1G,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtH,OAAO,MAAM,CACX,UAAU,EACV,MAAM,EACN,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAAE,EAC/E,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EACvE,MAAM,KAAK,WAAW;gBACpB,CAAC,CAAC,qEAAqE;gBACvE,CAAC,CAAC,MAAM,KAAK,qBAAqB;oBAChC,CAAC,CAAC,wFAAwF;oBAC1F,CAAC,CAAC,6EAA6E,CACpF,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC5C,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,KAAK,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC7J,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3H,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1I,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,MAAM,CACX,UAAU,EACV,MAAM,EACN,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAC1G,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC1E,MAAM,KAAK,WAAW;gBACpB,CAAC,CAAC,+EAA+E;gBACjF,CAAC,CAAC,MAAM,KAAK,qBAAqB;oBAChC,CAAC,CAAC,wGAAwG;oBAC1G,CAAC,CAAC,yGAAyG,CAChH,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,CAAC,cAAc,EAAE,4DAA4D,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA6B;IACnE,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACjB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC,EACD,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CACvF,CAAC;AACJ,CAAC"}

package/dist/analysis/taint-flow.d.ts

@@ -0,0 +1,2 @@
+import type { AuditContext, TaintFlowPath } from "../types.js";
+export declare function analyzeTaintFlow(context: AuditContext): TaintFlowPath[];

package/dist/analysis/taint-flow.js

@@ -0,0 +1,60 @@
+import { Halo2ConstraintGraph } from "../frontends/halo2/halo2-constraint-graph.js";
+function idFor(prefix, index) {
+    return `${prefix}-${String(index + 1).padStart(4, "0")}`;
+}
+export function analyzeTaintFlow(context) {
+    const flows = [];
+    for (const assignment of context.ir.assignments) {
+        const sinkLike = /commit|nullifier|root|out|output/i.test(assignment.lhs);
+        if (!sinkLike)
+            continue;
+        const constrained = context.graph.appearsInAnyConstraint(assignment.lhs);
+        flows.push({
+            id: idFor("TF-CIRCOM", flows.length),
+            source: assignment.rhs,
+            sink: assignment.lhs,
+            path: [assignment.rhs, assignment.lhs],
+            constrained,
+            support: constrained ? context.graph.constraintsForSignal(assignment.lhs).map((constraint) => constraint.expression) : [],
+            risk: "untrusted_to_output",
+            confidence: constrained ? "MEDIUM" : "HIGH",
+            sourceLocation: assignment
+        });
+    }
+    if (context.halo2) {
+        const graph = new Halo2ConstraintGraph(context.halo2);
+        for (const assignment of context.halo2.assignments) {
+            const label = assignment.label ?? assignment.columnName ?? assignment.target ?? "unknown";
+            const sinkLike = /commit|nullifier|root|output|out|point|base|scalar|accumulator|x|y/i.test(label);
+            if (!sinkLike)
+                continue;
+            const support = graph.assignmentConnections(assignment);
+            flows.push({
+                id: idFor("TF-HALO2", flows.length),
+                source: assignment.assignedVariable ?? assignment.expression,
+                sink: label,
+                path: [assignment.assignedVariable ?? assignment.expression, label],
+                constrained: support.length > 0,
+                support,
+                risk: /point|base|scalar|accumulator|x|y/i.test(label) ? "ec_unconnected_coordinate" : "untrusted_to_output",
+                confidence: support.length > 0 ? "MEDIUM" : "HIGH",
+                sourceLocation: assignment
+            });
+        }
+        for (const binding of context.halo2.instanceConstraints) {
+            flows.push({
+                id: idFor("TF-HALO2-PUBLIC", flows.length),
+                source: binding.cell,
+                sink: binding.instanceColumn,
+                path: [binding.cell, binding.instanceColumn],
+                constrained: true,
+                support: [binding.snippet ?? "constrain_instance"],
+                risk: "public_binding_without_relation",
+                confidence: "MEDIUM",
+                sourceLocation: binding
+            });
+        }
+    }
+    return flows;
+}
+//# sourceMappingURL=taint-flow.js.map

