Zero-Knowledge Agents

Private Transfer — Noir Circuit

ZKA transfer proofs are written in Noir, verified on-chain in <300k gas:

// zka_transfer/src/main.nr

fn main(
    // === Public Inputs ===
    nullifier: pub Field,
    output_commitment: pub Field,
    merkle_root: pub Field,
    context: pub Field,
    asset_commitment: pub Field,

    // === Private Inputs (hidden) ===
    input_value: u64,
    input_recipient: Field,
    input_randomness: Field,
    spending_key: Field,
    merkle_index: u32,
    merkle_siblings: [Field; 32],
    output_value: u64,
    output_recipient: Field,
    output_randomness: Field,
) {
    // 1. Verify input note exists in commitment tree
    let input_commitment = compute_commitment(/*...*/);
    assert(verify_membership(input_commitment, merkle_index,
                             merkle_siblings, merkle_root));

    // 2. Verify nullifier correctness
    assert(nullifier == compute_nullifier(input_commitment, spending_key));

    // 3. Verify ownership
    assert(input_recipient == derive_address(spending_key));

    // 4. Value conservation — no creation, no destruction
    assert(input_value == output_value);
    assert(output_value > 0);
}

Compiled via nargo compile. Solidity verifier auto-generated via nargo codegen-verifier. Browser proving via NoirJS + Barretenberg WASM.