ZK proving system selection for the credential engine

[jotel-dev]

The original product vision includes an anonymous, single-use access credential system verified on-chain. Research which ZK proving system/circuit language fits best given Soroban's BN254 host function constraints (g1_msm, pairing_check) — Noir/UltraHonk (used in the original prototype), Circom, or alternatives.

Deliverable: A written comparison covering circuit complexity, Soroban verification cost, and tooling maturity, with a clear recommendation.

[Trovic1]

can i work on this issue

[aabxtract]

Allow

[grantfox-oss]

🦊 GrantFox — @Trovic1 has been assigned to this issue as part of the Official Campaign | FWC26 campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #32)
2. Your PR will be reviewed by the Nullifier-Systems maintainers

Good luck! Track your progress on GrantFox.