package/dist/analysis/taint-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-flow.js","sourceRoot":"","sources":["../../src/analysis/taint-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAGpF,SAAS,KAAK,CAAC,MAAc,EAAE,KAAa;IAC1C,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,mCAAmC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACpC,MAAM,EAAE,UAAU,CAAC,GAAG;YACtB,IAAI,EAAE,UAAU,CAAC,GAAG;YACpB,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;YACtC,WAAW;YACX,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;YACzH,IAAI,EAAE,qBAAqB;YAC3B,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;YAC3C,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,IAAI,SAAS,CAAC;YAC1F,MAAM,QAAQ,GAAG,qEAAqE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnG,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;gBACnC,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,UAAU,CAAC,UAAU;gBAC5D,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,IAAI,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC;gBACnE,WAAW,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;gBAC/B,OAAO;gBACP,IAAI,EAAE,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,qBAAqB;gBAC5G,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;gBAClD,cAAc,EAAE,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,IAAI;gBACpB,IAAI,EAAE,OAAO,CAAC,cAAc;gBAC5B,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC5C,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC;gBAClD,IAAI,EAAE,iCAAiC;gBACvC,UAAU,EAAE,QAAQ;gBACpB,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli.js

@@ -19,6 +19,7 @@ program
     .option("--out <path>", "write report output to a path")
     .option("--fail-on <severity>", "CRITICAL, HIGH, MEDIUM, LOW, or INFO")
     .option("--config <path>", "config file path")
+    .option("--deep", "enable proof obligation, taint flow, and exploit hypothesis analysis")
     .action(async (target, options) => {
     try {
         const run = await scanTarget(target, {
@@ -26,7 +27,8 @@ program
             report: options.report,
             out: options.out,
             failOn: options.failOn ? normalizeSeverity(options.failOn, "CRITICAL") : undefined,
-            configPath: options.config
+            configPath: options.config,
+            deep: options.deep
         });
         if (!options.out && !options.report)
             process.stdout.write(run.output);

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,gEAAgE,CAAC;KAC7E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,QAAQ,CAAC,UAAU,EAAE,kCAAkC,CAAC;KACxD,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;KACjE,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;KACrE,MAAM,CAAC,cAAc,EAAE,+BAA+B,CAAC;KACvD,MAAM,CAAC,sBAAsB,EAAE,sCAAsC,CAAC;KACtE,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;KAC7C,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,OAAyG,EAAE,EAAE;IAC1I,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YAClF,UAAU,EAAE,OAAO,CAAC,MAAM;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACrF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE;IAC1I,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK;;oBAEnB,IAAI,CAAC,eAAe;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;;EAE1B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,uCAAuC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACvF,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,gEAAgE,CAAC;KAC7E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,QAAQ,CAAC,UAAU,EAAE,kCAAkC,CAAC;KACxD,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;KACjE,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;KACrE,MAAM,CAAC,cAAc,EAAE,+BAA+B,CAAC;KACvD,MAAM,CAAC,sBAAsB,EAAE,sCAAsC,CAAC;KACtE,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;KAC7C,MAAM,CAAC,QAAQ,EAAE,sEAAsE,CAAC;KACxF,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,OAAyH,EAAE,EAAE;IAC1J,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YAClF,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACrF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE;IAC1I,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK;;oBAEnB,IAAI,CAAC,eAAe;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;;EAE1B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,uCAAuC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACvF,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/core/audit-engine.d.ts

@@ -1,3 +1,3 @@
 import type { AuditResult, NullsecConfig, ParsedCircuitFile } from "../types.js";
 import type { Halo2CircuitFile } from "../frontends/halo2/halo2-types.js";
-export declare function auditParsedFiles(target: string, parsedFiles: ParsedCircuitFile[], config: NullsecConfig, halo2Files?: Halo2CircuitFile[]): AuditResult;
+export declare function auditParsedFiles(target: string, parsedFiles: ParsedCircuitFile[], config: NullsecConfig, halo2Files?: Halo2CircuitFile[], deep?: boolean): AuditResult;

