PUBLIC DISPLAY COPY — participant names replaced by numeric aliases.
Cryptographic contribution hashes are unchanged. Original names remain in the downloadable zkey.
Independence is based on coordinator-recorded attestations; it is not proved by snarkjs.
Canonical transcript sha256: 010e92d7af1ed6f36a9f559d3b2ef9f5ffa267697d55836c78b66b2b9fe8f4dd

XMR ROOTS private vault - phase-2 trusted setup transcript (Groth16, BN254)
VERDICT: VALID

Circuit         sell, 10 public inputs
  r1cs sha256   8196b2f54db5c0c915d5fe9b0aa0c98a9c91b288fd92dd00f550f751a3394525
  wasm sha256   3e2ce3b9ab03247c744a4138f6342ed9963a089cc59e24892a3715ef15219dd7
  circuit hash  893c9aa2b4fbf8490093be6a717f5882e3d7ef36a135ca6acf9a7fa7280ef0080a30772d657cba90efd87a623d5e4508118cd65a9f21897902229c6fc3698ea8
Phase 1         powersOfTau28_hez_final_13.ptau
  blake2b-512   58efc8bf2834d04768a3d7ffcd8e1e23d461561729beaac4e3e7a47829a1c9066d5320241e124a1a8e8aa6c75be0ba66f65bc8239a0542ed38e11276f6fdb4d9
  sha256        95751b5207f20aa822f01109902315c01c15250303feacea2b8aa7dc9fdfeefd
  source        https://circom.info/powersOfTau28_hez_final_13.ptau (Hermez / Polygon phase 1, listed in the snarkjs README)
Check           snarkjs 0.7.6 zKey.verifyFromR1cs (snarkjs zkey verify): OK
Initial zkey    sha256 d36afbae6eb46f2eb954f502bcb79a0f4fc23b2cdf5769b94dc1b24b3b8c32f8

Contributions   3 independent (minimum 3), beacon not counted
  #1 "Participant 001"
      82c7e86a 1c0350a1 93950732 97c8f9e4
      59385123 734d60d9 1249dac3 4eaa7dce
      82c11e6e 163b744e 95564344 cc53751f
      3575b27f 5f0b2377 df19f44d a9e308c8
  #2 "Participant 002"
      b90c6bf9 af6d00e8 9bb74515 cc26668d
      fea0dae9 f2584e7d d58f6314 03affe68
      0e677db4 6f1a0559 7d34e4d5 e81a1443
      34d84996 ab8653dc a789b3ee abfe7bb8
  #3 "Participant 003"
      97a4dd3d 3e62e59d 4b3660e0 f01a0224
      0e1a4fdc 08b4109b 61dd808e 02f28a0a
      8d8b5a2e 06beb09f 088b4360 706a41c8
      af3cd6c2 153974ed 450b5493 8438772f
  #4 "Participant 004" [not independent]
      8312d93f 1b28aa4a 26857cd2 212dc6ad
      849d54b3 b922d102 98470a17 bf612fb5
      c4857a60 df3e9999 1e66b4c2 df858ef3
      7a7e2701 55a85ad8 a9f03d07 a549ec35
  #5 "Participant 005" [not independent]
      24065b75 65af14db 0e86376b 9bdd9ac8
      f18baebd 2c165619 08bf4531 079eb687
      dd32e7ed 450792f7 36e215f2 7b777fc3
      9cb4aef4 90b204e0 1752a8d1 027672d4
  #6 "Bitcoin beacon" [BEACON]
      6f4a1fb5 f8b0e630 5aead30c 4ec1d0b9
      d4b6d2d9 61d39a8f bb812d1c 25d794ce
      689af432 1f3e4e23 e2505298 8c652817
      210f3872 67f862fe bd6ce51f 21f525fc
      beacon hash 000000000000000000016bc2565d8b263bc580cc0cb1a00cc22b9c4c745bba7d, 2^10 iterations

Beacon          Bitcoin block 973749 (announced 2026-10-29T22:09:35.681Z, tip then 973746)
  block hash    000000000000000000016bc2565d8b263bc580cc0cb1a00cc22b9c4c745bba7d
  checked       mempool.space+blockstream.info
Final zkey      sha256 43e140611b525c063b787f66ea3192591f82a3de684fecb39d4db384b521d323
Verifying key   sha256 0b5605af087a9e5fcb40ee7b50d4086993364e40da1f68b4184a1102a54dc7d3 (verification_key.json)

Anyone can re-check: snarkjs zkey verify sell.r1cs <ptau> sell_final.zkey prints the same contribution hashes.