{
 "labelling": "PUBLIC-DATA DEMONSTRATION OF THE PRIVATE PROTOCOL",
 "statement_version": "MEDEVAL-HELDOUT-STATEMENT-v2",
 "what_this_is": "zero-knowledge proofs that published held-out scores are the correct output of the pinned metric over every case in the sealed set, against the labels sealed before submissions opened. No case, no label and no individual prediction is revealed by any file here.",
 "how_to_check": [
  "cd zk && cargo build --release -p medeval-host",
  "cd zk/guest && cargo prove build       # must reproduce guest_elf_sha256",
  "zk/target/release/medeval-zk verify --proof <artefact> --emit-public /tmp/public.json",
  "python src/verify_zk_proof.py /tmp/public.json --seal results/heldout/manifests/<gen>.seal.json --ledger results/heldout/ledger.jsonl"
 ],
 "why_two_verifiers": "the first says the proof is valid and came from this program; the second says the statement it proves is about a score this ledger published. A flawless proof about a different generation passes the first and fails the second, which is why both are required.",
 "proofs": [
  {
   "fixture": "B__gen1__hog_logreg__5ac1e077.json",
   "statement": "B",
   "statement_version": "MEDEVAL-HELDOUT-STATEMENT-v2",
   "decomposition": {
    "shard_leaves": 256,
    "n_shards": 6,
    "shard_vkey": "0x00a9126604d5f474ef67b0584c483d780a34ebc1ff5164ee0fa003f869f691c7",
    "shard_elf_sha256": "415d31823bded9a5f3d6595e886e5ec570c9a6659c9cf64d8852b2ed782c8216"
   },
   "generation": "gen1",
   "slice": null,
   "n_cases": 1400,
   "score_points": 54.011608,
   "proof_file": "results/heldout/proofs/B__gen1__hog_logreg__5ac1e077.proof.bin",
   "artefact": "results/heldout/proofs/B__gen1__hog_logreg__5ac1e077.json",
   "public_inputs": "results/heldout/proofs/B__gen1__hog_logreg__5ac1e077.public.json",
   "vkey": "0x00913f8e7f2eae887465d43a176c1b640584da21421b954f91edfbba79565004",
   "guest_elf_sha256": "1e22d739b83b9a60f02fee33ad3a9ec3e48ec8635d5f3df8a05222bb35ede579",
   "proof_bytes": 1272759,
   "prove_seconds": 324.3,
   "verify_seconds": 8.1
  },
  {
   "fixture": "C__heart1__female_55_plus.json",
   "statement": "C",
   "statement_version": "MEDEVAL-HELDOUT-STATEMENT-v2",
   "decomposition": null,
   "generation": "heart1",
   "slice": "female_55_plus",
   "n_cases": 200,
   "score_points": 69.791667,
   "proof_file": "results/heldout/proofs/C__heart1__female_55_plus.proof.bin",
   "artefact": "results/heldout/proofs/C__heart1__female_55_plus.json",
   "public_inputs": "results/heldout/proofs/C__heart1__female_55_plus.public.json",
   "vkey": "0x00b3ccbd93ab9b77948818ed9b52960592abdc4c926c51c73742d95aab6ad12a",
   "guest_elf_sha256": "72b3ce791ada851866d735552545695b10b3f6b6c87bd5a6d91b283691dd607d",
   "proof_bytes": 1272871,
   "prove_seconds": 59.5,
   "verify_seconds": 8.3
  }
 ]
}