package/dist/core/audit-engine.js

@@ -1,6 +1,7 @@
 import { buildCircuitIR } from "../frontends/circom/circom-ir-builder.js";
 import { buildHalo2IR } from "../frontends/halo2/halo2-ir-builder.js";
 import { ConstraintGraph } from "../ir/constraint-graph.js";
+import { runDeepAnalysis } from "../analysis/deep-analysis.js";
 import { allRules } from "../rules/index.js";
 import { summarizeIssues } from "../report/summary.js";
 import { RuleEngine } from "./rule-engine.js";
@@ -11,12 +12,13 @@ function frontendName(circomCount, halo2Count) {
         return "Halo2";
     return "Circom";
 }
-export function auditParsedFiles(target, parsedFiles, config, halo2Files = []) {
+export function auditParsedFiles(target, parsedFiles, config, halo2Files = [], deep = false) {
     const ir = buildCircuitIR(parsedFiles);
     const halo2 = buildHalo2IR(halo2Files);
     const graph = new ConstraintGraph(ir);
     const engine = new RuleEngine(allRules);
-    const { issues, rulesExecuted } = engine.run({ target, ir, graph, config, halo2 });
+    const context = { target, ir, graph, config, halo2 };
+    const { issues, rulesExecuted } = engine.run(context);
     return {
         tool: { name: "Nullsec S1-ZK", version: "1.0.0" },
         target,
@@ -25,7 +27,8 @@ export function auditParsedFiles(target, parsedFiles, config, halo2Files = []) {
         rulesExecuted,
         summary: summarizeIssues(issues),
         issues,
-        parserWarnings: [...ir.parserWarnings, ...halo2.parserWarnings]
+        parserWarnings: [...ir.parserWarnings, ...halo2.parserWarnings],
+        deepAnalysis: deep ? runDeepAnalysis(context, issues) : undefined
     };
 }
 //# sourceMappingURL=audit-engine.js.map

package/dist/core/audit-engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-engine.js","sourceRoot":"","sources":["../../src/core/audit-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,SAAS,YAAY,CAAC,WAAmB,EAAE,UAAkB;IAC3D,IAAI,WAAW,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,WAAgC,EAAE,MAAqB,EAAE,aAAiC,EAAE;IAC3I,MAAM,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE;QACjD,MAAM;QACN,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;QAC7D,YAAY,EAAE,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM;QACpD,aAAa;QACb,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;QAChC,MAAM;QACN,cAAc,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC;KAChE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"audit-engine.js","sourceRoot":"","sources":["../../src/core/audit-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,SAAS,YAAY,CAAC,WAAmB,EAAE,UAAkB;IAC3D,IAAI,WAAW,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,WAAgC,EAAE,MAAqB,EAAE,aAAiC,EAAE,EAAE,IAAI,GAAG,KAAK;IACzJ,MAAM,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACrD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE;QACjD,MAAM;QACN,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;QAC7D,YAAY,EAAE,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM;QACpD,aAAa;QACb,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;QAChC,MAAM;QACN,cAAc,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC;QAC/D,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC;AACJ,CAAC"}

package/dist/report/markdown.js

@@ -19,6 +19,38 @@ ${issue.impact}
 ${issue.suggestedFix}
 `;
 }
+function renderDeepAnalysis(result) {
+    const deep = result.deepAnalysis;
+    if (!deep)
+        return "";
+    const summary = deep.proofObligationSummary;
+    return `## Proof Obligations
+
+- Total inferred: ${summary.total}
+- Satisfied: ${summary.satisfied}
+- Partial: ${summary.partially_satisfied}
+- Missing: ${summary.missing}
+- Unknown: ${summary.unknown}
+
+## Exploit Hypotheses
+
+${deep.exploitHypotheses
+        .slice(0, 10)
+        .map((hypothesis) => `### ${hypothesis.issueId}
+
+${hypothesis.hypothesis}
+
+**Attacker control:** ${hypothesis.attackerControl}
+
+**Broken assumption:** ${hypothesis.brokenAssumption}
+
+**Possible impact:** ${hypothesis.possibleImpact}
+
+**Patch direction:** ${hypothesis.patchDirection}
+`)
+        .join("\n")}
+`;
+}
 export function renderMarkdownReport(result) {
     return `# Nullsec S1-ZK Report
 
@@ -38,6 +70,7 @@ AI-native auditing for zero-knowledge circuits. Find underconstraints before the
 - LOW: ${result.summary.LOW}
 - INFO: ${result.summary.INFO}
 
