alignedlayer

A zkVM does not prove that it ran your program. It proves that a record of the run satisfies a list of constraints. What a constraint is, why a polynomial can stand for "this is a bit", and one chip of Lambda VM, built with LambdaClass and 3MI Labs, read line by line in the spec and in the code.

A STARK's security rests on one hash function and nothing else, and recursion turns that hash into the dominant cost. Why Keccak is cheap to run and expensive to prove, why algebraic hashes are the opposite, what other zkVMs chose, and where Lambda VM, built with LambdaClass and 3MI Labs, stands.