Runs in apps, websites, institutions.

Given:

The verifier checks:

  1. Is the signature correct?
  2. Is the proof valid?
  3. Does the proof match the current state_commitment?
  4. Has the key been revoked?
  5. Does the identity_root exist?
  6. Does the template equal what was requested?

If all true → verification passes.