+${renderDeepAnalysis(result)}
 ${result.issues.map(renderIssue).join("\n")}
 ${result.parserWarnings.length > 0 ? `\n## Parser Warnings\n\n${result.parserWarnings.map((warning) => `- \`${warning.file}:${warning.line}\` ${warning.message}`).join("\n")}\n` : ""}
 `;

package/dist/report/markdown.js.map

@@ -1 +1 @@
-{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/report/markdown.ts"],"names":[],"mappings":"AAEA,SAAS,WAAW,CAAC,KAAY;IAC/B,OAAO,OAAO,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;;cAEhD,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;gBACtB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,SAAS;kBAC1D,KAAK,CAAC,UAAU;;;EAGhC,KAAK,CAAC,OAAO,IAAI,EAAE;;;;EAInB,KAAK,CAAC,WAAW;;;EAGjB,KAAK,CAAC,MAAM;;;EAGZ,KAAK,CAAC,YAAY;CACnB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO;;;;gBAIO,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,QAAQ;qBACV,MAAM,CAAC,YAAY;sBAClB,MAAM,CAAC,aAAa;oBACtB,MAAM,CAAC,MAAM,CAAC,MAAM;;;;cAI1B,MAAM,CAAC,OAAO,CAAC,QAAQ;UAC3B,MAAM,CAAC,OAAO,CAAC,IAAI;YACjB,MAAM,CAAC,OAAO,CAAC,MAAM;SACxB,MAAM,CAAC,OAAO,CAAC,GAAG;UACjB,MAAM,CAAC,OAAO,CAAC,IAAI;;EAE3B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EACzC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;CACrL,CAAC;AACF,CAAC"}
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/report/markdown.ts"],"names":[],"mappings":"AAEA,SAAS,WAAW,CAAC,KAAY;IAC/B,OAAO,OAAO,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;;cAEhD,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;gBACtB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,SAAS;kBAC1D,KAAK,CAAC,UAAU;;;EAGhC,KAAK,CAAC,OAAO,IAAI,EAAE;;;;EAInB,KAAK,CAAC,WAAW;;;EAGjB,KAAK,CAAC,MAAM;;;EAGZ,KAAK,CAAC,YAAY;CACnB,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC;IAC5C,OAAO;;oBAEW,OAAO,CAAC,KAAK;eAClB,OAAO,CAAC,SAAS;aACnB,OAAO,CAAC,mBAAmB;aAC3B,OAAO,CAAC,OAAO;aACf,OAAO,CAAC,OAAO;;;;EAI1B,IAAI,CAAC,iBAAiB;SACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,UAAU,CAAC,OAAO;;EAE3C,UAAU,CAAC,UAAU;;wBAEC,UAAU,CAAC,eAAe;;yBAEzB,UAAU,CAAC,gBAAgB;;uBAE7B,UAAU,CAAC,cAAc;;uBAEzB,UAAU,CAAC,cAAc;CAC/C,CACE;SACA,IAAI,CAAC,IAAI,CAAC;CACZ,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO;;;;gBAIO,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,QAAQ;qBACV,MAAM,CAAC,YAAY;sBAClB,MAAM,CAAC,aAAa;oBACtB,MAAM,CAAC,MAAM,CAAC,MAAM;;;;cAI1B,MAAM,CAAC,OAAO,CAAC,QAAQ;UAC3B,MAAM,CAAC,OAAO,CAAC,IAAI;YACjB,MAAM,CAAC,OAAO,CAAC,MAAM;SACxB,MAAM,CAAC,OAAO,CAAC,GAAG;UACjB,MAAM,CAAC,OAAO,CAAC,IAAI;;EAE3B,kBAAkB,CAAC,MAAM,CAAC;EAC1B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EACzC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;CACrL,CAAC;AACF,CAAC"}

package/dist/report/terminal.js

@@ -27,6 +27,30 @@ Confidence:
 ${issue.confidence}
 `;
 }
+function renderDeepAnalysis(result) {
+    const deep = result.deepAnalysis;
+    if (!deep)
+        return "";
+    const summary = deep.proofObligationSummary;
+    const criticalHypotheses = deep.exploitHypotheses.slice(0, 5);
+    return `
+Proof obligations:
+Total      ${summary.total}
+Satisfied  ${summary.satisfied}
+Partial    ${summary.partially_satisfied}
+Missing    ${summary.missing}
+Unknown    ${summary.unknown}
+
+${criticalHypotheses
+        .map((hypothesis) => `Exploit hypothesis for ${hypothesis.issueId}:
+${hypothesis.hypothesis}
+Broken assumption:
+${hypothesis.brokenAssumption}
+Patch direction:
+${hypothesis.patchDirection}
+`)
+        .join("\n")}`;
+}
 export function renderTerminalReport(result) {
     return `${chalk.bold("Nullsec S1-ZK")}
 AI-native auditing for zero-knowledge circuits
@@ -44,6 +68,7 @@ MEDIUM    ${result.summary.MEDIUM}
 LOW       ${result.summary.LOW}
 INFO      ${result.summary.INFO}
 
+${renderDeepAnalysis(result)}
 ${result.issues.map(renderIssue).join("\n")}
 ${result.parserWarnings.length > 0 ? `Parser warnings: ${result.parserWarnings.length}\n` : ""}`;
 }

package/dist/report/terminal.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/report/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,eAAe,GAAgD;IACnE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;IAC9B,IAAI,EAAE,KAAK,CAAC,GAAG;IACf,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,EAAE,KAAK,CAAC,IAAI;IACf,IAAI,EAAE,KAAK,CAAC,IAAI;CACjB,CAAC;AAEF,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;QAC/D,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;YACpB,KAAK,CAAC,YAAY,IAAI,SAAS;;IAEvC,KAAK,CAAC,OAAO,IAAI,EAAE;;;EAGrB,KAAK,CAAC,WAAW;;;EAGjB,KAAK,CAAC,MAAM;;;EAGZ,KAAK,CAAC,YAAY;;;EAGlB,KAAK,CAAC,UAAU;CACjB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;;;UAG7B,MAAM,CAAC,MAAM;YACX,MAAM,CAAC,QAAQ;iBACV,MAAM,CAAC,YAAY;kBAClB,MAAM,CAAC,aAAa;gBACtB,MAAM,CAAC,MAAM,CAAC,MAAM;;;YAGxB,MAAM,CAAC,OAAO,CAAC,QAAQ;YACvB,MAAM,CAAC,OAAO,CAAC,IAAI;YACnB,MAAM,CAAC,OAAO,CAAC,MAAM;YACrB,MAAM,CAAC,OAAO,CAAC,GAAG;YAClB,MAAM,CAAC,OAAO,CAAC,IAAI;;EAE7B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EACzC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjG,CAAC"}
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/report/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,eAAe,GAAgD;IACnE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;IAC9B,IAAI,EAAE,KAAK,CAAC,GAAG;IACf,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,EAAE,KAAK,CAAC,IAAI;IACf,IAAI,EAAE,KAAK,CAAC,IAAI;CACjB,CAAC;AAEF,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;QAC/D,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;YACpB,KAAK,CAAC,YAAY,IAAI,SAAS;;IAEvC,KAAK,CAAC,OAAO,IAAI,EAAE;;;EAGrB,KAAK,CAAC,WAAW;;;EAGjB,KAAK,CAAC,MAAM;;;EAGZ,KAAK,CAAC,YAAY;;;EAGlB,KAAK,CAAC,UAAU;CACjB,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC;IAC5C,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,OAAO;;aAEI,OAAO,CAAC,KAAK;aACb,OAAO,CAAC,SAAS;aACjB,OAAO,CAAC,mBAAmB;aAC3B,OAAO,CAAC,OAAO;aACf,OAAO,CAAC,OAAO;;EAE1B,kBAAkB;SACjB,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CAAC,0BAA0B,UAAU,CAAC,OAAO;EAC9D,UAAU,CAAC,UAAU;;EAErB,UAAU,CAAC,gBAAgB;;EAE3B,UAAU,CAAC,cAAc;CAC1B,CACE;SACA,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;;;UAG7B,MAAM,CAAC,MAAM;YACX,MAAM,CAAC,QAAQ;iBACV,MAAM,CAAC,YAAY;kBAClB,MAAM,CAAC,aAAa;gBACtB,MAAM,CAAC,MAAM,CAAC,MAAM;;;YAGxB,MAAM,CAAC,OAAO,CAAC,QAAQ;YACvB,MAAM,CAAC,OAAO,CAAC,IAAI;YACnB,MAAM,CAAC,OAAO,CAAC,MAAM;YACrB,MAAM,CAAC,OAAO,CAAC,GAAG;YAClB,MAAM,CAAC,OAAO,CAAC,IAAI;;EAE7B,kBAAkB,CAAC,MAAM,CAAC;EAC1B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EACzC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjG,CAAC"}

package/dist/scanner.js

@@ -18,7 +18,7 @@ export async function scanTarget(target, options = {}) {
     const rustFiles = await loadRustFiles(target, config.ignore);
     const parsed = circomFiles.map((file) => parseCircomFile(file.filePath, file.rawSource));
     const halo2Parsed = rustFiles.filter((file) => isLikelyHalo2Source(file.rawSource)).map((file) => parseHalo2File(file.filePath, file.rawSource));
-    const result = auditParsedFiles(target, parsed, { ...config, failOn, format }, halo2Parsed);
+    const result = auditParsedFiles(target, parsed, { ...config, failOn, format }, halo2Parsed, options.deep ?? false);
     const output = renderReport(result, format);
     if (options.out || options.report) {
         const outPath = options.out ?? defaultReportPath(format);

package/dist/scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAS5D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,UAAuB,EAAE;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,MAAoB;IACpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,UAAU,CAAC;QAChB;YACE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,sBAAsB,CAAC;IACzD,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,yBAAyB,CAAC;IACzD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,wBAAwB,CAAC;IACvD,OAAO,uBAAuB,CAAC;AACjC,CAAC"}
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAS5D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,UAAuB,EAAE;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;IACnH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,MAAoB;IACpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,UAAU,CAAC;QAChB;YACE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,sBAAsB,CAAC;IACzD,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,yBAAyB,CAAC;IACzD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,wBAAwB,CAAC;IACvD,OAAO,uBAAuB,CAAC;AACjC,CAAC"}

package/dist/types.d.ts

@@ -6,6 +6,8 @@ export type AssignmentOperator = "<--" | "<==";
 export type ConstraintOperator = "===" | "<==";
 export type OutputFormat = "terminal" | "json" | "markdown" | "sarif";
 export type FrontendName = "Circom" | "Halo2" | "Mixed";
+export type ProofObligationType = "commitment_binding" | "nullifier_binding" | "merkle_root_binding" | "selector_booleanity" | "ec_multiplication" | "public_input_binding" | "range_constraint";
+export type RelationStatus = "satisfied" | "partially_satisfied" | "missing" | "unknown";
 export interface SourceLocation {
     file: string;
     line: number;
@@ -161,6 +163,7 @@ export interface AuditResult {
     summary: AuditSummary;
     issues: Issue[];
     parserWarnings: ParserWarning[];
+    deepAnalysis?: DeepAnalysisResult;
 }
 export interface ScanOptions {
     format?: OutputFormat;
@@ -168,4 +171,59 @@ export interface ScanOptions {
     out?: string;
     failOn?: Severity;
     configPath?: string;
+    deep?: boolean;
+}
+export interface ProofObligation {
+    id: string;
+    type: ProofObligationType;
+    subject: string;
+    requiredInputs: string[];
+    expectedRelation: string;
+    relatedSignals: string[];
+    confidence: Confidence;
+    sourceLocation: SourceLocation;
+}
+export interface RelationCheckResult {
+    obligationId: string;
+    status: RelationStatus;
+    evidence: string[];
+    missing: string[];
+    explanation: string;
+}
+export interface TaintFlowPath {
+    id: string;
+    source: string;
+    sink: string;
+    path: string[];
+    constrained: boolean;
+    support: string[];
+    risk: "untrusted_to_output" | "public_binding_without_relation" | "ec_unconnected_coordinate";
+    confidence: Confidence;
+    sourceLocation?: SourceLocation;
+}
+export interface ExploitHypothesis {
+    issueId: string;
+    relatedObligationId?: string;
+    hypothesis: string;
+    attackerControl: string;
+    brokenAssumption: string;
+    possibleImpact: string;
+    validationSteps: string[];
+    patchDirection: string;
+    confidence: Confidence;
+}
+export interface ProofObligationSummary {
+    total: number;
+    satisfied: number;
+    partially_satisfied: number;
+    missing: number;
+    unknown: number;
+}
+export interface DeepAnalysisResult {
+    enabled: true;
+    proofObligations: ProofObligation[];
+    relationChecks: RelationCheckResult[];
+    proofObligationSummary: ProofObligationSummary;
+    taintFlows: TaintFlowPath[];
+    exploitHypotheses: ExploitHypothesis[];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trynullsec/s1-zk",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Nullsec S1-ZK: AI-native auditing for zero-knowledge circuits.",
   "type": "module",
   "bin": {